Privacy policy
Last updated: October 27, 2026
Who we are
AgentLinkOps is a service for finding, verifying and monitoring backlinks. It runs at agentlinkops.com (this site, including the free backlink checker) and app.agentlinkops.com (the application, API and MCP server, which also runs the free check). This policy covers both. Amenti Labs LLC, a Wyoming limited liability company, operates AgentLinkOps and decides how your data is used, so it is the data controller (“we”, “us”). The contact address for anything privacy-related is support@agentlinkops.com.
The short version
You give us the links you want watched. We check them, keep the results, and show them to you. We do not sell personal data, we run no advertising, and we build no advertising profiles. The AgentLinkOps service does not send outreach for customers, and it never emails the publisher contacts you save. Payments go through Stripe, so we never hold your card number.
What we collect
Account data. Your email address and, if you give one, your name. Clerk runs sign-in, with email verification codes or Google sign-in. With Google sign-in, Clerk receives your Google profile (email address, name and profile picture), and we use your email address and name.
Workspace data you give us. Your websites and competitor domains; the pages where a link should appear and the destination it should point to; expected anchor text and link attributes; the tags, link types, costs, expiry dates and notes you add; rows you import; and alert and digest settings such as the address, frequency and time zone.
Publisher contacts you save. For each of your websites you can save publisher contacts: a name or organization, and optionally an email address and a contact-page link, with a record reference and the dates the contact was saved and changed. One contact can belong to several of your links. Anyone in your workspace who can see that website, including viewers, can see its contacts. AgentLinkOps never sends to these contacts. It does not send outreach for you, run sequences or connect to your mailbox, and a saved contact holds no phone number, message text or replies. You decide which contacts to save, and any email to them goes from your own email tools and accounts. You decide why and how these contacts are used, so you are the controller of their details. We store, export and delete them only on your behalf, apart from the publisher requests described under your rights. We never contact the publisher and never use their details for our own purposes. The separate contact field on a link still takes only a short label and refuses email addresses, phone numbers and links. Notes are free text, so please keep contact details out of them.
Campaign updates you record. You or your agent can save a publisher or source page to pursue, a campaign label and context, and dated outreach outcomes supplied by you or an importer. Each outcome keeps its source references, event date, receipt date and the member or credential that recorded it. Email classifications, delivery problems and do-not-contact restrictions are supplied facts; we do not verify mail servers or enforce sending restrictions. Outcome updates have no message-body field, and AgentLinkOps does not connect to your mailbox. Keep message text in your sending tools. These records have the same website access as saved contacts and appear in workspace exports. Deleting a contact removes its private method facts. Placement progress and publisher restrictions remain with the link; deleting the workspace erases both. We retain these records while the workspace exists.
Check results. To verify a link we fetch the page it sits on and record what we found: whether the link is present, its anchor and rel attributes, the HTTP status, the final address after redirects and a hash of the bytes we read. We also keep a raw copy of the fetched page for a limited time. That copy holds whatever the publisher printed on the page, which can include names and email addresses the publisher chose to publish. When you ask for a page’s published contacts, we read them from that copy at the time you ask and do not store them separately. To check a destination we request its status and headers. Our fetcher identifies itself as LinktrailBot (AgentLinkOps’s crawler). It follows robots rules when it finds and checks pages for discovery. For a link you asked us to watch, it fetches that one page even when robots rules disallow it, and records that it did.
Backlink lookups. When you run Find my backlinks or a competitor lookup, we send the domain you named to DataForSEO, our backlink data supplier, and store the linking pages it returns in your workspace.
Connected Google Search Console (optional). If you connect Search Console for a website, we request read-only access (webmasters.readonly), store the access and refresh tokens encrypted, and store the link and index data we pull for the properties you choose. Disconnecting deletes the tokens and keeps the data you already pulled; removing the connection in Settings deletes both. You can also revoke access from your Google account.
Connected Bing Webmaster Tools (optional). If you connect Bing Webmaster Tools for a website, we request read-only access (webmaster.read), store the access and refresh tokens encrypted, and store the backlink rows we pull for the site you choose. Disconnecting and removing work the same way as for Search Console.
Billing data. If you start a trial or a plan, Stripe collects your card and the billing details its checkout asks for. We store the Stripe customer and subscription identifiers, your plan, invoice and refund status, and a record of the checks and credits your workspace uses.
