Privacy Policy

This Privacy Policy explains what personal data ZUDOKO ("we," "us") collects through QukLink, why, and how you can control it. It applies to everyone who visits a public QukLink profile or creates an account. It should be read together with our Terms of Service and Cookie Policy.

Account information — email address; a password hash (never the plaintext password); if you sign in with Google, your Google account ID and the email address on that account.

Profile information you provide — display name, username, bio, profession, location, avatar and cover images, social links, custom call-to-action buttons/URLs, and custom domains.

Content you create — activity posts, links, shop product listings, and digital file downloads.

Messages — if you contact a creator through their profile, we store the message content and contact details provided.

Usage & analytics data — when someone views a profile or clicks a link/product, we log: the visitor's IP address, country/city, coarse device type, browser, referring website, and timestamp.

Security & moderation logs — administrative actions and rate-limiting metrics are logged with the admin's ID, action details, and IP address.

Cookies — see our Cookie Policy for the full list.

• To create and secure your account, and authenticate your sessions.
• To display your public profile, activities, links, and Shop listings to visitors.
• To send transactional emails: account verification, password reset, and admin sign-in links.
• To operate the in-app messaging feature between visitors and creators.
• To generate the analytics dashboard shown to you about your own profile's traffic.
• To detect abuse, enforce rate limits, and investigate security incidents.
• To process Premium subscription billing and Shop checkout via Dodo Payments & Stripe.

We use essential cookies to keep you signed in, plus (only with your consent, via the cookie banner) analytics for aggregate usage insights. Full details, including exactly which cookies exist and how to change your preference at any time, are in our Cookie Policy.

We share data with the following providers strictly to operate the Service — none of them are permitted to use your data for advertising purposes:

• Google Analytics — aggregate traffic and behavior analytics across the Service.
• Microsoft Clarity — session-replay and heatmap analytics to help us improve the product.
• Google OAuth — if you choose "Sign in with Google," Google authenticates you and shares your account ID and email with us.
• ZeptoMail (Zoho) — delivers transactional emails (verification, password reset, admin sign-in).
• Bunny.net — stores and serves optimized uploaded images and media via a global CDN.
• Dodo Payments & Stripe — process Premium subscription billing and Shop digital product checkout. We do not receive or store full card details.
• Sentry — monitors application performance and captures application error traces to ensure high uptime and security.
• Upstash (Redis) — powers rate-limiting; stores short-lived counters keyed by IP address or account ID.
• MongoDB Atlas — primary database host.

We do not sell your personal data. We share it only with the service providers listed above (to operate the Service), with law enforcement or regulators where legally required, or in connection with a merger, acquisition, or asset sale (in which case we will notify affected users). Your public profile content (whatever you choose to publish) is, by design, visible to anyone with your profile link.

We keep your data for as long as your account is active. If your account is removed (by you via a support request, or by us for a Terms violation), your account, profile, and activity posts are deleted; some records — including analytics events, messages you sent to others, and administrative audit logs — may not be automatically deleted and can persist afterward. Full detail is in our Data Retention & Deletion Policy.

• Access & correction — most of your profile information can be viewed and edited directly in your dashboard at any time.
• Deletion — email support@quklink.com to request account deletion; there is currently no in-app self-service delete button.
• Cookie choices — use the "Cookie Settings" link in the footer at any time to change your analytics-cookie consent.
• Email opt-out — not currently applicable, as we only send security-critical transactional emails (see Section 3).
• Depending on where you live, you may have additional rights (e.g. under GDPR or India's DPDP Act) to request a copy of your data or object to certain processing — contact us and we will respond within a reasonable time.

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will remove it.

Our infrastructure providers (MongoDB Atlas, Bunny.net, Upstash, Stripe, Google, Microsoft) may process and store data outside your home country. By using the Service, you consent to your data being transferred to and processed in those locations.

We use industry-standard measures — including password hashing, asymmetrically-signed session tokens, HTTPS/HSTS, a strict Content Security Policy, and rate limiting — to protect your data. No system is perfectly secure; see our Security & Vulnerability Disclosure Policy for detail and how to report a concern.

We may update this Policy from time to time. Material changes will be reflected in the "Last updated" date above, and where appropriate we will notify you by email.

Questions about this Policy or your data? Email support@quklink.com.