Privacy Policy

Last updated: June 3, 2026

Launch legal working draft; legal review recommended before production publication.

• Operator: Appthework SRL, Romania
• CUI: 46315821
• VAT code: RO47858320
• Trade Registry number: J40/11505/2022
• Registered office: 14, Ernest Juvara, Bucharest, Romania
• Contact: privacy@lnknst.com
• Version date: June 3, 2026
• Publication status: launch legal working draft; legal review recommended before production publication

This Privacy Policy explains how Appthework SRL processes personal data through Lnknst, the authentication and identity access service available at lnknst.com.

1. Introduction

1.1 Lnknst is used to provide account creation, login, authentication, password reset, verification, account recovery, session handling, profile management and identity access services for applications, websites, platforms and digital services that integrate Lnknst.

1.2 Dropthework is one of the services that may use Lnknst, but Lnknst may also be used by other applications operated by Appthework SRL or by third party businesses.

2. Controller information

• Service: Lnknst
• Website: https://lnknst.com
• Operator: Appthework SRL
• CUI: 46315821
• VAT code: RO47858320
• Trade Registry number: J40/11505/2022
• Registered office: 14, Ernest Juvara, Bucharest, Romania
• Privacy contact: privacy@lnknst.com
• Contact email: privacy@lnknst.com

3. Roles under data protection law

3.1 Depending on the processing activity, Appthework SRL may act in different roles.

3.2 For Lnknst account administration, security, fraud prevention, abuse prevention, service analytics, legal compliance and account dashboard features, Appthework SRL acts as controller.

3.3 When Lnknst authenticates users on behalf of an integrated application, platform operator, business customer or merchant, Appthework SRL may act as processor or subprocessor for that authentication processing.

3.4 Integrated applications may act as separate controllers for their own services, products, orders, customer support, legal obligations and use of personal data.

3.5 Users should also read the privacy policy of each application they access using Lnknst.

4. Personal data we process

4.1 Account data

• Name.
• Email address.
• Phone number, where used.
• Account identifier.
• Verification status.
• Profile image, where enabled.
• Language or region preferences, where enabled.

4.2 Authentication data

• Login timestamps.
• Failed login attempts.
• Password reset events.
• Account recovery events.
• Session identifiers.
• Authentication method used.
• Connected application identifiers.
• Security verification events.

4.3 Technical and device data

• IP address.
• Device data.
• Browser data.
• Operating system.
• Approximate location based on IP.
• User agent.
• Security logs.
• Abuse prevention signals.

4.4 Profile and identity data

• Profile details.
• Addresses, where enabled.
• Preferences.
• Connected applications.
• Consent history.
• Account settings.
• Cross-application identity metadata required to make the account reusable across integrated applications.

4.5 Communication data

• Messages sent to support.
• Account recovery correspondence.
• Security notices.
• Service notifications.

5. Purposes of processing

Appthework processes personal data through Lnknst for the following purposes:

1. To create and manage Lnknst accounts.
2. To authenticate users across integrated applications.
3. To provide login, password reset, account recovery and verification.
4. To maintain reusable identity across applications.
5. To manage connected applications.
6. To provide profile, preference and account management features.
7. To secure accounts and prevent fraud, abuse and unauthorized access.
8. To investigate suspicious activity or security incidents.
9. To send service, security and account notifications.
10. To comply with legal obligations.
11. To improve service reliability, usability and performance.
12. To respond to support requests.

6. Legal bases

6.1 Contract performance: used for account creation, login, authentication, account recovery, profile management and service notifications necessary to provide Lnknst.

6.2 Legitimate interests: used for security, fraud prevention, abuse prevention, service improvement, troubleshooting, protection of users, protection of integrated applications and platform reliability.

6.3 Legal obligation: used where Appthework must retain or disclose information to comply with applicable law, public authority requests or legal claims.

6.4 Consent: used where required for optional features, marketing communications, optional preferences or non-essential tracking.

