Privacy policy
Data controller
FwdLink (fwdlink.io) is operated by Hyerok Infotech, a sole proprietorship registered in the Republic of Korea, which is the controller of the data described in this policy.
- Representative: Hwee Song
- Business registration number: 831-02-03929
- Address: 1806, 22, Chungjang-daero 13beon-gil, Jung-gu, Busan, Republic of Korea
- Email: hello@fwdlink.io
This policy explains what data we handle when you use FwdLink, why we handle it, and what you can ask us to do with it.
Your account and workspace
When you create an account and use the workspace at fwdlink.io/app, we process:
- Account details: your email address and, if you give it, your name. Your password is never stored as written; we keep only a salted scrypt hash of it.
- Two strictly necessary cookies: a session cookie that keeps you signed in (marked httpOnly, so page scripts cannot read it) and a cookie used to protect forms against cross-site request forgery. They are not used for advertising or analytics.
- Workspace content you or your team enter: brand and company name, domain, aliases, competitors, product description, language and market, questions, product facts, drafts, review decisions and change records.
- Check requests: what you submit when you request an AI visibility check, and its review and collection status.
- Membership and roles: who belongs to which organization and client space, invitations, and who did what in a space when that is needed to show a decision or a change.
We use this to provide the workspace, run the checks you request, show results only to the people with access to that space, and support you. A client’s information, results and drafts are not shown to other clients. Please do not enter passwords, access keys or personal customer records into the workspace.
Queries to AI engines
To run a check, we send your questions to the OpenAI and Google Gemini APIs with search enabled, and keep the answers, cited sources and measurement settings. The question text can include your brand, product and competitor names, so those names are sent to OpenAI and Google. The questions are about a category and its companies, not about individuals; please do not put personal data in them.
For the done-for-you improvement work, we likewise submit public or anonymised buyer questions to the OpenAI and Google Gemini APIs and retain their answers and measurement settings.
Legacy note: existing $990 analysis orders may also use the Perplexity API where their agreed scope includes it.
Early access applications
When you apply for early access, we store what you submit: your email, and if you give them, your name, company, whether you are a brand or an agency, the features you are interested in and your message. We use it only to contact you about early access. Applying again with the same email updates your application. A hidden anti-spam field is checked and discarded.
Done-for-you quotes and projects
When you email us a quote request, we receive what you choose to put in that email: typically your name, work email, company, website, product, market, how your site is built and the issue you describe. We use it only to answer your request. Please do not send passwords, access keys or personal customer records.
If a project is agreed, any access to your website, repository or analytics is arranged separately in the signed statement of work before it is granted, including its scope, retention and removal. Form tests use dummy data that is deleted afterwards. If you choose to supply aggregate analytics or CRM exports, please omit individual visitor identifiers and personal data.
What we don't do
We don't sell your data. We don't use it for anything other than the purposes described in this policy. We do not use one customer’s information to build comparisons shown to another customer.
Who else handles your data
We use a small number of sub-processors:
- Vercel, which hosts this website and runs the workspace’s server functions.
- Supabase, which provides the managed PostgreSQL database that stores accounts, workspaces and check results.
- Resend, which delivers the workspace’s emails: address confirmation, password resets, invitations, and notices about requests, finished checks and changes to review. These emails carry links and counts, not answer text.
- OpenAI and Google, for the questions sent to their AI APIs, and Google for Google Analytics on the public pages of this website.
- Paddle.com Market Ltd, for Monitoring subscriptions and legacy analysis orders, which acts as Merchant of Record and handles payment, invoicing and tax. Your card statement shows Paddle.
These providers may process data outside the Republic of Korea, including in the United States.
This website
The public pages of fwdlink.io use Google Analytics 4 to count visits, see which pages are read and understand use of buttons such as the request and quote links. Google Analytics records standard page information such as the page address and the referring page. Our custom interaction events include the selected process step, button location and the opening of the quote email draft, not email addresses, draft contents, form entries or contact details. Opening a draft is not recorded as an enquiry. Google processes that data for us. The workspace pages under fwdlink.io/app do not load Google Analytics.
Keeping and exporting your data
We keep account and workspace data while your account is active. You can export a space’s data from the workspace, or ask us for a copy at hello@fwdlink.io. When an agency contract ends, the client can export its own data and records.
Deleting your data
When you cancel, ask us to delete your data and we delete it within 30 days. Send the request to hello@fwdlink.io.
Your rights
You can ask us to:
- tell you what data we hold about you (access);
- correct data that is wrong or out of date (correction);
- give you a copy of your data (export);
- delete your data (deletion).
Email hello@fwdlink.io with your request.
Related pages
Refunds and cancellation are covered in our refund policy. The terms that govern the service are in our terms of service. For anything else, see the contact page.