What we keep, and what we do not.

GoLinq.me is made by Prizma Digital in Kathmandu, Nepal. When this page says “we”, it means Prizma Digital; when it says “your page”, it means the public GoLinq.me page at your handle.

It covers both sides of the product: you, the person with an account, and the visitor who lands on your page.

• Your account: your email, a hashed password (we never store the password itself), your name and photo if you add them, your plan and when it expires.
• Your page: everything you put on it — your bio, links, hours, prices, images, and the trade template and look you chose. All of it is public by design; that is what a page is for.
• Your contacts: the people who fill in the form on your page, anyone you add yourself, and anyone you import from your phone or from Google. Names, numbers, emails, notes, important dates.
• Your own private things: notes, tasks, calendar entries, journal entries, and the loans and EMIs you track. These are yours and are not shown to anybody else.
• Analytics: page views, QR scans and link presses. Each event stores the time, a browser user-agent string, and a salted SHA-256 hash of the visitor's IP address — not the address itself. The hash is there to tell one visitor from two, and it cannot be turned back into an IP.
• Payments: what you paid, when, which method, and the reference the gateway gave us. Card numbers and wallet PINs go to eSewa, Khalti, Fonepay or the card processor directly — they never reach our servers.

We do not sell your data, your contacts or your visitors' data. Not to advertisers, not to data brokers, not to anyone. There is no arrangement under which this could happen, because selling contacts would destroy the only reason to trust a contacts product.

We do not use your contacts to advertise to them, and we do not email them on your behalf unless you asked us to.

We do not put third-party advertising or tracking pixels on your page.

GoLinq.me can connect to your phone's address book, to Google Contacts, and to a Prizma360 workspace. A connection does nothing on its own: after you connect, you pick — contact by contact, note by note — what actually syncs.

Anything you have not selected stays in GoLinq.me. You can see what was sent and when in the sync log, turn any item off later, or disconnect the service entirely.

Connecting to Google means granting access through Google's own consent screen. We ask only for the contacts permission we need, and disconnecting revokes what we hold.

Someone who just looks at your page leaves an analytics event: the time, their user-agent, and the hashed IP described above. Nothing that identifies them personally.

Someone who fills in your enquiry form knowingly hands over the details they typed — that is the point of the form — and those details become a contact belonging to you. If you have connected a Prizma360 workspace and chosen to sync, that contact goes there too.

Your contacts export as a vCard (.vcf) or a CSV from the contacts screen, whenever you want, without asking us. A vCard imports straight into iPhone, Android, Google Contacts and Outlook.

Your page is public, so everything on it is already yours to copy.

If you want a copy of anything else we hold about you, write to support@golinq.me and we will put it together.

You can delete your account yourself from settings; we ask for your password first, because deletion cannot be undone.

Deleting removes your account, your pages, your contacts, your notes, tasks, journal entries and loans from our database, and deletes the images you uploaded from our file storage. Your handle is released and your page stops resolving.

Two things survive, and only these: payment records we are required to keep for accounting, and anything you had already synced into a service you own — a contact that reached your Google account or your Prizma360 workspace lives there now, and only you can remove it from there.

Your data sits in GoLinq.me's own PostgreSQL database, separate from Prizma360's. Access is limited to the small number of people at Prizma Digital who run the service.

An administrator can, in the course of support, see account-level information and can view the service as your account to diagnose a problem. Every such action is written to an audit log with who did it and why.

The app keeps your sign-in token in your browser so you stay signed in, and remembers small interface preferences. That is the extent of it: no advertising cookies, no cross-site tracking, and nothing that follows you off the site.

If we change something that materially affects what we hold or who we send it to, we will say so here and update the date at the top of the page.

Questions about any of this: support@golinq.me, or the contact form.