Privacy Policy

Last updated: November 2026 · Linvas Privacy Notice

1. Information We Collect. Linvas uses passwordless OAuth 2.0 sign-in (Google and GitHub). We store your OAuth provider identifier (provider, provider_subject), your display name, your email address as verified by Google or GitHub, and the workspaces, boards, saved URLs, notes, groups, tags, and connections you create. Your email is used only to keep one account per email address — signing in with another provider that confirms the same email opens the same account — and to answer you if you contact us. We do not send marketing emails and do not share your email with third parties. The operator of Linvas can see account-level information (email, sign-in method, plan, number of boards, links and cards, board names, and activity dates) in an internal admin panel, used only for support, moderation, and improving the product; the contents of private boards are not reviewed unless a board is reported or a legal request requires it.

2. Saved URLs & Metadata Fetching. When you save a URL, our server-side metadata worker requests the target page solely to extract its title, description, and favicon. Private and local network addresses are blocked by SSRF protection. We never sell or share your saved links or notes with advertising networks or data brokers.

3. Anonymous Product Analytics. To understand core product usage, we record product events as a name and a time only — for example signed_in, created_board, resource_saved, bookmarks_imported, global_search_used, board_published. We use them in aggregate (active users, retention, which features are used). Analytics never contain your URLs, titles, notes, tags, search queries, or email, and are not shared with third-party analytics or advertising services.

4. Data Retention & Free Inbox TTL. On the Free plan, unsorted links in the Inbox are automatically deleted after 24 hours unless placed on at least one board. Due to PostgreSQL MVCC storage architecture, physical disk reclamation occurs during routine database maintenance, and encrypted backups are rotated according to our backup retention schedule.

5. Data Export & Account Deletion. You can export all of your data in JSON or CSV format or permanently delete your account at any time from the account menu in the sidebar. Deleting your account immediately cascades and removes all your boards, resources, cards, and active sessions.

6. Contact. For privacy, export, or data deletion inquiries, contact us at privacy@linvas.app.