Privacy Policy

The controller is It Solutions Group OÜ, Tallinn, Estonia. The platform is operated from Estonia. The legal entity named on a specific invoice is the one that issued it: the platform may use a separate company per country.

Data questions: business@lindme.com.

Account. Email, name, password hash, role (blogger, business, partner, or staff).

Blogger. Display name, niches, willingness to work online or offline, and phone, address, date of birth, and coordinates if they are filled in. Social accounts the blogger connects: Instagram, Facebook, YouTube, TikTok, LinkedIn — handle, link, external id, and metrics (followers, reach, engagement). The access token is stored encrypted and is used only to sync statistics.

Business. Name, Estonian Äriregister code (8 digits), VAT number, address, board members when they are pulled from the registry, website, offers, deals, subscription, and invoices.

Money. IBAN and payout details (payouts go to an OÜ or FIE, not a private person), invoice history, Montonio payments, and escrow deposit status.

Messages and moderation. Deal messages, notifications, moderation status, and the staff action log.

Technical data. IP address and user agent in server logs, cookies described in the Cookie Policy, and the consent choice in localStorage.

• Contract (GDPR art. 6(1)(b)) — registration, moderation, offers, deals, the subscription, invoices, and payouts.
• Legal obligation (art. 6(1)(c)) — accounting, VAT, and DAC7 reporting to the Estonian Tax and Customs Board (EMTA).
• Consent (art. 6(1)(a)) — optional cookies (functional and analytics) and connecting a social account through OAuth. Consent can be withdrawn.
• Legitimate interest (art. 6(1)(f)) — fraud and fake-audience prevention, dispute handling, and keeping the service working. Necessary session cookies rely on this interest and on the contract: the cabinet does not open without them.

• The business and the blogger — the data a specific deal and offer need.
• Montonio — to take a subscription or deposit payment and to issue a refund.
• The social network the blogger connected — only for OAuth and reading metrics.
• Äriregister — public company data looked up by registry code.
• The email service (Postmark, Resend, or SendGrid, whichever is enabled) — transactional mail: invoices, deal status, moderation.
• A bookkeeper partner, if the blogger is assigned to one — data needed for the payout and reporting.
• EMTA — the information the platform must report under DAC7.
• Platform infrastructure: the application server, Postgres, and Redis.

We do not sell data.

• The account — while you use it. Deletion is requested in the cabinet and carried out after 30 days, during which the request can be cancelled.
• Invoices, payments, and data needed for accounting and DAC7 — 7 years, even if the account is deleted. That is the retention period for accounting records in Estonia.
• A social token — until the connection is removed or the token expires.
• Social metric snapshots — while the connected account exists, so growth history can be shown.
• The staff action log is kept to investigate incidents and disputes.

You can request access, correction, erasure, restriction, objection, and portability. JSON export and the deletion request are in the cabinet: blogger and business. The export does not include passwords, social tokens, or integration keys.

A complaint can be filed with the Estonian Data Protection Inspectorate: aki.ee.

Necessary cookies are set so you can sign in. The others are set only after a choice in the banner or in Cookie Bot. The list and lifetimes are in the Cookie Policy.

The platform’s main systems are in the EU. If a connected social network or the email provider processes data in the United States, the transfer uses Standard Contractual Clauses (European Commission decision 2021/914) or another Chapter V GDPR mechanism.

Passwords are stored as a bcrypt hash. Social tokens and integration keys are encrypted. Cabinets are served over HTTPS. Lindme does not store card details: payment happens on Montonio’s page.

The platform is for users aged 18 and over. There are no child accounts. If we learn that a minor created an account, we delete it.

We email you and show a notice in the cabinet at least 14 days before a material change. The rules for using the service are in the Terms of Service. Money and deals are in the Terms and Conditions.

It Solutions Group OÜ, Tallinn, Estonia. business@lindme.com.