Email we send you. Alert emails about changes to your links and pages, on a daily schedule, which a new workspace sends to its owner’s verified address until you change or turn them off; digest emails you turn on; test emails you request; and invitations sent from your workspace. We record the recipient, what was sent and the delivery status our email provider reports. If an email bounces, its recipient marks it as spam or our email provider blocks it, we stop emailing that address.
Free link check. The free backlink checker on agentlinkops.com needs no account. Your browser sends each check to app.agentlinkops.com. Before a check runs, Cloudflare Turnstile checks that a person is asking. It reads your IP address and browser signals, and Cloudflare processes them to run the check. To stop abuse we keep a salted, day-scoped hash of your IP address and of a cookie value, never the raw values. Each hash expires 24 hours after your last free check, and we delete expired hashes within the hour. We keep the pages you checked for 7 days so the result link keeps working.
Support mail. Messages you send to support@agentlinkops.com and our replies.
Site analytics on agentlinkops.com. This public site loads Google Analytics 4 (measurement ID G-B4PZGM5ZXL) in a cookieless mode. Analytics and advertising storage are switched off by default, so no analytics cookies are set and nothing is stored on your device. Google receives cookieless page-view pings: the page, the referring page, approximate location that Google derives from your IP address, and browser and device type. Google signals and ad personalization are turned off, and the site sends no custom events, user properties or identifiers. Google processes this data under its own privacy policy. The site loads it without a cookie banner and sets no analytics cookies. It does not run on app.agentlinkops.com. Content blockers stop it, and the site works without it.
Analytics on app.agentlinkops.com. Cloudflare, our host, adds its Web Analytics script to the application. It counts page views without cookies and without storing individual visitor data, under the Cloudflare privacy policy.
Cookies. On app.agentlinkops.com, Clerk sets the sign-in session cookies; the console sets a 7-day cookie that remembers whether the sidebar is open; the free check sets a 24-hour cookie used only for the abuse hash above; and connecting Search Console or Bing Webmaster Tools sets a 10-minute cookie for that connection step. This site sets no cookies of its own, and Google Analytics runs here without them.
What we do not collect. No card numbers. No advertising profiles. No ad scripts. No biometric, precise-location or contacts data from your devices.
Why we use it
- To run the service: checking the links you register, running the lookups you ask for, storing and showing results and the publisher contacts you save, and pulling data from accounts you connect.
- To bill you: trials, subscriptions, usage counts, invoices and refunds.
- To keep the service secure: sign-in, access checks, rate limits and the hashed free-check keys.
- To talk to you: verification codes, alert emails (on by default for a new workspace, and you can turn them off), the digests you turn on, invitations from your workspace, and replies to support mail.
- To understand traffic: the cookieless page-view analytics on this site and the cookieless page counts on the application.
We do not use your data to train AI models, and we do not share it with advertisers.
Who processes it
We use each company on this list only for the job named. Cloudflare, Clerk, Resend, DataForSEO and Zoho process data for us under their data processing terms. Stripe, Google and Microsoft handle the data they receive under their own privacy policies.
- Cloudflare (cloudflare.com): hosting, database, file storage, short-lived request logs, the network for this site and the application, the cookieless Web Analytics script on the application, and the Turnstile bot check on the free backlink checker, which reads your IP address and browser signals. Everything the service stores lives here.
- Clerk (clerk.com): sign-in and account verification email. Handles your email address, name and sign-in events.
- Stripe (stripe.com): checkout, subscriptions, invoices, refunds and the billing portal. Handles your card, billing details, email address and invoices.
- Resend (resend.com): sends alert, digest, test and invitation email from notifications@agentlinkops.com. Handles the recipient address and the message.
- Google (google.com): Google sign-in if you choose it, Search Console data for properties you connect, and cookieless Google Analytics 4 on this site.
- Microsoft (bing.com): Bing Webmaster Tools data for sites you connect.
- DataForSEO (dataforseo.com): backlink data for Find my backlinks and competitor lookups. Receives the domains you look up.
- Zoho Mail (zoho.com): receives and stores mail sent to support@agentlinkops.com.
We do not sell or rent personal data, and we share it outside this list only where the law requires it.
How long we keep it
- Raw page copies: 30 days. After that the service no longer returns them. Deleting your workspace removes any stored copies that remain.
- Check results and link history: kept while your workspace exists, until you delete them or ask us to.
- Find my backlinks and competitor lookup results: kept while your workspace exists, until you delete them or ask us to.
