PRIVACY POLICY

Link In Bio Job Board

linkinbio.niceboard.co

Effective Date: [March 12, 2026]

1. Introduction

Milk Karten Inc, doing business as Link In Bio (“Company,” “we,” “us,” or “our”), is committed to protecting the privacy of individuals who visit the Link In Bio Job Board located at linkinbio.niceboard.co (the “Site”) and use the services available through it (the “Services”).

This Privacy Policy explains what personal information we collect, how we use and share it, your rights regarding your information, and how to contact us with questions or concerns. This Privacy Policy is incorporated into and subject to our Terms of Service.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use the Site.

2. Information We Collect

We collect information differently depending on how you interact with the Site. The table below summarizes the categories of personal information we collect by user type:

2.1 Information Collected Automatically

When you visit the Site, we automatically collect certain technical information through cookies and similar technologies, including your IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and other interaction data. See Section 8 (Cookies and Tracking Technologies) for more detail.

2.2 Information from Third Parties

We may receive information about you from third parties, including the Niceboard platform (which hosts the Site), payment processors, and analytics providers. We treat such information in accordance with this Privacy Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

(a) To provide, operate, and maintain the Services, including displaying job listings and facilitating job applications;

(b) To transmit Job Seeker application materials to the relevant Employer when an application is submitted through the Site;

(c) To create, manage, and secure your account;

(d) To process payments for paid job listings through our third-party payment processor;

(e) To communicate with you about the Services, including service-related announcements, updates, and responses to your inquiries;

(f) To send promotional communications about our products, services, and events, subject to your opt-out rights described in Section 7;

(g) To analyze usage patterns and improve the Site and Services;

(h) To detect, prevent, and address fraud, abuse, security issues, and technical problems;

(i) To enforce our Terms of Service and this Privacy Policy; and

(j) To comply with legal obligations and respond to lawful requests from public authorities.

3.1 Legal Bases for Processing (EEA/UK Users)

If you are located in the EEA or UK, our legal bases for processing your personal data are:

(a) Contract performance: Processing necessary to provide the Services you requested (e.g., transmitting your application to an employer, managing your account);

(b) Legitimate interests: Processing necessary for our legitimate business interests, such as improving the Site, preventing fraud, and marketing, provided these interests do not override your fundamental rights;

(c) Consent: Where you have given specific consent to processing (e.g., receiving promotional emails), which you may withdraw at any time; and

(d) Legal obligation: Processing necessary to comply with applicable laws.

4. How We Share Your Information

We share your personal information in the following circumstances:

4.1 With Employers (Job Seeker Data)

When you apply to a job through the Site, we transmit your application materials (including your resume, cover letter, and any other information you provide) to the Employer who posted that listing. Once transmitted, that Employer becomes an independent data controller of your application data and is responsible for handling it in accordance with their own privacy practices and applicable law. We are not responsible for how Employers use your information after transmission.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

(a) Niceboard (job board hosting platform);

(b) Stripe (payment processing for paid listings);

(c) Email service providers (for transactional and marketing communications); and

(d) Analytics providers (for usage analysis and Site improvement).

These providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with this Privacy Policy.

4.3 Legal Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Site of any change in ownership or use of your personal information.

4.5 No Sale of Personal Information

We do not sell your personal information. We do not sell or share (as those terms are defined under California law) your personal information to third parties for monetary or other valuable consideration.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

(a) Account information is retained for the duration of your active account and for a reasonable period thereafter to allow for account reactivation or to comply with legal obligations;

(b) Application materials submitted through the Site are retained for up to 12 months after submission, unless you request earlier deletion or the Employer to whom the application was sent retains them independently;

(c) Payment records are retained as required by tax and financial reporting laws;

(d) Usage data and analytics are retained in aggregated or anonymized form and may be retained indefinitely; and

(e) Communications and support records are retained for up to 24 months after the last interaction.

When personal information is no longer needed, we will securely delete or anonymize it.

