Privacy Policy

Persefire ("we," "us," or "our") provides a link-in-bio platform that includes short links, bio pages, click analytics, QR code generation, and team workspaces. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Persefire, you agree to the practices described here.

1. Information we collect

Account information: when you join the waitlist or create an account, we collect your email address. If you create an account, we also collect a hashed password and any profile details you choose to add (such as a display name or profile image).

Subscription and billing data: if you subscribe to a paid plan, we store your plan tier, subscription status, and billing period dates in our database. Your payment card details are never stored by Persefire — they are handled exclusively by our payment processor.

Link click analytics: when a visitor clicks one of your short links, we record the click event with the visitor's country, city (both derived from Vercel's geo-lookup — raw IP is not stored for link clicks), device type, browser, operating system, and referrer. This data is associated with your link, not with the visitor's identity.

Bio page view analytics: when a visitor views your bio page, we record their country, device type, browser, operating system, referrer, and IP address. The IP address is used for abuse prevention and rate limiting. This data is associated with your bio page.

Contact form submissions: when a visitor submits the contact form on your bio page, we store their name, email address, and message. This data is visible to you as the bio page owner through your dashboard inbox and is retained until you delete it or close your account.

Affiliate link interactions: when a visitor clicks a domain registrar link displayed on a bio page, we record the registrar name and the visitor's user agent string to measure referral traffic. No personally identifiable information is stored for these events.

Cookies and session data: we use a session cookie to keep you signed in. During a payment checkout flow, our payment processor may set its own cookies subject to its own privacy policy. We do not use third-party advertising or tracking cookies.

2. How we use your information

• To operate, maintain, and improve Persefire.
• To send you transactional emails (waitlist confirmations, account notifications, password resets).
• To provide link click analytics and bio page view analytics to you as the link or page owner.
• To deliver contact form messages from your bio page visitors to your dashboard inbox.
• To manage your subscription and process payments through our payment processor.
• To enforce our Terms of Service and prevent abuse.
• To comply with legal obligations.

3. Service providers

We rely on a small set of third-party processors to deliver Persefire. Each is bound by their own privacy commitments:

• Cloud hosting and content delivery
• Database hosting
• Rate limiting and caching
• Email delivery
• Payment processing (when subscriptions are active)

We do not sell your personal information.

4. Data retention

We retain your account information for as long as your account is active. Link click analytics and bio page view analytics are retained while the associated link or bio page exists. Contact form messages are retained until the bio page owner deletes them or closes their account. If you delete your account, we delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

5. Your rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your information.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Opt out of non-essential communications.

To exercise any of these rights, contact us at privacy@persefire.com.

6. Security

We protect your information with industry-standard practices, including encrypted password storage, rate limiting on authentication endpoints, and security event logging. No system is perfectly secure, and we cannot guarantee absolute security.

In the event we discover a security breach that compromises your personal information, we will notify affected users and, where required, relevant authorities within the timeframes mandated by applicable law — including within 60 days of discovery as required by Virginia law.

7. Third-party websites

Short links created through Persefire redirect visitors to websites operated by third parties. We do not control, endorse, or assume responsibility for the content, privacy practices, security, or availability of any third-party website. Visiting a third-party site through a Persefire link is at the visitor's own risk and is governed solely by that site's own terms and privacy policy.

8. Children's privacy

Persefire is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Material changes will be communicated by email or through a notice on the site.

10. Contact

Questions about this policy or your data can be sent to privacy@persefire.com.