Legal
Privacy Policy
Last updated 15 October 2026
What personal data Limen uses, why, and what you can do about it.
Before launch: add LEGAL_NAME, LEGAL_ADDRESS and KVK_NUMBER (and VAT_NUMBER once you have one) to the environment so they appear on this page.
01Who is responsible
The business below is the controller of your personal data under the GDPR. For any privacy question or request, email support@limen.ad.
- Operated by
- Limen
- support@limen.ad
02What we collect and why
| Who | What | Why | Legal basis |
|---|---|---|---|
| Everyone with an account | Email address, password (stored only as a secure hash), public name if you set one, login sessions | To run your account and keep it secure | Contract |
| Premium members | Subscription status, payment history, country, and your Whop membership ID. Your card details go to Whop, never to us. | To provide Premium, bill you and keep accounting records | Contract, legal obligation |
| Creators | Your links, their statistics, earnings, cashouts, and payout details (PayPal email, or the account holder's name and bank account: an IBAN, or for US accounts the routing and account number and the holder's address — bank details are stored encrypted — or your crypto wallet address) | To run your links and pay you | Contract, legal obligation |
| Visitors opening a link | A scrambled (salted hash) version of your IP address, your progress through the steps, the website you came from, device type, browser and country | To stop bots and abuse, count visits, and show creators anonymous statistics | Legitimate interest |
| Buyers of paid links | What you bought, the price, when you paid, and Whop's payment reference. A random code in your browser opens what you bought; we only store a scrambled (hashed) copy of it. Your name, email and card details go to Whop and the creator who sold to you, not to us. | To let you open what you paid for and keep sales records | Contract, legal obligation |
| People sending a report | Your report, a scrambled IP address, and your email if you give it | To review the report and reply to you | Legitimate interest |
| People emailing us | Your email address and name, the message and our replies (attachments are not kept) | To answer your question | Legitimate interest |
05Data outside the EU
Some of these companies are based in the United States or process data there. We only use companies that protect it with the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
06How long we keep it
- Account data: as long as your account exists. When you ask us to delete it, we do so within 30 days.
- Unlock progress: deleted after 30 days, or 180 days for completed offers, because networks can still reverse those. Visit statistics: deleted after 24 months.
- Expired login sessions and email links: deleted automatically.
- Closed reports: deleted after 12 months.
- Emails you send us and our replies: deleted after 24 months.
- Payments, payouts and invoices: 7 years, because Dutch tax law requires it, even if you delete your account.
07Your rights
You can ask us to see, correct, delete or export your data, to limit how we use it, or object to how we use it. Email support@limen.ad from the address on your account, and we reply within one month.
If you're not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.
08Security
All traffic is encrypted (HTTPS). Passwords are stored as secure hashes, bank details are encrypted, and IP addresses are scrambled before we store them. Only the people who run Limen can see creator payout details.
09Children
Limen accounts are not for children under 16. If you think a child gave us their data, email support@limen.ad.
10Changes
If we change this policy in a way that matters, we tell you by email or on the site before it applies. The date at the top shows the latest version.