Privacy policy

backlink.surf is operated by Dv8 Media Publishing, which is the controller of the personal data described here. Contact for any privacy question or request: admin@waconzy.com.

• Account: your username, full name, email address, phone number, the contact channel (WhatsApp and/or Telegram) you choose, and a one-way bcrypt hash of your password. The password itself is never stored and cannot be read by us.
• Your projects: the website address, brand name, niche, market and description you enter, so the builder can fill in directories on your behalf.
• Build activity: which opportunities you started, the pages the browser visited, the log of each step, and the public URL of any link that went live.
• Connected mailbox (optional): the mailbox address and an app password you create at your mail provider, stored encrypted. It is used to read signup verification codes for the accounts we create for you.
• Site accounts (optional): the site, domain, login email and password for accounts used in your builds, stored encrypted.
• Free-trial abuse signals: a random device cookie, and one-way hashes of your IP address, device identifier and browser characteristics, used to keep the one-free-trial-per-device rule. We keep the hashes, not the raw values.
• Usage: first-party page views, sign-ups, and messages you send through the assistant or support.

We do not collect payment card numbers on this site, and there is no checkout page here that takes them. Paid plans start from an upgrade request you submit in the app; a person reviews it and arranges payment with you directly. We never ask for, and do not store, your bank credentials, crypto-wallet keys or seed phrases.

We never ask for the password of an existing email, social, bank or marketplace account. The mailbox and site-account credentials above are app passwords for mailboxes you connect yourself and for accounts the builder creates; both are optional and both can be deleted at any time.

• To create and secure your account, and to sign you in.
• To run the builds you start, including reading verification codes and signing in to the sites you approved.
• To show your projects, builds and live links, and to keep the link tracker accurate.
• To answer support questions and honour plan changes.
• To prevent abuse of the free starter link, fraud, and attempts to use the service for spam.
• To understand which pages are used, so we can fix or drop what is not working.

We set a session cookie so you stay signed in, a referral cookie when you arrive through a partner link, and a device cookie used for the free-trial rule. The music player and the analytics pixel keep small preferences in your browser’s local storage; they contain no personal detail.

Public pages also load the Meta (Facebook) pixel and the Reddit pixel, which set their own cookies and report the page view to those companies. They are the only third-party scripts on public pages. You can block them in your browser or with an extension; the site continues to work.

• Vercel — hosting and delivery of this site.
• Teable — the database that stores accounts, projects, builds and links.
• Google and Bing — search engines we use to find public directory pages and to measure search referrals.
• Meta and Reddit — advertising pixels on public pages, for page-view measurement.
• Our cloud-browser and AI providers — the isolated browser that performs a build, and the model that answers in the assistant. They process what a build or a message needs, on our instructions.

Account and project data is kept while your account is open. Build logs and live-link records are kept while the project exists, because they are the proof of what was built. Mailbox and site-account credentials are deleted when you remove them, when the related project is deleted, or when the account is closed. Trial device hashes are kept for the life of the free-trial rule so that deleting an account does not reset it.

You can see and change your name, company and website in Settings, and remove a mailbox or a stored site account from the Site accounts page. You can ask us to export or delete your account and everything attached to it, to correct data, or to stop a particular use.

Email admin@waconzy.com from your account address and we will action it, normally within a few business days. If you are in a region with a data-protection regulator, you may also complain to it.

The site is served over TLS. Passwords for this site are stored as hashes, never as text. Credentials for connected mailboxes and site accounts are encrypted at rest and are used only for the builds you start. No system is perfect; if we ever suffer a breach affecting your data we will tell you and the relevant authority as required.

The service is for businesses and professionals. It is not directed at children, and we do not knowingly keep accounts for anyone under 18.

If this policy changes in a way that affects what we collect or who we share it with, we will update this page and note the date at the top. Continued use after a change means you accept the updated policy.