Skip to content

Privacy policy

What we collect, why, who handles it for us, how long we keep it, and what you can do about it.

Last updated October 26, 2026.

1. Who we are

Slynnk ("we") provides software that measures what AI tools say about brands. For the data described here we are the controller of account and website data, and the processor of the client and brand data that agencies and brands put into the product. Contact: hello@slynnk.com.

2. What we collect

  • Account data: your name, email address, sign-in method (email link or Google) and the team you belong to.
  • Workspace data you enter: client and brand names, websites, competitors, prompts and notes, team members' emails, branding (name, logo, colour).
  • Tracking data we generate: the answers AI tools gave to your prompts, the sources they cited, our derived mentions and readings, tasks, drafts and reports.
  • Billing data: handled by Dodo Payments. We receive your plan, billing status and a customer reference, not your card number.
  • Free scan data: the website, brand and question you enter, a random browser identifier in a cookie, and a one-way hash of your IP address used to limit abuse.
  • Technical data: IP address and device details in server logs and sessions, used for security and reliability.

3. Why, and on what basis

  • To provide the service you asked for (contract): tracking, reports, fixes, billing, support.
  • To keep it secure and prevent abuse (legitimate interests): rate limiting, bot protection, audit of admin actions.
  • To email you about your account and, unless you switch them off, the weekly digest and alerts (contract and legitimate interests). Each such email has an unsubscribe link.
  • To measure how the product is used, only if you allow analytics cookies (consent).

We do not sell personal data. We do not use your clients' data to train models.

4. Cookies

We use essential cookies to keep you signed in and to run the free scan (one per visitor). Analytics cookies are off unless you choose to allow them in the banner. You can change your choice at any time by clearing this site's data.

5. Who processes data for us

These providers process data on our behalf:

  • Supabase: Database hosting (all account and tracking data).
  • Vercel: Web application hosting.
  • Oracle Cloud: Background worker (collection, analysis, PDF reports).
  • Dodo Payments: Payment processing and subscription billing (merchant of record).
  • Resend: Transactional and notification email.
  • cloro: Collecting AI answers for the prompts you track.
  • Bright Data: Collecting AI answers for free scans and as a backup collector.
  • Anthropic: Reading stored answers (sentiment, perception) and drafting fixes, when enabled.
  • OpenAI: Optional ChatGPT API cross-check, when enabled.
  • Cloudflare Turnstile: Bot protection on the free scan.
  • Sentry: Error reports, when enabled (no customer content is sent on purpose).
  • PostHog: Product analytics, only if you allow analytics cookies.

The prompts you track are sent to the AI collection providers so they can ask them. Prompts should not contain personal data.

6. How long we keep it

  • Account and workspace data: until you delete it or your organization, then removed from live systems promptly and from backups within 35 days.
  • Pitch audit data about a prospect: deleted 30 days after the audit.
  • Free scans: the scan result is kept for sharing the link; the IP hash is kept for 30 days.
  • Webhook records from payment and collection providers: 90 days after processing.

7. Your rights

You can access, correct, export and delete your data. Download everything from Team and settings, then Your data. Delete your account there too. For anything else, or to complain, write to hello@slynnk.com. If you are in the EU, UK or similar, you also have the right to complain to your data protection authority, to object to processing based on legitimate interests, and to withdraw consent.

8. Transfers and security

Some providers are outside your country. Where required we rely on standard contractual clauses or equivalent safeguards. Data is encrypted in transit; access is limited by role; webhooks are signature-checked; share links are stored only as hashes.

9. Changes

If we change this policy in a way that matters, we will tell account owners by email before it applies.