6.5 Consent may be withdrawn at any time where processing is based on consent.

7. Sharing personal data

7.1 Appthework may share personal data with:

• Integrated applications where the user chooses to log in using Lnknst.
• Appthework-operated services, including Dropthework, where those services use Lnknst.
• Third party businesses or platforms that integrate Lnknst, only as needed for authentication and account use.
• Hosting and infrastructure providers.
• Email and communication providers.
• Security, monitoring and anti-abuse providers.
• Analytics providers, where enabled and legally permitted.
• Support and technical service providers.
• Professional advisers.
• Public authorities where required by law.

7.2 Appthework does not sell personal data.

8. Data shared with integrated applications

8.1 When you use Lnknst to access an integrated application, that application may receive data required to authenticate you and provide its service.

8.2 This may include:

• Account identifier.
• Email address.
• Name, where needed.
• Verification status.
• Connected account status.
• Profile data you choose to share or that is required for the application.
• Consent or preference data where relevant and enabled.

8.3 Integrated applications are responsible for their own privacy policies and their own processing of personal data after they receive it.

9. Retention

9.1 Appthework retains personal data only for as long as reasonably necessary for the purposes described in this Policy.

9.2 Account data is retained while the account exists and for a reasonable period afterward for legal, security, fraud prevention, dispute and technical reasons.

9.3 Authentication logs and security logs are retained for as long as reasonably necessary to protect users, investigate incidents and secure the service.

9.4 Support messages are retained for as long as needed to handle the request and maintain business records.

9.5 Backup data may remain for approximately 30 days in technical backup systems.

9.6 Appthework may retain limited records after deletion where required for legal obligations, fraud prevention, abuse prevention, security, accounting, dispute resolution or legal claims.

10. International transfers

10.1 Lnknst data is currently intended to be processed in Germany and Romania where possible.

10.2 If personal data is transferred outside the European Economic Area, Appthework will use appropriate safeguards required by GDPR, such as standard contractual clauses or other lawful transfer mechanisms.

11. Security

11.1 Appthework uses technical and organisational measures designed to protect personal data, authentication flows and identity data.

11.2 Measures may include access controls, encryption in transit, logging, monitoring, backups, infrastructure controls and account protection mechanisms.

11.3 No online service can guarantee absolute security. Users should protect their credentials, devices, email accounts and recovery methods.

12. User rights

12.1 Under GDPR, you may have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion.
• Request restriction of processing.
• Object to processing.
• Request portability.
• Withdraw consent where processing is based on consent.

12.2 Requests may be sent to privacy@lnknst.com.

12.3 Appthework may need to verify your identity before responding.

12.4 Some requests may be limited where retention is required for legal obligations, account security, fraud prevention, abuse prevention, dispute resolution or legal claims.

13. Account deletion

13.1 Users may request account deletion through available account settings, where enabled, or by contacting privacy@lnknst.com.

13.2 Deleting a Lnknst account may affect access to applications that rely on Lnknst authentication.

13.3 Some information may be retained where necessary for legal, security, fraud prevention, abuse prevention or dispute purposes.

14. Children

14.1 Lnknst is not intended for use by children below the age required by applicable law to create an online account without parental consent.

14.2 If Appthework becomes aware that a child has created an account unlawfully, Appthework may delete or restrict the account.

15. Cookies and similar technologies

15.1 Lnknst may use cookies or similar technologies for authentication, session management, security and service operation.

15.2 Non-essential cookies or tracking technologies will be handled according to applicable cookie rules and any cookie notice provided on lnknst.com.

16. Complaints

16.1 You may contact Appthework first at privacy@lnknst.com.

16.2 You also have the right to lodge a complaint with the competent data protection authority.

16.3 In Romania, the authority is Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal.

17. Changes to this Policy

17.1 Appthework may update this Privacy Policy as Lnknst evolves, as new applications integrate Lnknst, as features change or as legal requirements change.

17.2 The updated version applies from the date of publication unless stated otherwise.