Privacy Policy – llyk.app

LLYK Privacy Policy

Last Updated: May 30, 2025

Introduction

LLYK (“LLYK”, “we” or “us”) provides software that helps online businesses run engaging marketing campaigns and giveaways. This Privacy Policy governs how LLYK collects, uses, maintains and discloses information from users of our platform and services.

We comply with applicable Indian privacy laws including the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

Information We Collect

For Customers and Website Visitors

Registration Information: Name, username, email, address, phone number
Payment Information: Credit card details, billing address, transaction data
Technical Information: IP address, browser data, device information, usage analytics
Third Party Data: Information from social media platforms and advertising interactions

For Campaign Participants

LLYK is a consent-based platform. We only process participant data after explicit consent is provided.

Basic Information: Name and email address (required for most campaigns)
Custom Fields: Additional information like date of birth for age verification
Social Account Data: Profile information from connected social media accounts
IP Addresses: Collected anonymously (last octet removed) for fraud detection

Facebook/Instagram Data Collection

When you connect your Facebook or Instagram account to participate in campaigns:

Profile Information: Name, email, profile picture, and public profile data
Friends/Followers: Public friends list or follower count (if required by campaign)
Page Data: Information about pages you manage (for business campaigns)
Posts/Content: Public posts or content you choose to share (only when explicitly consented)

We only access information you’ve made public or specifically granted permission to access. We never post to your accounts without explicit permission for each action.

How We Use Your Information

Website Users and Customers

Administer our platform and provide customer support
Process payments and manage subscriptions
Improve our services through analytics
Send service updates and newsletters (with consent)

Campaign Participants

Process campaign entries and verify eligibility
Detect fraud and prevent abuse
Provide customer support
Generate anonymized usage statistics

Facebook/Instagram Data Usage

Campaign Entry Verification: Verify social media actions (likes, follows, shares) required by campaigns
Fraud Prevention: Detect fake accounts and prevent multiple entries
Prize Fulfillment: Contact winners through their preferred social platform
Analytics: Generate campaign performance reports (anonymized data only)

We do not use your Facebook/Instagram data for advertising purposes or share it with third parties beyond the specific campaign owner you consented to.

Information Sharing

We do not sell personal information.

Campaign Data: Participant information is shared only with the business running that specific campaign
Service Providers: We may share data with trusted third-party providers (AWS, Stripe, email services, Meta/Facebook APIs) to operate our platform
Social Media Platforms: When you connect social accounts, we interact with Facebook/Instagram APIs to verify actions and retrieve authorized information
Legal Requirements: We may disclose information when required by law or to protect our rights and users’ safety

Facebook/Instagram Data Sharing

Your Facebook/Instagram data is only shared with the specific campaign owner you explicitly consented to
We never share your social media data with other campaigns or third parties
Meta/Facebook receives technical data necessary to provide API services
You can revoke access to your social accounts at any time through Facebook/Instagram settings

Data Security

All data is encrypted in transit (SSL) and at rest (AES-256)
Payment processing through Stripe (PCI compliant)
Regular security audits and monitoring
Immediate notification of any security breaches

Your Rights

You have the right to:

Access your personal information
Correct inaccurate data
Delete your account and data
Opt-out of communications
Data portability

Facebook/Instagram Data Rights

Disconnect Social Accounts: Remove Facebook/Instagram connections at any time
Revoke Permissions: Manage app permissions through Facebook/Instagram settings
Data Access: Request information about what social media data we’ve collected
Data Deletion: Request deletion of your social media data from our systems

To exercise these rights, contact us at privacy@llyk.io or manage permissions directly through your Facebook/Instagram account settings.

Cookies and Tracking

We use cookies to:

Maintain user sessions
Track campaign referrals
Prevent fraud through device fingerprinting
Improve user experience

You can disable cookies in your browser, though some features may not work properly.

International Data Transfers

Data is primarily processed and stored in India. When data is transferred internationally, we ensure appropriate safeguards are in place in accordance with Indian data protection laws.

Children’s Privacy

LLYK does not knowingly collect information from children under 13. If we discover we have collected such information, we will promptly delete it.

Data Retention

Campaign data is retained as determined by the campaign owner
Account data is deleted when accounts are terminated
Suspended accounts may be retained up to 10 years for enforcement purposes
Facebook/Instagram Data: Social media data is retained only as long as your account remains connected. When you disconnect or delete your account, social media data is permanently deleted within 30 days

Changes to This Policy

We may update this policy periodically. Continued use of our services constitutes acceptance of any changes.

Contact Us

For privacy questions or concerns:

Email: privacy@llyk.io
Address: Door No. 32/1341, Third Floor, Mashreq Trade Centre, Calicut Road, Perintalmanna, Kerala 679322, India

This privacy policy ensures transparency in our data practices while protecting user privacy and complying with applicable laws.