6. Your Privacy Rights

6.1 All Users

Regardless of your location, you may:

(a) Access and update your account information through the Site at any time;

(b) Request a copy of the personal information we hold about you;

(c) Request correction of inaccurate information;

(d) Request deletion of your personal information, subject to legal retention requirements; and

(e) Opt out of promotional communications at any time (see Section 7).

To exercise any of these rights, contact us at greg@milkkarten.com. We will respond to verified requests within 30 days, or within the timeframe required by applicable law.

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

(a) Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it;

(b) Right to Delete: You may request deletion of your personal information, subject to certain exceptions;

(c) Right to Correct: You may request correction of inaccurate personal information;

(d) Right to Opt Out of Sale/Sharing: We do not sell or share your personal information as defined under California law; and

(e) Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To submit a request, email greg@milkkarten.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

6.3 EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following additional rights:

(a) Right of access to your personal data;

(b) Right to rectification of inaccurate or incomplete data;

(c) Right to erasure (“right to be forgotten”) under certain circumstances;

(d) Right to restrict processing of your personal data;

(e) Right to data portability in a structured, commonly used, machine-readable format;

(f) Right to object to processing based on legitimate interests or for direct marketing;

(g) Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal; and

(h) Right to lodge a complaint with your local supervisory authority.

International Data Transfers. Your personal data may be transferred to and processed in the United States. We rely on your consent and, where applicable, Standard Contractual Clauses approved by the European Commission to provide adequate safeguards for such transfers.

7. Marketing Communications

We may send you promotional emails about our Services, new features, job market insights, and events. You may opt out of promotional communications at any time by clicking the “unsubscribe” link in any promotional email, or by contacting us at greg@milkkarten.com.

Even if you opt out of promotional communications, we will continue to send you transactional and service-related messages, such as account notifications, security alerts, and updates to our Terms of Service or this Privacy Policy.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Site and collect usage data. The types of cookies we use include:

(a) Essential cookies: Required for the Site to function properly, including session management and security. These cannot be disabled;

(b) Analytics cookies: Help us understand how visitors interact with the Site, including pages visited, time on site, and traffic sources. We use these to improve the Site; and

(c) Functional cookies: Remember your preferences and settings to enhance your experience.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of the Site.

Do Not Track. Some browsers offer a “Do Not Track” (DNT) signal. There is currently no industry standard for how websites should respond to DNT signals. At this time, the Site does not respond to DNT signals.

9. Third-Party Services

The Site may contain links to third-party websites, including employer career pages where you may complete a job application. These third-party sites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party site before providing personal information.

Payment Processing. We use Stripe to process payments for paid job listings. When you provide payment information, it is transmitted directly to Stripe and processed in accordance with Stripe’s Privacy Policy. We do not store your full credit card number, expiration date, or CVV on our servers.

Hosting Platform. The Site is hosted on the Niceboard platform. Information you provide through the Site may be processed by Niceboard in accordance with its privacy policy as a data processor acting on our behalf.

10. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls limiting employee access to personal information on a need-to-know basis, and regular security assessments.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

11. Children’s Privacy

The Site and Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from anyone under 16. If you are under 16, do not use the Site or provide any personal information.

If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we may have inadvertently collected information from a child under 16, please contact us at greg@milkkarten.com.

12. Aggregated and De-Identified Data

We may create aggregated or de-identified data from personal information by removing or obscuring identifiers so that the data can no longer reasonably be used to identify a specific individual. We may use and share such aggregated or de-identified data for any lawful business purpose, including industry analysis, benchmarking, and Site improvement. This data is not subject to the restrictions in this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will:

(a) Update the “Effective Date” at the top of this page;

(b) Post a prominent notice on the Site; and

(c) Where we have your email address, send you a notification of the material changes.

Your continued use of the Site after the updated Privacy Policy becomes effective constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Milk Karten Inc, d/b/a Link In Bio

Email: greg@milkkarten.com

For GDPR-related inquiries, you may also contact our designated privacy contact at the email address above. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.