This Privacy Policy explains how CommentLink ("CommentLink", "we", "us", or "our"), operated by Squadkin Technologies Pvt Ltd, collects, uses, stores, and shares information when you visit commentlink.co or use our Instagram and WhatsApp automation platform (the "Service").
CommentLink is a business tool. When you connect your Meta channels and run automations, you control conversations with your own customers and followers. This policy covers both information about you as a customer of CommentLink, and information that flows through the Service on your behalf.
Who we are
CommentLink is provided by Squadkin Technologies Pvt Ltd. For privacy questions, email support@commentlink.co.
Information we collect
Account and workspace information
- Email address, password (stored hashed), and business / workspace name.
- Optional profile details you add, and team invites you send.
- Authentication data if you sign in with Google or Meta.
Connected channel information
- Instagram and WhatsApp Business identifiers, page or phone number IDs, display names, and OAuth access tokens needed to send and receive messages through Meta's APIs.
- We never ask for or store your Instagram or WhatsApp passwords. Channels connect through Meta's official login flows.
Message, contact, and automation data
- Contacts, usernames or platform IDs, comments, DMs, story replies, inbox messages, delivery status, and related metadata required to run automations and the shared inbox.
- Automation rules you configure (keywords, triggers, reply templates, media attachments, follow-gates, and similar settings).
- Content you upload to the Service (for example reply media or templates).
Usage and technical data
- Log data such as IP address, browser type, device information, and pages or features used.
- Cookie and storage choices you make. When you accept Required cookies we also use analytics, advertising measurement, and session insights on public pages. Live-chat data is collected only if you allow the optional Tawk.to cookie.
How we use information
- To create and manage your account and workspace.
- To connect channels, deliver automations, run the inbox, and show analytics you request.
- To send service emails (security alerts, important product notices, support replies).
- To maintain security, prevent abuse, debug issues, and improve reliability.
- To measure public-page usage and advertising when you accept Required cookies.
- To run support chat when you allow the optional live-chat cookie.
- To comply with law and respond to lawful requests.
Required cookies (including sign-in, security, analytics, marketing measurement, and session insights on the public site) run when you Accept all or save Required from Cookie settings. Live chat (Tawk.to) is optional and stays off until you allow it. You can change or withdraw those choices any time from Cookie settings. Withdrawing consent does not affect processing that already happened.
We do not use your customers' message content to train public AI models, and we do not sell personal information.
Roles when you use CommentLink for your audience
For data about your followers, commenters, and WhatsApp contacts that moves through CommentLink because of automations you configure, you are typically the data controller (or equivalent under your local law). CommentLink acts as a service provider / processor and processes that data only to provide the Service to you. You are responsible for having a lawful basis to message people on Instagram and WhatsApp and for complying with Meta's policies and applicable messaging / privacy laws.
How we share information
We share information only when needed to operate the Service:
- Meta Platforms. Instagram and WhatsApp features require sending and receiving data through Meta's APIs. Meta processes that data under its own terms and policies.
- Infrastructure providers. Hosting, database, caching, email, and similar vendors that help us run CommentLink, under contractual confidentiality and security obligations.
- Google. When Required cookies are accepted, Google Analytics receives usage data from public pages through Google Tag Manager.
- Meta. When Required cookies are accepted, Meta receives page and conversion events (such as a completed signup or contact form) through the Meta Pixel. This is separate from the Instagram and WhatsApp data described above.
- Microsoft. When Required cookies are accepted, Microsoft Clarity receives interaction data from the public website. It does not run inside the signed-in workspace or the admin console.
- Tawk.to. Only if you allow the optional live-chat cookie. Tawk.to receives the messages you send in the support widget and a cookie that keeps that conversation connected.
- Your team. Members you invite to a workspace can access contacts, conversations, and automations according to the permissions you grant.
- Legal and safety. When required by law, or to protect the rights, safety, or integrity of CommentLink, our users, or the public.
Data retention
We keep account, channel, contact, and conversation data while your workspace is active and as needed to provide the Service. You may disconnect channels, delete automations, or request account / data deletion. Residual copies may remain in backups for a limited period, and we may retain limited records when required by law or to resolve disputes.
To request deletion, use the data deletion request form or email support@commentlink.co.
Cookies
The cookie banner offers three choices: Accept all (Required + live chat), Reject all (turn everything off), or Accept optional (review the two groups and save). You can change your choice later with Cookie settings. A chat preview can stay on screen until you allow the live-chat cookie; that path does not replace the banner.
Required (pre-selected when you accept Required)
These cookies (and similar technologies) keep CommentLink working and help us operate and improve the public website. In the banner they appear as one locked "Required" group. They are not turned on until you Accept all, or save Required from Accept optional / Cookie settings. Reject all leaves them off.
- cl_consent — stores your cookie choice for about six months so we remember Accept all, Reject all, or a custom choice.
- Sign-in storage — your session token is kept in browser storage so you stay signed in. Needed to provide the logged-in product you ask for.
- Login security cookies — short-lived cookies during Google, Instagram, or Facebook sign-in, used to prevent forged login attempts.
- cl_feature_launch_v2 — remembers that you closed a product announcement, for about six hours.
- Analytics — Google Analytics (GA4) via Google Tag Manager. Public pages only. Typical cookies include _ga and _ga_*. Needed so we can see which public pages are used and fix broken journeys. Included in Required because product and marketing pages cannot be operated safely without basic usage measurement.
- Marketing measurement — Meta Pixel. Public pages, and signup or contact conversions. Typical cookies include _fbp and _fbc. Needed to measure whether ads and landing pages lead to real signups or contact requests. Included in Required with your Accept all / Required save choice.
- Session insights — Microsoft Clarity. Public website only, not the signed-in product. Typical cookies include _clck and _clsk. Needed to understand clicks and scrolling on marketing pages so we can improve layout and support. Included in Required.
Optional — live chat only
Live chat is optional because support is also available by email and the product works without the chat widget. A preview of the chat button may appear until you allow this cookie; after you allow it, the live Tawk.to widget loads.
- Live chat — Tawk.to. Tawk.to may set TawkConnectionTime and twk_uuid_* so the conversation stays connected and your messages can be answered. The signed-in admin console does not show the chat widget. Off until you Accept all, allow it under Accept optional, allow it from the chat preview, or turn it on in Cookie settings.
Reject all does not block an account, automations, or the inbox. It stops analytics, marketing measurement, session insights, and live chat until you change Cookie settings.
Security
We use industry-standard technical and organizational measures appropriate to a cloud SaaS product, including encryption in transit (HTTPS/TLS), access controls, and hashed passwords. No method of transmission or storage is completely secure. You are responsible for protecting your login credentials and for reviewing team access in your workspace.
International transfers
CommentLink may process and store information on servers outside your country, including where Google, Meta, Microsoft, or Tawk.to process data after you allow those cookies. Where we do so, we take steps designed to protect the information in line with this policy and applicable law.
Your rights
Depending on where you live, you may have rights to access, correct, export, restrict, or delete personal information we hold about you, to object to certain processing, or to withdraw cookie consent. Contact us to exercise these rights. You can Reject all or change Required and live-chat choices yourself from Cookie settings. If you are an end user of a brand using CommentLink, please contact that brand first — they control the conversation data tied to their channels.
Children
The Service is designed for businesses and is not directed to children. We do not knowingly collect personal information from children under 16 (or the equivalent minimum age in your jurisdiction).
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may also be communicated in the product or by email. Continued use of the Service after an update means you accept the revised policy.
Contact us
Privacy questions: support@commentlink.co · Contact page