- Email delivery records: 90 days. We keep a hashed delivery receipt, with no readable address or content, while the workspace exists. We clear invitation content once the email goes out.
- Free check: abuse hashes until 24 hours after your last check; checked pages for 7 days.
- Workspace after a plan ends: readable and exportable for at least 30 days.
- Account and workspace settings: until you delete them or ask us to.
- Publisher contacts you save: kept while the workspace exists, until you delete them; erased with the workspace.
- Billing records: as long as tax and accounting law requires.
- After a workspace is deleted: a minimal deletion record (a random workspace identifier and the deletion time) that stops anything being written to a deleted workspace. We keep that record with no end date. If someone marked one of our emails as spam, our email to them bounced or our email provider blocked it, we keep that address only as a hash, unlinked from any workspace, so no later email from any workspace reaches them. Our legal basis for keeping it is our legitimate interest in not emailing people who refused our mail or cannot receive it, and you can object as described under your rights. We erase any other suppressed address that no other workspace uses.
- Email we start with you: kept in our mailbox until deleted, and deleted when you ask. After you opt out, we keep only your email address on a do-not-contact list.
- Support mail: kept in the support mailbox until deleted. Ask and we delete your messages, unless we need them for an open billing question or a legal claim.
Your data and your choices
See and export it. Your links and their history are visible in the workspace at any time. The console exports your links and pages as CSV or JSON with their current state. Through the API, the workspace export pages through your stored records, including check results and history, and you can export each link’s full record on its own. The workspace export also includes the contacts you saved and the links each one belongs to. You can download each raw page copy while we keep it. The security and data page explains how to keep your own copy of your link records.
Delete parts of it yourself. Removing a link stops its checks and hides it, and you can restore it, so its history is kept. You can delete a website with no check history, lookups, connections or saved contacts outright from the console. Delete a website's saved contacts first; you can delete a saved contact at any time, which removes it from every link on that website. For anything else that blocks deletion, the console tells you what it is.
Delete your workspace and account. A workspace owner, or an admin with access to every project, can delete the workspace under Settings › General in the console. It offers an export first, then removes the workspace’s records and stored page copies in the background, and the workspace leaves your list when it finishes. Cancel your plan first so it stops renewing. Deleting the workspace keeps your sign-in account; delete that under Account › Manage account. If you can’t sign in, email support@agentlinkops.com from the account address. We delete the workspace and account for you, then reply with what we removed and anything we kept, with the reason. Some data stays after deletion: billing records we must keep by law (Stripe keeps your customer record), the deletion record and the spam, bounce and blocked-address suppressions described under how long we keep it, emails already delivered, our host’s database recovery copies for up to 30 days, and copies held by the companies above under their own retention.
Correct it. Change your name and email from Manage account in the console, or ask us to.
Third-party pages. When we check a link, we fetch a page on a site we do not control. If you run a site and want a record about your page reviewed or removed, email us with the URL.
If we contact you
We sometimes email people about AgentLinkOps ourselves, such as site owners, writers and possible customers. We use only business email addresses published on a website’s contact page or another public page. Our legal basis is our legitimate interest in telling relevant people about our service. We keep the email conversation in our mailbox until we delete it, and we delete it when you ask.
To stop hearing from us, reply and say so, or email support@agentlinkops.com. We stop emailing you and keep only your email address on a do-not-contact list, for as long as we send email, so we never contact you again. You can also use the rights below.
Your rights
Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or give you a copy in a format you can take elsewhere. You can also object to how we use it or ask us to limit that use. If you live in the European Economic Area or the United Kingdom, these are your rights under data protection law, and you can complain to the data protection authority where you live. Email support@agentlinkops.com from the account address, and we reply within one month.
If a customer of ours saved your details as a publisher contact, you can make these requests from any email address. We pass your request to that customer. If we cannot reach the customer within 30 days, or the law requires us to erase the record, we delete it ourselves.
Security
We encrypt data in transit. We check every request against your account, your project access and the scopes of the credential or connection making it. The security and data page describes those checks.
Children
AgentLinkOps is a tool for people who manage websites. We do not direct it at children, and we do not knowingly collect data from anyone under 16.
Changes to this policy
If the product starts collecting something new, this page changes first, with the date above updated. We record reductions in what we keep or share here too, because a privacy policy that only ever grows tells half the story. For a material change we also email account owners. The terms of service and refund policy cover the rest of the agreement.
Contact
Questions, export or deletion requests, and anything else: support@agentlinkops.com.