01Who we are
High Authority Backlinks (highauthoritybacklinks.com) is a marketplace for sponsored guest post placements on third-party publisher sites. You browse sites, pay through Stripe, submit a brief for each placement, and track it to the live link.
For the personal data described in this policy, High Authority Backlinks is the data controller.
02Information we collect
We collect only what we need to run the marketplace:
- Account data. Your email address and name. If you sign in with Google, we also receive your profile picture and store the identifiers Google issues to link your account. If you sign in by email, we send a one-time magic link through Resend.
- Order data. The sites in your cart and orders, prices paid, order and placement status, refunds, and the live URLs of published posts.
- Briefs and content. The target URLs, anchor text, articles, briefs and instructions you submit for each placement, and the projects you use to group orders.
- Billing data. The Stripe customer ID that links your account to Stripe, and payment status for each order. Card details are handled entirely by Stripe.
- API data. If you are a partner using our API, the API key we issue you and the server logs of your requests.
- Usage and technical data. Basic server and usage logs, such as IP address, browser type, pages requested and timestamps, used for security, troubleshooting and improving the service.
- Cookies and local storage. Essential session cookies keep you signed in and protect sign-in requests. Local storage remembers preferences such as your light or dark theme. We do not use advertising or cross-site tracking cookies.
03How we use information
- To create and secure your account and sign you in.
- To process your orders and payments, issue refunds, and arrange each placement with the publisher.
- To show your order history, projects and live links, and to send essential emails such as sign-in links and order updates.
- To provide and secure the partner API.
- To improve the marketplace and understand how it is used.
- To prevent fraud and abuse, enforce our Terms, and meet legal and tax obligations.
04Legal bases (GDPR)
If you are in the European Economic Area, the UK or Switzerland, we rely on the following legal bases:
- Contract — to provide your account and fulfil the placements you order.
- Legitimate interests — to keep the service secure, prevent fraud and improve the product, in ways that do not override your rights.
- Legal obligation — to keep billing, tax and accounting records.
- Consent — if we ever ask for it, for example for optional marketing emails. You can withdraw consent at any time.
06International transfers
Our providers and publishers may process data outside your country, including in the United States. Where data leaves the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
07Retention
- Account, project and brief data are kept while your account is active. If you ask us to delete your account, we delete this data, except where we must keep it longer by law.
- Order and billing records are kept as long as tax and accounting laws require, even after account deletion.
- Content that has already been published lives on the publisher's site and is governed by the publisher. We can ask for removal on your behalf but cannot guarantee it.
- Server, usage and API logs are kept only as long as needed for security and troubleshooting, then deleted or anonymised.
08Security
We use encryption in transit (HTTPS), access controls, and keep payment and API credentials on the server only. Passwordless sign-in means we never store a password for you. No system is perfectly secure, so please keep access to your email and Google account safe, and tell us at support@highauthoritybacklinks.com if you suspect unauthorised access.
09Your rights
Depending on where you live, you can:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and data, subject to the retention rules above.
- Export a copy of your data in a portable format.
- Object to or restrict processing based on legitimate interests.
- Complain to your local data protection authority.
California residents (CCPA/CPRA): we do not sell or share personal information as those terms are defined, and we will not discriminate against you for exercising your rights.
To make any of these requests, email support@highauthoritybacklinks.com from the address on your account. We may need to verify your identity and will respond within 30 days.
10Children
High Authority Backlinks is a business service and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
11Changes to this policy
We may update this policy as the product or the law changes. We will update the date at the top of this page and, for material changes, notify you by email or in the app before they take effect.
12Contact
Questions or requests about privacy? Email support@highauthoritybacklinks.com. For the rules that govern buying placements through High Authority Backlinks, see our Terms of Service.