Privacy Policy

1. Overview

ThruuLink ("we", "us", or "our") operates the thruu.link website and service.

ThruuLink allows users to create a public landing page containing links and content they choose to share.

This Privacy Policy explains how we collect, use, and protect your information when you use our service.

We only collect the minimum information necessary to provide and operate the ThruuLink service.

2. Information We Collect

2.1 Instagram Account Data

When you sign in using Instagram authentication, we receive limited account information from Instagram via Meta's OAuth system.

This may include:

• Instagram user ID (used as your unique identifier)
• Username
• Display name
• Profile picture
• Account type

This information is used only to create and manage your ThruuLink account.

ThruuLink does not:

• post to your Instagram account
• access your followers list
• access your messages
• access private media

2.2 User-Created Content

When using ThruuLink, you may create and manage content including:

• Links added to your page (titles, URLs, thumbnails, tags)
• Profile information (bio, social links)
• Page design preferences (theme, colors, layout)
• ThruuLink username chosen during onboarding

Content you publish on your ThruuLink page may be publicly accessible on the internet.

2.3 Click Analytics Data

To provide analytics for your links, we collect limited technical data when visitors interact with your page.

This may include:

• IP address (stored only as an irreversible hash)
• Device type, browser, and operating system
• Approximate geographic location (country, region, city)
• Referrer URL or traffic source
• UTM parameters if present
• Timestamp of the click

Raw IP addresses are not stored. IP addresses are immediately hashed and cannot be reversed to identify individuals.

3. How We Use Your Information

We use collected information to:

• Authenticate users via Instagram login
• Create and manage user accounts
• Display your public ThruuLink page
• Provide link analytics and traffic insights
• Generate and track short links
• Maintain, improve, and secure the service

We do not sell or rent personal data.

4. Third-Party Services

We use trusted infrastructure providers to operate the service:

• Meta (Instagram) — authentication provider
• Supabase — database infrastructure
• Cloudflare R2 — image storage
• Vercel — application hosting and deployment

These providers process data only as necessary to deliver the service.

5. Data Storage and Security

Your data is stored using secure infrastructure.

Security measures include:

• Encrypted HTTPS connections
• Database access controls
• Row-level security policies
• Restricted service access

We take reasonable steps to protect user information from unauthorized access or disclosure.

6. Data Retention

We retain user data for as long as your account remains active.

Click analytics data may be retained to provide historical insights for your links.

You may request deletion of your account and associated data at any time.

7. Data Deletion

You may delete your ThruuLink account at any time from the Settings page in your dashboard.

When an account is deleted, the following data is permanently removed:

• Profile and account information
• All created links
• Click analytics data
• Generated short links
• Stored profile images

If you remove the ThruuLink app from your Instagram account settings, we will process a data deletion request associated with your account.

You can request or check the status of a deletion request at: thruu.link/data-deletion

8. Cookies

ThruuLink uses only essential cookies required for:

• Authentication (session tokens)
• Language or locale preferences

We do not use advertising cookies or third-party tracking cookies.

9. International Data Transfers

Your information may be processed on servers located outside your country of residence.

We take reasonable measures to ensure data is protected in accordance with applicable laws.

10. Children's Privacy

ThruuLink is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, it will be deleted.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are significant, we will update the revision date at the top of this page.

12. Contact

If you have questions about this Privacy Policy, please contact: privacy@thruu.link