2.1 Personal Information

We collect the following personal information when you register and use our service:

Email address
Password (encrypted)
Payment information (processed securely through Stripe)
Subscription plan details

2.2 Usage Data

We automatically collect certain information when you use the Service:

IP addresses of visitors who click your short links
Browser type and version
Device information (desktop, mobile, tablet)
Operating system
Referrer URLs
Click timestamps and locations (country/city)
Link creation and management activities

2.3 Service-Specific Data

Depending on which services you use, we may additionally collect:

QR Code Generator: QR code content (URLs, text, WiFi credentials, contact info), generated QR code images, and scan analytics
Bio Link Pages: Profile information, link titles and URLs, page customization settings, and page view analytics
Digital Business Cards: Contact information (name, phone, email, organization), card styling preferences, and vCard files
Background Removal: Uploaded images for processing. Images are sent to a third-party AI service for background removal and are not retained after processing is complete.
SEO Website Audits: URLs submitted for analysis. Page content is analyzed by Google Gemini AI to generate insights. We do not store the full page content, only the audit results.
AI Resume Writer: Resume content you enter (work history, education, skills, contact information), uploaded LinkedIn profile PDFs, and AI-generated text. Resume content is sent to an AI language model to generate professional summaries, bullet points, and skills. Your resume data is stored in your account and retained until you delete it. Uploaded LinkedIn PDFs are parsed in memory and not stored after extraction.
URL Safety API: URLs submitted for scanning and the scan result (is_safe, threat_type, confidence score). We transmit only the URL to Google Safe Browsing for the reputation lookup — no user identifiers are sent to Google. Scan analytics use a daily one-way hash (SHA-256 of visitor IP + user-agent + date); the raw IP address is never stored.
Mobily Verify — Business Trust Profiles: Business name, province, phone number, website URL, description, listed services, and staff names that you add to your public trust profile. Profile-view analytics use the same daily SHA-256 hash technique — the raw visitor IP is never stored. If you publish personal information about other individuals (e.g., staff members), you are responsible for obtaining their consent before doing so.

2.4 Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and store certain information. Our own website visit analytics run only if you choose to accept analytics in our cookie banner; if you decline, nothing about your visit is recorded. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. See our Cookie Policy for details.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Payment Processing: We use Stripe for payment processing. Stripe has its own privacy policy governing the use of your payment information.
Image Processing: When you use our background removal feature, uploaded images are sent to a third-party AI service for processing. Images are processed in real-time and are not stored by the provider after processing.
AI Analysis: When you use our SEO audit feature, website URLs and page content are sent to Google Gemini AI to generate insights. Google's AI terms of service apply to this processing.
Resume AI Processing: When you use the AI Resume Writer, resume text (not personal contact information) is sent to an AI language model for content generation and improvement. Content is processed in real-time and is not retained by the AI provider after the response is generated. Embedding vectors (numerical representations, not readable text) are generated via AWS Bedrock for knowledge base retrieval.
URL Safety Scanning: When a URL is submitted via the URL Safety API, the URL is transmitted to Google Safe Browsing for a reputation lookup. No user identifiers, IP addresses, or API keys are included in that request. See our sub-processors list for details.
Affiliate Programme: If you participate in our affiliate programme, a referral cookie is set when a visitor arrives via your referral link. This cookie contains only a hashed affiliate ID and an expiry timestamp — no personal data about the referred visitor is shared with the affiliate.
Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

Privacy Policy

2.1 Personal Information

2.2 Usage Data

2.3 Service-Specific Data

2.4 Cookies and Tracking

4.1 Canadian Data Residency

4.2 Security Measures