Privacy policy.

Effective October 26, 2026

This policy applies to donolink.us and to DonoLink's accounts, public tip pages, payments, dashboards, overlays, support, waitlist and stream integrations for creators and tippers in the United States. It explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. DonoLink does not sell your personal information and does not share it for cross-context behavioral advertising.

1. Who we are

Tovix, doing business as DonoLink, a sole proprietorship established in Eindhoven, the Netherlands (Dutch Chamber of Commerce 98227475, VAT NL005316890B06), is responsible for the processing described in this policy. Because DonoLink is established in the Netherlands, the EU General Data Protection Regulation (GDPR) applies to how we handle your personal information, wherever you live. Contact: info@donolink.nl. DonoLink is not responsible for processing for which a creator, Stripe, a bank, payment method or connected streaming platform independently decides how and why personal information is used; that party handles it under its own privacy terms.

2. Personal information we collect

Account and profile information: name, email address, username, password hash, verification status, profile image and banner, bio, language, country, currency, social channels, settings, two-factor status and an encrypted or restricted authentication secret. We receive this from you or from a social login provider you choose.

Tip and payment information: name or nickname, message, amount, currency, payment method, status, time, transaction IDs, terms version and time of acceptance, and your email address if you enter it for a tip confirmation or because the creator asks for it. Full payment, identity and bank details, such as a card number or the account you use with Cash App Pay or Amazon Pay, are processed directly by Stripe and the payment method; DonoLink does not store a full card number, bank account number or identity document.

Content and communications: public profile content, alert media, media requests, import data, support tickets, emails and information in reports, complaints, refunds or disputes.

Streaming integrations: account and channel IDs, display name, OAuth tokens and scopes, connection status and visible live events from Twitch, Kick, YouTube, TikTok or Streamlabs, such as name, chat message, follow, subscription, gift, bits, raid, Super Chat or membership. Import keys are used only to carry out the selected import and are not stored as profile information.

Referral information: the referral code you signed up with, the time, the referrer and an encrypted hash of your IP address at sign-up (never the IP address itself); for referrers also their own code, the percentage, hashed IP addresses of recent visits, commission entries per tip (platform fee in the tip currency and in euro, percentage, amount, status and Stripe payment reference), the outcome of the abuse check and payouts with reference.

Technical and usage information: IP address, country code, known login locations and security events, for security. For limited server statistics, we measure product milestones such as account creation, onboarding, connected features, tips and payouts under a non-reversible pseudonym; PostHog does not receive an email address, raw account ID or browser IP address for this layer. Only after you consent do we measure visited pages, clicks, referrer and UTM source, browser and device information and masked session recordings on product pages in the browser.

Waitlist and contact: email address, reserved username, limited source and referral information, referral code and correspondence. We may also receive information from a creator, payment provider, bank, platform or competent authority where needed for support, security or a dispute.

3. How we use personal information

• To provide the service, based on our contract with you: the account, profile, tip flow, dashboard, overlays, imports, integrations and support. Without the required information we cannot provide that feature.
• To meet legal obligations: record-keeping, tax and other legal duties, orders of competent authorities and applicable financial or sanctions obligations.
• For our legitimate interests: to secure the service, prevent misuse, fraud and chargebacks, keep evidence, handle claims, investigate failures, send a limited number of service reminders to finish connecting Stripe (you can unsubscribe in every reminder) and use limited pseudonymized server statistics to improve how the product works, activation and reliability. The statistics layer does not create session recordings, use browser tracking or build a PostHog person profile. We balance these interests against your privacy, limit the information and respect a reasoned objection.
• With your consent: for optional emails you turn on yourself, such as the stream overview, for detailed PostHog browser analytics, dead-click analysis and masked session recordings, and wherever else we expressly ask for it. Withdrawing consent immediately stops new browser analytics, applies to the future and does not make earlier processing unlawful.
• These are the legal bases the GDPR requires; we rely on vital or public interests only in exceptional situations the GDPR permits. We do not use personal information for credit scoring.
• Abuse check for the partner program (legitimate interest: fraud prevention): we compare whether a referrer and a referred creator use the same bank account (through a fingerprint calculated by Stripe, not the account number), the same person or company (name and date of birth from Stripe verification), the same email address, the same browser or the same network. We keep only the outcome and hashed IP addresses; if they match, the commission lapses. A staff member reviews doubtful cases.

DonoLink does not sell personal information, does not share it for cross-context behavioral advertising and does not rent it to anyone. We do not use Google or YouTube data for advertising, profiling or sale.

