Privacy Policy

Preme links (for example go.aiva.ie/r/example) forward you instantly to their destination page. When you click one, we record:

• The date and time of the click
• The country your click came from
• Your device type, browser, and operating system
• The page that referred you, where your browser provides it

We do not store your IP address, and we do not record any location more precise than country.

To count unique visitors, we store a one-way hashed identifier derived from your IP address and browser. This hash cannot be reversed to reveal your IP address or identify you, and it is not shared with or matched against any other service.

No cookies are set when you click a tracked link. The redirect places nothing on your device.

Automated visits, such as bots, crawlers, and the link previews generated by messaging apps and social platforms, are excluded from click statistics.

Why we process this: click statistics tell the business that created the link how its links are performing. We rely on legitimate interest as the legal basis for this processing. The data is minimised by design: no IP addresses are kept, no advertising or tracking pixels are used, and no data is sold or shared with third parties for marketing.

If you create an account, we store:

• Your email address and password (passwords are stored in hashed form by our authentication provider, never as plain text). If you sign in with Google, we receive your email address and name from Google instead of a password.
• Your display name
• The businesses, links, and settings you create
• Any images you upload for link previews

Why we process this: to provide the service you signed up for. The legal basis is the performance of a contract with you.

We send account emails, such as sign-in confirmation and password resets, to your account email address. Preme does not send marketing email.

A business owner can invite other people to help manage a business. To do this we store the email address the owner typed in, the role they chose (editor or viewer), whether the invitation is still pending or has been accepted, and who sent it.

An invited email address is visible to the owner and to the other members of that same business. If you are invited, the owner will know you accepted, and the other members of that business will see your email address in the members list.

Members only ever get access to the single business they were invited to. They can see that business's links, bio pages, and click statistics, which are aggregated visitor counts rather than information about identifiable people. They cannot see any other business, and they cannot see anything about the owner's account beyond the business they share. Editors can create and change links, bio pages, and click data for that business. Viewers can only look. Only the owner can invite or remove people, change roles, or delete the business.

An invitation can be withdrawn by the owner at any time, and removing a member ends their access immediately. If you were invited and want the invitation record removed, ask the business owner to remove you, or email hello@aiva.ie.

Why we process this: to provide the sharing feature the business owner asked for. The legal basis is the performance of a contract with the account holder, and legitimate interest in letting a business delegate work on its own links.

Preme runs on cloud infrastructure provided by our hosting platform. Your account data, links, click statistics, and uploaded images are stored in a managed PostgreSQL database and object storage operated by Supabase on our behalf as a processor, provisioned through Lovable Cloud. The app itself, including the link redirect, is served from Cloudflare's edge network, which is also where the country of a click is derived from without us storing an IP address.

Uploaded preview images are stored so they can be displayed publicly when a link is shared.

Click statistics are kept until the account holder that owns the link deletes the link's data or their account. Account data is kept for as long as the account exists. When an account is deleted, its businesses, links, click data, and uploaded images are deleted with it.

Under the GDPR you have the right to access, correct, delete, or restrict the processing of your personal data, the right to data portability, and the right to object to processing based on legitimate interest. To exercise any of these rights, email hello@aiva.ie.

You also have the right to lodge a complaint with the Data Protection Commission (dataprotection.ie), Ireland's supervisory authority.

Because clicks are recorded without storing your IP address, we may not be able to identify which click records relate to you. Where that is the case, the GDPR's rules on data that does not require identification apply, and we will tell you if we cannot match your request to any data we hold.

If we change how Preme handles personal data, we will update this page and change the date below.