Privacy Policy

This policy explains what information LinkSell collects, why, and what LinkSell does with it. It covers merchants who hold a LinkSell account and visitors to LinkSell-hosted checkout pages. LinkSell operates from the Republic of Türkiye; this policy reflects obligations under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where the GDPR applies because of where you are located, the EU General Data Protection Regulation.

LinkSell collects only what it needs to operate the service:

• Merchant account data — name, email, and authentication credentials.
• Merchant wallet addresses you add for settlement.
• Payment metadata — amounts, product identifiers, timestamps, transaction hashes, and any metadata you attach via the API.
• Operational data — log and session data needed to run and secure the service.

Because LinkSell is non-custodial and is not a money transmitter, it does not run Know-Your-Customer (KYC) checks and does not perform sanctions screening as a LinkSell feature.

LinkSell does not take custody of buyer funds and does not collect buyer identity documents. A buyer interacts with their own wallet; LinkSell records the on-chain result, not the buyer’s personal identity.

Collected information is used to provide the service, to bill merchants the subscription fee, to secure accounts, to provide support, and to comply with legal obligations. LinkSell does not sell personal information and does not share it with third parties for their own marketing.

LinkSell’s legal bases for processing are: performance of the merchant contract (for account and billing data), legitimate interest (for security, fraud-prevention, and operational logging), and consent (for any future optional analytics — none enabled at launch).

LinkSell uses strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. It does not use advertising cookies, third-party analytics, or any tracking that would require opt-in consent under EU ePrivacy or the KVKK.

LinkSell relies on a small number of third-party providers, each engaged only as needed to deliver its part of the service and bound by a data-processing agreement. They are described by category below; the specific vendors are available to merchants on request under NDA.

• An email-delivery provider — sends transactional email (account verification, receipts, invoice + dunning notices). Processes merchant and buyer email addresses + the email body.
• An error-monitoring provider — receives stack traces and request metadata; payment and buyer PII are stripped server-side before transmission.
• An x402-protocol facilitator — verifies the EIP-3009 payment authorization and broadcasts the on-chain transfer. Receives the signed authorization payload; does not receive merchant account data.
• A cloud hosting provider — runs the application servers, the database, and the queue. Receives all stored merchant data as part of normal operation.
• The underlying blockchain network the operator has enabled. On-chain transaction data is public and permanent by design.

LinkSell retains account and payment records for as long as your account is active and thereafter only as long as needed for legal, accounting, or dispute-resolution purposes (typically up to ten years for invoicing records under Turkish Tax Procedure Law). On-chain transaction data is public and permanent by the nature of the blockchain — LinkSell cannot delete it.

Subject to applicable law you have the right to: (1) access the personal data LinkSell holds about you, (2) correct inaccurate data, (3) request deletion of data LinkSell is no longer required to keep, (4) restrict or object to certain processing, (5) request data portability, and (6) lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) or — if you are in the EU — your local supervisory authority. LinkSell responds to verified requests within thirty (30) days.

LinkSell cannot delete on-chain transaction data and cannot delete financial records it is required by law to retain. Both limits apply to every payment service, custodial or not.

LinkSell protects account data with industry-standard measures: TLS in transit, encryption at rest where supported by the storage backend, principle-of-least-privilege access, and active error monitoring. No system is perfectly secure; you are responsible for keeping your own credentials and your settlement wallet keys safe. LinkSell never has access to your wallet private keys.

LinkSell may update this policy. Material changes will be notified to the email on your account at least thirty (30) days before they take effect, except where a faster update is required by law.

Privacy questions or data-rights requests can be sent to [email protected].