4. How we share personal information

We share only the information that is necessary, with:

• Stripe and the relevant banks and payment methods (such as card networks, Apple Pay, Google Pay, Cash App Pay and Amazon Pay) for onboarding, identity checks, payments, fees, payouts, refunds, fraud and disputes; Stripe also processes information under its own privacy policy (stripe.com/privacy).
• the selected creator: the name, message, amount, time and status of a tip and, if you entered it, your email address, for receipts, alerts, statistics and handling questions; never a full payment instrument or bank account number.
• hosting, network and security providers (including content delivery and protection against attacks) and storage and email providers that run DonoLink's infrastructure; Anthropic when you ask Linky, the AI assistant in the dashboard, a question: we then send your question, up to two of your previous questions and a short summary of your account setup (such as display name, tip link, whether Stripe is ready and the number of paid tips), never your email address, payment details or passwords; and, for reading alerts aloud (text-to-speech, when the creator turns it on), Microsoft for the natural voices and our own voice server for the studio voices. Only the text to be read aloud is sent, such as the tipper's name, amount and message.
• PostHog, for limited pseudonymized server statistics without a person profile and, only after consent, browser analytics and masked session recordings. PostHog processes this information on servers in the United States. In session recordings, on-screen text such as buttons and messages is readable; names, messages, email addresses, amounts and keys are masked. Entered text, form values, payment fields and OBS and QR pages are not recorded.
• Google/YouTube, Twitch, Kick, TikTok and Streamlabs when you activate such an integration. To connect your YouTube account, DonoLink requests youtube.readonly to read channel information, live streams, live chat and live events. Only when you separately authorize stream title changes does DonoLink also request youtube.force-ssl. This lets DonoLink change your active stream's title when you give a command to do so. The separately connected YouTube bot uses youtube.force-ssl to post chat messages according to your bot settings and, with the required channel permissions, to delete messages or temporarily ban viewers from chat.
• advisors, insurers, public authorities, regulators, law enforcement or a successor business, but only on a valid legal basis, to the extent necessary and with confidentiality where appropriate.
• the referrer who invited you: your username, sign-up date, the end of the commission period and the commission your tips generate. If your leaderboard is off, the referrer only sees you anonymously and without an amount. The referrer never sees tippers, messages or your balance. Legal basis: performance of the partner program and our legitimate interest in a verifiable commission calculation.

Our service providers act under written agreements and may use personal information only on our instructions. A recipient that independently decides how and why it uses personal information, such as Stripe for regulated payment services, a bank, payment method, creator or streaming platform, is separately responsible for the lawfulness, transparency, security, retention and rights in its own processing. A request to DonoLink does not automatically delete or correct information held by such an independent party.

5. Where we process personal information

DonoLink is based in the Netherlands. Your personal information is processed in the European Economic Area and, through some providers or connected platforms, in the United States and other countries, including by PostHog (analytics, servers in the United States), Anthropic (questions to Linky) and Microsoft (natural voices for text-to-speech). Where the GDPR requires it for transfers out of the European Economic Area, we rely on an adequacy decision, the EU-US Data Privacy Framework for a certified recipient (such as Microsoft), Standard Contractual Clauses approved by the European Commission (such as in the processing agreements with PostHog and Anthropic) and, where needed, supplementary measures. You can request information about these safeguards via info@donolink.nl.

6. How long we keep personal information

• Account, profile, settings and active OAuth integrations: while the account or integration is active; after deletion, generally within 30 days from active systems.
• Financial administration, fee invoices and necessary transaction information: up to 7 years after the relevant financial year, or longer where the law or an ongoing dispute requires it.
• Terms and payment evidence and files about fraud, refunds, chargebacks and claims: as long as needed for the purpose and no longer than the applicable statutory limitation or dispute periods.
• YouTube OAuth data: until you disconnect; we then revoke the token and delete the integration. Derived YouTube event details: no more than 30 days. Deletion at DonoLink does not change data held by YouTube itself.
• Other stream events and import history: while needed for statistics the creator asked for and for providing the service, or until the account is deleted; real-time overlay messages are normally deleted within 5 minutes.
• Support tickets, reports and correspondence: while the request or account is active and afterwards only while needed for a contract, complaint, claim or legal duty. Questions to Linky and the answers: 12 months, after which we delete them automatically. Waitlist information: until you withdraw, the waitlist entry becomes an account or the waitlist purpose ends.
• Security information: failed-login and incident data while needed for security or an investigation; known login locations remain as a limited rolling list with the active account and are deleted with the account. PostHog data follows the retention period set for the PostHog project and is deleted earlier when no longer needed.
• Referral and commission information: for as long as the partnership or commission period runs and then 7 years because of the statutory tax retention duty; hashed IP addresses for at most 90 days; the referral cookie for at most 30 days and the referrer cookie for at most 1 year.

