Privacy Policy

Effective date: October 1, 2026

This Privacy Policy explains how Amenity8 LLC ("FYI Link", "we", "us", "our") collects, uses, shares, protects, and retains personal information when you use fyilink.com, app.fyilink.com, the branded referral pages we host for Businesses, the personal links we host for Referrers, and every related feature and email (together, the "Service"). It applies to everyone who uses the Service in any of its four roles: Admin, Business (including a Business's Team Members), Referrer, and Customer. One person may hold more than one role with the same email address. Capitalized terms not defined here have the meaning given in our Terms of Service at fyilink.com/terms.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use it to train third-party advertising models.

1. Who is responsible for your information

Amenity8 LLC, 1621 Central Ave, Cheyenne, Laramie County, WY 82001, USA, operates the Service and is responsible for the personal information it processes, as described in this Policy. Our Privacy Officer is accountable for our compliance with this Policy and can be reached at info@fyilink.com (see Section 16).

When a Customer is introduced to a Business, or a Referrer joins a Business's program, that Business receives the information described in Section 5 and becomes an independent controller of it for its own customer-relationship purposes. Each Business is responsible for its own handling of that information under applicable law, and its own privacy practices are not covered by this Policy.

2. Information we collect

2.1 Businesses and Team Members

• Business details: business name, link name (for example fyilink.com/your-business), contact email, phone, website, street address, city, state or province, postal code, country, service areas, and business categories.
• Public-facing Content: logo, Social Sharing images and descriptions, Offer details (qualifying event, reward amount, Cash or Credit, credit note, new-customer incentive, expiry), and Google and Facebook review links.
• Account and login details: the names and email addresses of the owner and any Team Members, their role, and sign-in records (see 2.6). Passwords are stored only in hashed form by our authentication provider.
• Subscription details: the Territory or Territories covered, plan, term, start and expiry dates, any pricing agreed with FYI Link management, and billing status (see 2.8).
• Activity on the dashboard: status changes, job milestones, notes, questions, dispute replies, email preferences, and Reward records the Business creates.

2.2 Referrers

• Sign-up details: first name, last name (optional), email address, mobile phone (optional), and the link name for each Business you join.
• Profile details you choose to add: mailing address, phone, and an optional password.
• Payout details: the payout methods you save (for example an Interac e-Transfer email, PayPal, Venmo, or Zelle address, or manual instructions) and which one is your default.
• Program details for each Business you join: whether your link is active or paused, your reward preference (keep it, give it to a cause, or reinvest it), and any short note you choose to write about it.
• Introductions you make, questions you raise, and the status and Reward records connected to them.

2.3 Customers

• Contact details submitted by you on a Referrer's Personal Link, or by a Referrer through the Quick Intro form: your name, and your email address and/or phone number, plus any note added about what you are looking for.
• The Offer selected, the Referrer who introduced you, and the progress the Business records (for example contacted, qualified, job started, job completed).
• If you choose to leave a review: your ratings for quality, communication, and value, and any comment you write.
• If you choose to share a testimonial: your words, your permission for the Business to use them, your first name, and your city if you choose to show it.
• Which review buttons (Google or Facebook) you clicked on your thank-you page, and the date. We do not receive anything you post on those sites.
• If you ask to stop emails from a Business: your email address and that Business, so we can honour the request.

2.4 Business inquiries

When someone submits the inquiry form at fyilink.com/inquiry, we collect the business name, first and last name, email address, phone (optional), and any message, so we can respond.

2.5 Records of Introductions and Rewards

We keep a time-stamped record of each Introduction and its history, including status changes, flags for possible duplicates or self-referrals, credit reassignments, questions and replies, and Reward records. When a Business marks a Cash Reward Paid, the payout method, destination, and the Referrer's name and mailing address as they stood at that moment are locked onto that record permanently, so both sides keep the same record of what was paid and to whom.

2.6 Sign-in and security information

To keep accounts safe we record sign-in activity: the email address used, one-time sign-in codes (stored only in hashed form), the number of attempts, temporary lockouts, the IP address and browser information of the request, and, if you choose to trust a browser, a hashed token linked to that browser for 14 days. Public forms are protected by automated bot checks and rate limits, which process your IP address and basic browser signals.

2.7 Technical and usage information

Like most websites, our hosting and network providers automatically log technical information when pages load, such as IP address, browser and device type, the page requested, the referring page, date and time, and errors. We use this to run, secure, and troubleshoot the Service. We do not use advertising trackers or cross-site tracking.

2.8 Billing information

Business subscriptions are invoiced and paid through third-party payment processors and platforms, which may include Stripe, Wise, and QuickBooks. A card is not required to create an account. If you pay by card, the processor collects your card details directly; we never see or store full card numbers. We receive limited billing information, such as the billing contact, Territory, plan, term, invoice and payment status, and the last four digits and expiry of a card where the processor provides them.

2.9 Communications with us

If you email us or reply to one of our emails, we keep that correspondence and any information you include, so we can help you and keep a record of what was agreed.

3. How we use information

• To provide the Service: hosting Business Links and Personal Links, recording Introductions, routing each Introduction to the right Business, and showing each party the information they are entitled to see.
• To create and secure accounts, verify sign-ins, prevent abuse, and protect the Service and the people who use it.
• To send the emails described in Section 7.
• To set up, bill, renew, and support Business subscriptions, including assigning each subscription to its Territory, and to operate the Guarantee.
• To respond to inquiries, support requests, and privacy requests.
• To detect, investigate, and prevent fraud, duplicate or self-referrals, spam, and breaches of our Terms.
• To maintain and improve the Service, using aggregated or de-identified information wherever practical.
• To keep records required for accounting, tax, and legal purposes, to comply with the law, and to establish or defend legal claims.

