Privacy policy
Last updated 6 October 2026
This policy explains what personal data Walinko collects, why we collect it, how long we keep it and the choices you have. Walinko is operated by Nexify InfoTech LLP, Surat, Gujarat, India. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act).
Who is responsible for your data
For your account and billing data, Nexify InfoTech LLP is the Data Fiduciary (the business that decides how your data is used). When one of our customers collects details from their own customers through a lead form, that customer is the Data Fiduciary and Walinko only processes the data on their behalf as a Data Processor.
What we collect and why
| Data | Why | How long we keep it |
|---|---|---|
| The WhatsApp number and pre-typed message on a link you create | To build the link and open a chat with you | Until the link is deleted |
| Account details: name, email, phone, business name, GSTIN, address (Premium) | To run your account and raise invoices | Until deletion plus 30 days. If you never verify your email, the account is deleted automatically 7 days after signup. Invoice data is kept 8 years for tax law |
| Click data: a daily visitor hash, country, region, city, device, OS, browser, referrer and campaign tags | To show link owners their click reports | Raw data 13 months, daily summaries for the life of the account |
| Lead form answers | Delivered to the link owner who asked for them | Until the owner deletes them or the link is deleted plus 30 days |
| Report details when someone reports a link | Trust and safety | 2 years |
How we count clicks without storing your IP
When a link is opened we create a visitor hash from the date, the IP address and the browser, using a salt that changes every day and is deleted after three days. The raw IP address is never stored or logged, and the hashes cannot be linked from one day to the next. This lets an owner see roughly how many people clicked without identifying anyone.
Premium waitlist
If you join the Premium waitlist, we store the email address you give us and, if you add them, your name, the link name you want and which plan you are interested in, along with the consent you gave. We use this only to email you once when Premium launches. To be removed, email [email protected] and we will delete your entry. Otherwise we delete the waitlist 30 days after the launch emails are sent.
Cookies
We use a small number of strictly necessary cookies to make the site work, such as remembering a free link you just created so you can claim it later, and keeping you signed in once accounts are available. We do not use advertising or cross-site tracking cookies.
Who we share data with
We do not sell your data. We use a few trusted processors to run the service, such as Cloudflare for delivery and bot protection, our hosting provider, and a payment provider for Premium purchases. Each only receives what it needs to do its job.
Your rights
- You can export your account data as a file and delete your account from settings.
- When you delete your account we anonymise it in place: after a 30 day window we remove or replace your name, email, phone, business details and credentials. Links and leads are deleted. Payment records are kept for 8 years as tax law requires.
- If your details were submitted to a business through a lead form, you can ask that business to delete them, or write to us at [email protected] and we will forward the request and act on the owner’s behalf if they do not respond within 15 days.
Grievance officer
If you have a complaint about how your data is handled, contact our grievance officer at [email protected]. We respond within 30 days.
Changes to this policy
We may update this policy as the service changes. We will update the date at the top and, for significant changes, tell account holders by email.