Backups may remain isolated for a short period and are overwritten according to the backup cycle. Deletion does not apply to information we must legally keep; such information is restricted and used only for that purpose.

7. Public information and the creator

A creator's profile, avatar, banner, bio, social links and uploaded overlay media are meant to be shown publicly. For a tip, the name or nickname, message, amount and time may appear on the selected creator's tip page, leaderboard and stream alert. Do not provide information you do not want to be public. Once a creator selects, downloads, combines, publishes or uses received information outside DonoLink for their own purposes, that creator independently decides on that processing. The creator must then have their own valid legal basis and privacy information, handle privacy requests, apply appropriate security, keep information no longer than needed and not disclose sensitive or unnecessary information. DonoLink is not responsible for such independent, unauthorized or terms-breaching use by a creator, except where the law places a separate duty on DonoLink. Direct a request about such use to the creator as well.

8. Cookies, analytics, Do Not Track and Global Privacy Control

DonoLink uses necessary storage for the login session, language, theme, security and OBS settings you choose. In addition, server processes send limited product milestones to PostHog under a secretly derived pseudonym on the basis of legitimate interests; this layer uses no browser tracking, browser IP address, email address, raw account ID, session recording or PostHog person profile. Detailed browser analytics, dead-click analysis and masked session recordings start only after you click Accept in the privacy choice; refusing does not affect your access to the service. The browser layer uses in-memory storage, masks text and inputs, records no iframes, headers or bodies and does not run on OBS or QR pages. You can withdraw consent just as easily through Cookie settings in the footer; the open page then immediately stops new browser analytics and session recordings. Our site does not change its behavior in response to Do Not Track signals. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing for a Global Privacy Control signal to opt out of; optional analytics stay off until you accept them. You may object to the limited server statistics via info@donolink.nl.

If you follow a referral link (/r/...), we set a functional first-party cookie (donolink_ref, 30 days) containing only the code, so we can link the invitation when you sign up; we delete it after sign-up. Referrers get a functional cookie (donolink_ref_eigen, 1 year) that recognizes their own browser, so they cannot invite themselves. Neither is used for tracking or advertising.

9. Security and data breaches

We use measures including TLS, restricted tokens and sensitive fields, access controls, two-factor authentication, rate limits, logging and payment status checks. No internet service can guarantee absolute security. Users remain responsible for secure devices, unique passwords, two-factor protection and keeping tokens and links confidential. If a security breach affecting personal information occurs for which DonoLink is responsible, we investigate and contain it and notify affected individuals and the competent authorities as the law requires. Report a suspected security issue, without exploiting it, via support@donolink.nl. The liability provisions in the terms apply to the extent they do not conflict with your mandatory privacy rights.

10. Your privacy rights and choices

Wherever you live, you can exercise the following rights; you do not need to be a resident of a state with a consumer privacy law:

• access to your personal information and a copy of it;
• correction of inaccurate information or completion of incomplete information;
• deletion of your personal information or restriction of its use, unless an exception or retention duty applies;
• a portable copy of the information you gave us, where processing is automated and based on consent or contract;
• objection to use based on our legitimate interests where your situation justifies it, and to direct marketing at any time;
• withdrawal of your consent for the future;
• a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), DonoLink's supervisory authority, or to the attorney general or privacy regulator of your state.

Send a request to info@donolink.nl. We normally respond within one month; for complex requests the GDPR allows us to extend this by two further months, and we will tell you within the first month. We may ask for proportionate identity verification, and you may use an authorized agent if you give them written permission. If we decline a request, we explain why, and you can ask us to reconsider by replying to our answer. We will not treat you differently for exercising your rights.

11. Automated decisions

DonoLink does not make decisions based solely on automated processing that have legal or similarly significant effects for you. Technical fraud, security and payment checks may temporarily block a login or a new payment. You may ask for human review via support@donolink.nl. Stripe, banks and payment methods may carry out their own automated checks under their terms and privacy policies.

12. Children's privacy

DonoLink is not directed at children under 13, and we do not knowingly collect personal information from children under 13. A creator account is for people aged 18 or over, and a tipper under 18 needs permission from a parent or guardian. If we learn that we have collected personal information from a child under 13, we delete it. A parent or guardian who believes their child has given us personal information can contact info@donolink.nl.

13. Changes to this policy

We may update this policy when the service, our providers or the law changes. The current version and its effective date appear on this page. We notify account holders of material changes in an appropriate way before or when they take effect. New processing that requires consent will not start without that consent.

14. Contact

Privacy questions or requests: info@donolink.nl. You can also contact the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl or the attorney general of your state.