Privacy policy

• We collect the data the website and platform need to work: your account, your orders, your payments and how you use the site.
• We don't sell your data. We only share it with the outlets that publish your orders and with the providers that help us operate.
• You can ask to access, correct, delete or port your data, and unsubscribe from marketing emails at any time.
• Privacy contact: contato@backlinksglobal.com.

This Policy is the same for both companies in the Backlinks Global group («Backlinks Global», «we»):

Your controller is the company you contract with or that invoices you: Backlinks Global Ltda for clients in Brazil and Backlinks Global LLC for clients outside Brazil. For website visitors and sales contacts, both act as joint controllers.

Data protection officer (DPO): Gustavo Cáceres · contato@backlinksglobal.com.

When a white-label partner or agency sends us data about its own clients, that partner is the controller and Backlinks Global acts as processor on its behalf.

• Backlinks Global Ltda, CNPJ 47.170.843/0001-08, Edifício EZ Towers, Rua Arquiteto Olavo Redig de Campos, 105, Bloco B, Chácara Santo Antônio, São Paulo/SP, CEP 04711-905, Brasil.
• Backlinks Global LLC, Delaware, USA, 8 The Green, Ste A #15048, Dover, DE 19901, USA.

We don't ask for sensitive data (health, religion, ethnic origin, biometrics, etc.). Please don't include it in briefs, chats or AI fields.

• Identity and contact: name, email, phone, company, job title, website, country and language (forms, sign-up and Google sign-in).
• Account: password (encrypted), preferences, API keys, logo and colors for reports.
• Commercial and orders: campaigns, briefs, keywords, URLs, content and messages with our team.
• Financial and tax: top-ups, balance movements, invoices, tax data and Publishers' bank details for payouts. We don't store full card numbers.
• Publishers: sites, prices, metrics, payout details and publication history.
• Usage and device: IP, browser, operating system, pages viewed, clicks, date and time, error logs (cookies and similar technologies).
• Visit source: UTM and ad parameters (gclid, fbclid) when you arrive from a campaign.
• Legal acceptance: version of the Terms and of this Policy accepted, date, time and IP.
• Communications: emails, WhatsApp, chats and calls with our team.
• Public professional data: company and job title from public sources or B2B enrichment providers.

We don't make decisions with legal effects on you based solely on automated processing. If an AI feature influences a relevant decision, you can ask for human review.

• Creating and managing your account, processing orders, publishing content, paying Publishers and providing support: performance of a contract.
• Answering website forms and following up in our CRM: legitimate interest or pre-contractual steps at your request.
• Invoicing, tax and accounting obligations, fraud and money-laundering prevention, responding to authorities: legal obligation.
• Security, abuse prevention and recording acceptance of the Terms: legitimate interest and legal obligation.
• Improving the website and platform, usage statistics and publication metrics: legitimate interest.
• Newsletters, marketing to non-clients and non-essential cookies: consent.

We don't sell or rent personal data.

• Publishers and outlets: they receive the content, links and order details needed to publish it. We don't share your email or phone with them unless it's necessary and you authorize it.
• Service providers: website hosting (Vercel), network and forms (Cloudflare), CRM (Clarify), analytics and measurement (Google Analytics and Google Tag Manager), ad pixels (Meta and OpenAI), email and documents (Google Workspace), messaging (WhatsApp) and the platform infrastructure. All are contractually bound to protect the data and use it only to provide their service to us.
• Between the two group companies, to serve you from the right country.
• White-label partners and sellers: if you sign up through their link, they can see your account and order data to serve you.
• Authorities: when required by law or court order.
• Corporate transactions: in a merger, acquisition or asset sale, with the same protections as this Policy.

Because the group operates in Brazil and the United States, and some providers process data in other countries, your data may be transferred outside your country. In those cases we use safeguards recognized by law, such as standard contractual clauses, adequacy decisions or your consent where applicable, under the LGPD, GDPR and LFPDPPP.

You can manage your preferences in the cookie banner or your browser settings. Blocking essential cookies may stop the platform from working.

• Essential: session, security, language and forms. No consent required.
• Analytics: measuring site usage and errors.
• Marketing: measuring campaigns and showing relevant ads (Meta and OpenAI), with your consent where the law requires it.
• Browser notifications: only if you turn them on. We store the technical subscription your browser creates (no name or email) in our sending service on Cloudflare to tell you about news. You can turn them off at any time in your browser settings.

After that, we delete or anonymize the data. Publications already made on third-party outlets depend on those outlets and may stay online.

• Account and orders: while the account is active and up to 5 years after closure, to handle claims.
• Sales contacts without a contract: up to 2 years from the last contact, unless you ask us to delete them sooner.
• Tax and financial data: the period required by each country's tax law (usually 5 to 10 years).
• Record of acceptance of the Terms: while the account exists and 5 years after.
• Access logs (IP, date and time): at least 6 months (Brazil's Marco Civil da Internet).
• Marketing: until you withdraw consent or unsubscribe.

Depending on the law that applies to you, you can:

Write to contato@backlinksglobal.com. We reply within 15 days (LGPD) or the applicable legal deadline (30 days under the GDPR; 20 business days in Mexico). We may ask you to verify your identity.

• confirm whether we process your data and access it;
• correct incomplete or outdated data;
• ask for deletion, anonymization or blocking of data that is unnecessary or processed without a legal basis;
• ask for portability to another provider;
• object to or restrict certain processing;
• withdraw consent at any time, without affecting earlier processing;
• know who we share your data with;
• file a complaint with the supervisory authority: ANPD (Brazil), AEPD (Spain) or the competent authority in Mexico.

We apply reasonable technical and organizational measures: encryption in transit (HTTPS), hashed passwords, role-based access control, activity logs and providers with recognized standards. No system is 100% secure. If an incident could cause you relevant risk or harm, we'll notify you and the competent authority within the legal deadlines.

Protect your password and API keys; don't share them.

The website and platform are for businesses and professionals over 18. We don't knowingly collect data from minors. If we find that we have, we'll delete it.

We may update this Policy. If the changes are significant, we'll notify you by email or in the platform before they take effect and, where the law requires it, ask for new consent. The current date and version appear at the top of this page.

Privacy / DPO: Gustavo Cáceres · contato@backlinksglobal.com.

Backlinks Global Ltda: Edifício EZ Towers, Rua Arquiteto Olavo Redig de Campos, 105, Bloco B, Chácara Santo Antônio, São Paulo/SP, CEP 04711-905, Brasil.

Backlinks Global LLC: 8 The Green, Ste A #15048, Dover, DE 19901, USA.