At insert.link, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services, including when our services are accessed or used through third-party AI assistants and Model Context Protocol (MCP) connectors, in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.
By accessing or using insert.link, you consent to the practices described in this policy. We may update this Privacy Policy from time to time. Continued use of insert.link after these updates will imply your acceptance of the changes unless legally required to obtain explicit consent.
For the purposes of the General Data Protection Regulation (GDPR), We are the data controller of your personal information.
Insert.link is a platform that facilitates inserting links into existing content on websites partnered with us. The services are intended for SEO specialists and link builders working in-house or at agencies. By using insert.link, you agree to the terms and conditions specified here and in our Terms of Use. Our services may also be accessed indirectly through supported AI assistants via an MCP connector; use through such a connector is subject to this Privacy Policy in the same way as direct use of our website or API.
We collect the following types of personal information in compliance with GDPR:
We may also collect aggregate information such as site visit frequency or page popularity, anonymously, to better understand user behavior and improve services.
We collect and process personal data on the following legal grounds, as permitted by GDPR:
Insert.link collects and processes personal information for the following purposes:
If the purposes of data processing change, we will notify you and request your consent if required.
We do not sell or rent your personal information. However, we may share your data with third-party service providers to support the platform, including:
In addition, we may disclose your personal information to comply with legal obligations or respond to government authorities.
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including providing our services, complying with legal obligations, resolving disputes, and enforcing our agreements. In particular:
If you request the deletion of your account, we will terminate the processing of your personal data, unless legal obligations require otherwise.
As a data subject under the GDPR, you have the following rights:
To exercise these rights, please contact us at [email protected].
We take appropriate technical and organizational measures to ensure the security of your data, protecting it from unauthorized access, loss, or damage. This includes encrypting data in transit using TLS and encrypting sensitive data at rest, restricting access to personal data on a need-to-know basis, and applying the same safeguards to data exchanged through connected AI assistants (MCP connectors) as to data submitted directly through our website or API. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.
This section applies when our services are accessed through a Model Context Protocol (MCP) connector inside a supported AI assistant, such as Claude by Anthropic. It supplements the rest of this Privacy Policy – Sections 4, 7, 8, and 9 apply to this type of use in the same way as to direct use of our website or API.
When you initiate an action through our MCP connector, the AI assistant transmits to us:
Request Parameters – the information needed to perform the action you asked for, such as the link or content data to be processed.
Authentication Credential – the credential issued when you connected your insert.link account.
Technical Metadata – limited request information such as timestamp and IP address.
We do not receive or retain your conversation history, chat transcripts, stored memory, or any other content from your session with the AI assistant — only the inputs necessary to execute the specific tool call you initiated.
We process this information only to authenticate your request, execute the requested action and return the result to the AI assistant, and maintain the security and reliability of our services. The first two purposes rely on Contract as the legal basis, the third on Legitimate Interests, as described in Section 4.
We do not use this information for advertising or marketing, and we do not use it to train or develop artificial intelligence or machine learning models.
This information is stored on the infrastructure described in Section 9 and protected by the measures set out in that section. Authentication credentials are stored in encrypted form. Records of tool-call requests and responses are kept in our server logs for the period stated in Section 7, after which they are deleted or anonymized.
As described in Section 6, the provider of the AI assistant acts as the transmission channel between you and our services and processes data under its own privacy policy and terms, which we do not control. We disclose to the provider only what is necessary to return the result of your request. Connecting the connector does not give the provider general or ongoing access to your account data.
You can disconnect the MCP connector at any time. Disconnection revokes the associated credential immediately and prevents further access to your insert.link account through that channel. The rights described in Section 8 apply to information processed under this section, including deletion of MCP-related log records, subject to the retention periods in Section 7.
This section applies when you or your systems access insert.link directly through our API, rather than through the website or an AI assistant connector. It supplements the rest of this Privacy Policy – Sections 4, 7, 8, and 9 apply to this type of use in the same way as to other forms of access.
When you make a request to our API, you or your systems transmit to us:
We process this information to authenticate the request, execute the requested action and return a response, enforce rate limits and usage quotas, and maintain the security and reliability of the API. The first two purposes rely on Contract as the legal basis, the remaining purposes on Legitimate Interests, as described in Section 4.
This information is stored on the infrastructure described in Section 9 and protected by the measures set out in that section. API keys are stored in encrypted or hashed form. Records of API requests and responses are kept in our server logs for the period stated in Section 7, after which they are deleted or anonymized.
We do not share data submitted through the API with third parties except as described in Section 6 (service providers, legal compliance, or where you have configured your own integration to send data elsewhere). If you integrate our API into your own product and share resulting data with your end users, Section 6 (“Your Own Integrators”) applies to that sharing, not this Privacy Policy.
You can revoke or rotate an API key at any time from your account settings; revocation takes effect immediately and prevents further use of that key. The rights described in Section 8 apply to information processed under this section, including deletion of API log records, subject to the retention periods in Section 7
Cookies are small text files that enhance your experience on insert.link. They are used to track user behavior, tailor content, and help us understand how visitors use the website.
For more information, please refer to our Cookies Policy.
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We recommend reviewing the privacy policies of any third-party sites you visit.
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that we have collected personal data from a minor, we will take steps to delete it.
By using insert.link, you consent to the transfer and processing of your data outside your country of residence, including to countries where data protection laws may differ from those in your country. However, we ensure that appropriate safeguards, such as standard contractual clauses, are in place to protect your data.
We may revise this Privacy Policy from time to time. We will notify you of any significant changes through your account or email. By continuing to use insert.link after being notified, you accept the changes.
For any questions regarding this Privacy Policy or to exercise your rights, please contact us at:
Email:[email protected]
Your Insert.link team.