Privacy Policy

1Introduction

OneLinkHQ ("OneLinkHQ", "we", "us", or "our") provides a bio-link and online presence platform that lets creators, freelancers, agencies and businesses manage links, analytics, payments, bookings and communication tools from a single page.

This Privacy Policy explains what information we collect when you use OneLinkHQ, how we use it, who we share it with, and the choices you have. By creating an account or using onelinkhq.com, you agree to the practices described here.

2Information We Collect

We collect information in three ways: information you give us directly, information generated automatically as you use the platform, and information from your visitors interacting with your public page.

• Account information — name, email address, password (encrypted), and profile details you add such as bio, links, theme choices and uploaded images.
• Usage & analytics data — page views, link clicks, approximate location (derived from IP address, not GPS), device type and browser, used to power your dashboard analytics.
• Content you create — links, product listings, appointment slots, lead-capture form fields, and email templates you configure.
• Visitor data — if you enable lead collection, appointment booking, or product checkout on your page, we process the information your visitors submit (e.g. name, email, phone) on your behalf.
• Support communications — messages you send us for help or feedback.

3How We Use Your Information

• To create and operate your account, and display your public page to your visitors.
• To generate the analytics, reports and dashboards shown to you.
• To process payments, bookings, and product or lead form submissions you've set up.
• To send transactional messages — booking confirmations, payment receipts, security alerts.
• To send optional automated emails you've configured yourself (e.g. welcome sequences) to your own leads.
• To maintain platform security, detect abuse, and comply with legal obligations.
• To improve OneLinkHQ's features based on aggregated, non-identifying usage patterns.

We do not sell your personal data, or your visitors' data, to third parties.

4Third-Party Integrations

Certain OneLinkHQ features are optional and connect to third-party platforms only if you choose to enable them. This includes payment processing, email delivery (SMTP), and social integrations such as Instagram and WhatsApp.

Permissions We Request from Meta Platforms

When you connect Instagram or WhatsApp to OneLinkHQ (once these integrations are approved and active on your account), we may request the following permissions from Meta, used strictly for the purpose stated:

• instagram_basic — to display your connected Instagram account details on your dashboard.
• instagram_manage_comments / instagram_manage_messages — to send automated replies you've configured to comments and direct messages.
• pages_show_list / pages_messaging — to identify your connected Facebook Page and send messages through it where applicable.
• whatsapp_business_messaging — to send and receive messages through your connected WhatsApp Business number.

We do not request or use any permission beyond what is required for the specific automation feature you enable. These permissions remain inactive until Meta has reviewed and approved the relevant app features, and until you have explicitly connected your account.

Data Deletion Instructions

If you have connected an Instagram or WhatsApp Business account to OneLinkHQ and would like any data obtained through that connection to be deleted, you can:

• Disconnect the integration directly from your OneLinkHQ dashboard settings, which removes the associated access token immediately, or
• Email support@onelinkhq.com with the subject line "Data Deletion Request" along with your account email. We will confirm and complete deletion of the associated data within 30 days.

When an integration is active, we only share the minimum data required for that feature to function (for example, sending a reply through a connected messaging account), and only with your explicit setup and consent.

5Payments & Financial Data

OneLinkHQ does not store your full card, UPI PIN, or bank credentials on our own servers.

Once our Razorpay integration is fully live, payments will additionally be processed through Razorpay's PCI-DSS compliant infrastructure, and this policy will be updated accordingly before that change takes effect.

For details on cancellations and refunds related to manual UPI payments, see our Refund Policy.

6Cookies & Tracking

We use essential cookies to keep you logged in and remember basic preferences (such as selected language). We do not use third-party advertising cookies or cross-site tracking pixels.

Analytics on your public page are collected using our own first-party tracking, not third-party ad-tech trackers.

7Data Retention

• Account and profile data is retained for as long as your account is active.
• If you delete your account, your public page and personal data are removed within a reasonable period, except where we're required to retain records (e.g. payment/tax records) by law.
• Payment verification records (UTR numbers, screenshots) are retained only as long as required for accounting and dispute resolution.
• Analytics data is aggregated over time; raw visitor-level records are not retained indefinitely.

8Data Security

• Passwords are hashed and encrypted — never stored or visible in plain text.
• Access to production data is restricted to authorized personnel only.
• We apply regular updates and security patches to the platform.
• No method of transmission or storage is 100% secure; we work to apply industry-standard safeguards but cannot guarantee absolute security.

9Your Rights & Choices

You can access, update, or delete most of your account information directly from your dashboard. You may also contact us to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data, subject to legal retention requirements.
• Opt out of non-essential communications from OneLinkHQ at any time.

10Children's Privacy

OneLinkHQ is not directed at children under 13, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal data, please contact us so we can remove it.

11International Users

OneLinkHQ is operated from India and primarily serves users in India, though our platform is accessible globally. If you access OneLinkHQ from outside India, your information may be processed in India, in accordance with this policy.

12Changes to This Policy

We may update this Privacy Policy as OneLinkHQ evolves — for example, as new integrations like Razorpay go live. Material changes will be reflected by updating the "Last updated" date at the top of this page, and where appropriate, we'll notify you directly.

13Contact Us