Privacy Policy

This Privacy Policy explains how Little Random Ventures Ltd("Linka", "we", "us"), registered in the United Kingdom, collects and processes personal data when you use the Linka website, console, and API (the "Service"). Linka is the data controller for the processing described here. Contact: support@linka.ink.

1. Data we collect

• Account data. Your email address, account identifiers, and API key metadata (key prefixes, labels, spend caps, creation dates).
• Billing data. Top-up amounts, transaction IDs, timestamps, and refund records. Payment card details are collected and processed directly by Stripe; we never see or store full card numbers.
• Usage metadata. Per-request logs: timestamp, API key, model ID, token counts, cost, latency, status codes, and IP address.
• Content data. The prompts you send and the completions returned. These transit our infrastructure solely to route your request to the upstream provider and deliver the response.

2. How we handle prompts and completions

Content data is processed transiently to provide the relay. Specifically:

• We never use your prompts or completions to train models.
• We never sell your data to anyone.
• Content logs are retained for up to 30 days for abuse prevention, security, and debugging, after which they are deleted or irreversibly anonymized. You may request earlier deletion.
• Upstream providers process prompts under their own API privacy terms. We route only to providers whose API terms do not use API traffic for model training; their policies apply to their processing.

3. Cookies

We use strictly necessary cookies only — for console sessions and security. We do not use advertising, analytics, or cross-site tracking cookies, and no cookie banner is required for the cookies we set.

4. Processors and sharing

We share personal data only with the processors needed to run the Service:

• Stripe — payment processing (top-ups and refunds).
• Cloud infrastructure providers — hosting and operation of the API and console.
• Email service providers — transactional and support email.

We require appropriate contractual safeguards from all processors. We do not disclose personal data to third parties except as described here, or where required by law.

5. Legal bases (UK GDPR)

• Performance of a contract — providing the API, billing your prepaid balance, and operating your account.
• Legitimate interests — securing the Service, preventing abuse and fraud, and improving reliability.
• Legal obligations — tax, accounting, and record-keeping requirements.

6. International transfers

Some processing (including by upstream model providers) takes place outside the UK and EEA. Where personal data is transferred internationally, we rely on adequacy regulations or standard contractual clauses to protect it.

7. Retention

• Account and billing records: retained as required by UK tax law (typically 6 years).
• Usage metadata: up to 12 months, then aggregated or deleted.
• Content logs (prompts/completions): up to 30 days, then deleted or anonymized.

8. Your rights

Under the UK GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. To exercise any of these rights, email support@linka.ink from your account email. You also have the right to complain to the UK Information Commissioner's Office (ICO).

9. Security

We encrypt data in transit, store API keys hashed, restrict internal access on a least-privilege basis, and monitor for abuse. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the ICO where required.

10. Children

The Service is not directed at anyone under 18, and we do not knowingly collect their data.

11. Changes and contact

We may update this policy from time to time; material changes are posted on this page with a revised date. Questions, requests, or complaints: support@linka.ink — Little Random Ventures Ltd, United Kingdom.