Privacy Policy for Anchorpost
Last updated 20 November 2026
This Privacy Policy ("Policy") explains how Anchorpost, a brand of Orionwave Private Limited, a company registered under the Companies Act, 2013, processes personal data collected from you in compliance with applicable laws, including the General Data Protection Regulation (GDPR) where applicable.
1. Definitions
1.1 Controller: The entity that determines the purposes and means of processing personal data.
1.2 End-User: Any person who clicks a short link, scans a QR code, opens a bio page or opens a client report created with the Anchorpost service ("Service"), or any other person with whom the Subscriber interacts using the Service.
1.3 Personal Data: Any information relating to an identified or identifiable natural person (data subject).
1.4 Usage Data: Data collected automatically via the Service, such as browser type, pages visited, session duration, and technical diagnostics.
1.5 Process: Any operation performed on personal data including collection, storage, use, disclosure, or erasure.
1.6 Processor: An entity that processes personal data on behalf of the Controller.
1.7 Service(s): Services provided by Anchorpost, as described in our Terms of Service: branded short links, QR codes, link previews, retargeting pixels, routing, analytics, bio pages, client workspaces and client reports.
1.8 Subscriber: The individual or organization subscribing to the Service(s) and agreeing to the Terms of Service.
1.9 Terms of Service: The binding agreement governing access to and use of the Service(s), available here.
1.10 Website(s): Websites operated by Anchorpost, including anchorpost.link, app.anchorpost.link and docs.anchorpost.link.
1.11 You and Your: A natural person whose personal data we process.
2. Personal Data Collected by Us
2.1 Direct Collection: We collect personal data directly from you when:
a) You sign up for our Service(s), providing details such as name and email address.
b) You submit forms, feedback, support requests, abuse reports, or surveys on our Website(s).
c) You participate in our webinars, events, contests, or other promotional activities.
d) You connect a third-party account (e.g., Google), in which case we may access profile or email information permitted by you.
e) You provide testimonials or contact us via other methods.
f) You purchase a licence, in which case our payment processor provides us with your name, email address, billing country and the transaction reference. We never see or store card numbers.
2.2 Indirect Collection: We may also collect data from:
a) Third-party sources such as marketing partners or public databases.
b) Cookies and similar technologies used on our Website(s) (see our Cookie Policy).
c) Device information, including OS, device type, IP address, and usage diagnostics.
d) Our business partners or resellers, where applicable.
2.3 Integration with Third-Party Services: If you connect a third-party service (e.g., Google), we may collect personal data already associated with that service, and any additional data you allow us to access.
2.4 Social Media Features: Our Website(s) may include social media widgets hosted by third parties. Your interactions with these features are governed by their respective privacy policies.
2.5 End-Users who open a link, QR code, bio page or report: When an End-User opens a short link or scans a QR code created with the Service, we record the link, the time, the country (derived from the IP address, which is then discarded), the device type, the browser and operating system family, the domain of the referring website, whether the visit came from a QR code, and whether the visit appeared to come from an automated program. To count unique visitors we create a one-way hash of the IP address and browser with a secret that changes every day and is never stored with the data, so an End-User cannot be identified or followed across days. We do not set cookies on short links or bio pages for analytics. Some links carry a Subscriber's advertising pixels (for example Meta or Google); for End-Users in the European Economic Area, the United Kingdom and Switzerland these only load after the End-User accepts a consent bar, unless the Subscriber has chosen otherwise and has a lawful basis to do so. The pixel providers' own policies govern what they collect. Email addresses submitted through a sign-up block on a bio page are collected on behalf of the Subscriber, who is the Controller of that data.
3. Purposes for Processing Personal Data
3.1 We process your personal data to:
a) Operate and maintain our Service(s), including redirecting short links, counting visits and producing the reports Subscribers share with their clients.
b) Process transactions and manage billing and licences.
c) Respond to queries and provide support.
d) Notify you about account activity, policy updates, and service-related changes.
e) Send promotional messages (where legally permitted or with your consent).
f) Improve our platform through analytics and performance monitoring.
g) Organize marketing events and campaigns.
h) Detect and prevent fraud and abuse, including checking link destinations against safe-browsing services.
i) Personalize your experience across the Service(s).
j) Comply with legal obligations.
4. Sharing of Personal Data
4.1 We may share your personal data with:
a) Our affiliated entities and service providers for hosting, email delivery, analytics, customer support, and infrastructure needs.
b) Payment processors and fraud detection agencies.
c) Marketing and promotional partners (in compliance with legal requirements).
d) Authorities or legal bodies as required under applicable law.
e) Another entity in the case of a merger, acquisition, or sale.
f) Other third parties where we have obtained your explicit consent.
4.2 The current list of sub-processors is published at /subprocessors.
5. International Transfer and Data Region
5.1 We store and process Subscriber data on secure Amazon Web Services servers. Each Subscriber account chooses where its data lives: the European Union or India. The choice is made once, when the account is created or in Settings, and applies to everything the account stores. Short-link redirects may be served from any region, since the redirect servers hold only a copy of the link table with no personal data; visit records are written to the account's chosen region.
5.2 Where data is transferred internationally (including to the European Economic Area or other jurisdictions), we ensure an adequate level of protection, including through standard contractual clauses or equivalent safeguards, as required by applicable data protection laws (e.g., GDPR).
6. Retention
6.1 Individual visit records are kept for 30 days and then reduced to aggregated statistics, which are kept for as long as the link exists. Account data is kept until you delete your account, and then for up to 30 days, except records we must keep by law.
7. GDPR Compliance
7.1 As a GDPR-compliant organization, we ensure that:
a) Only essential personal data is collected.
b) You are informed of your rights (access, rectification, erasure, restriction, portability, and objection).
c) Data processing is based on lawful grounds (e.g., contract, consent, legitimate interest).
d) We provide clear opt-in and opt-out mechanisms.
e) You can withdraw your consent at any time without affecting the lawfulness of prior processing.
f) A designated Data Protection Officer (DPO) oversees all data practices.
g) We sign a data processing agreement with any Subscriber on request; see /dpa.
DPO Contact:
Gaurav Wadhwani
Email: hello@anchorpost.link
8. Contact Us
If you have questions or concerns regarding this Policy or our data handling practices, please contact:
Orionwave Private Limited (Anchorpost)
Email: hello@anchorpost.link
Address: Orionwave Private Limited (Anchorpost), Villa 145, RBD Stillwater, Silver County Rd, Haralur, HSR Layout, Bangalore South, Bangalore - 560102, Karnataka, India