Where the law requires a legal basis for processing, we rely on: performing our contract with you (for example, running your account); your consent (for example, when you agree at sign-up, or a Referrer confirms a Customer agreed to be contacted), which you can withdraw at any time for future processing; our legitimate interests in operating a secure and reliable Service, balanced against your rights; and compliance with legal obligations.

4. What is public

• A Business Link shows the Business name, logo (if the Business chooses to show it), service areas, and live Offers.
• A Personal Link shows that Business information, the Referrer's name as shown on the link, and, if the Referrer chooses, their short note about what they plan to do with their rewards.
• When a Business Link or Personal Link is shared on social media, messaging apps, or by text, those platforms fetch and display the page title, the Social Sharing image and description the Business set for that kind of link (or a standard FYI Link image), and the link itself.
• Referrer contact details, payout details, and addresses are never public. Customer information is never public.

5. How information is shared

5.1 Between Businesses, Referrers, and Customers

• With the Business an Introduction is made to: the Customer's name, email and/or phone, any note, the Offer selected, the Referrer who made the Introduction, and any review or testimonial the Customer leaves and which review buttons they clicked.
• With each Business a Referrer joins: the Referrer's name, email, phone (if given), mailing address (if given), payout method and destination for Cash Rewards, reward preference and note, and the Introductions they make to that Business. A Business never sees a Referrer's activity with other Businesses.
• With the Referrer who made an Introduction: the Customer's first name, the Introduction's date, the Introduction's status, and the Reward status. Referrers do not see a Customer's email address or phone number.
• With a Business's Team Members, according to the access the Business gives them.

5.2 With service providers

We share personal information with the providers that help us run the Service, only as needed for them to provide their services to us and under terms that limit their use of it. Our current providers are:

• Supabase, through the Lovable Cloud platform: database, authentication, and file storage.
• Lovable: application hosting and deployment.
• Cloudflare: network delivery, security, and the Turnstile bot check on our public forms.
• Resend: delivery of all emails sent by the Service.
• Stripe, Wise, and QuickBooks: subscription billing and payment processing.
• Google Fonts: delivery of the typefaces used on our pages, which receives your IP address when a page loads.

We will update this list if our providers change.

5.3 Other sharing

• When required by law, regulation, court order, or other valid legal process, or to respond to lawful requests from public authorities.
• To protect the rights, property, or safety of FYI Link, the people who use the Service, or the public, including to prevent fraud and abuse.
• In connection with a merger, acquisition, financing, or sale of all or part of our business, in which case the recipient must honor this Policy or we will give notice before your information becomes subject to a different policy.
• With your consent or at your direction.

6. Where information is stored and processed

FYI Link serves Businesses in the United States and Canada. Our providers store and process information in the United States and may process it in other countries. This means information about Canadian residents is transferred to, and stored in, the United States, where it may be accessible to courts, law enforcement, and national security authorities under US law. We use contractual and other reasonable safeguards to protect information wherever it is processed.

7. Emails and messages

All emails from the Service are sent from FYI Link (login@send.fyilink.com), with replies going to info@fyilink.com. We send:

• Account emails: sign-in and verification codes, account setup and password setup emails, and invitations for Team Members and Admins.
• Emails about Introductions, sent on a Business's behalf: new-Introduction notices to the Business and the Referrer, status and Reward updates to the Referrer, questions and replies, and credit-reassignment notices.
• Emails to Customers, sent on a Business's behalf: one thank-you email (when the Business marks a job completed, or when the Business adds a past or existing customer) and at most one reminder about seven days later. Each links to a private thank-you page, and each includes an unsubscribe link that stops further emails from that Business with one click.
• Replies to inquiries and support requests, and subscription and billing emails to Businesses, including a renewal reminder about 15 days before each renewal date.

A Customer can stop emails from a Business with one click, using the unsubscribe link in each email. You can also ask to stop receiving any non-essential email by emailing info@fyilink.com from the address that receives it, and we will act on your request within 10 business days. Emails that are necessary to operate an open account, such as sign-in codes, will continue while the account is open. FYI Link does not send SMS or text messages. If that changes, this Policy will be updated first, and separate consent will be obtained before any text message is sent.

8. Cookies and similar technologies

• Essential cookies keep you signed in and keep your session secure. Disabling them will prevent you from signing in.
• A trusted-browser cookie is set only if you choose "Trust this device for 14 days" when signing in. It lasts 14 days and is readable only by our servers.
• Security cookies may be set by Cloudflare to protect the Service and run the Turnstile bot check.
• We do not use advertising cookies, cross-site tracking, or third-party analytics cookies.

You can control cookies through your browser settings. Because we do not track you across other websites, we do not change our practices in response to browser "Do Not Track" signals.

9. How long we keep information

• Business accounts: while the subscription is active, and for 12 months after it ends, after which the account can be deleted on request. Invoices and financial records are kept for as long as tax and accounting law requires, typically up to 7 years.
• Referrer accounts: while the account is open. After a deletion request and the 14-day cancellation window, the Referrer's name, phone, and address are permanently removed from their profile and their email is replaced with a non-working placeholder. Introduction and Reward records are kept for the Businesses' accounting, tax, and compliance purposes, and any record already marked Paid keeps the name and mailing address locked onto it at the time of payment.
• Customer information: while the related Introduction is active, and for up to 24 months after its last activity for a Customer who did not become the Business's customer, after which it is eligible for deletion. Information a Business has already received is held by that Business under its own retention practices.
• Introduction records: while the Business's or the Referrer's account is active, and for a reasonable period afterward so that questions and disputes about closed Introductions can be resolved and Businesses can keep their own records.
• Business inquiries: for up to 24 months after our last contact, unless the inquiry becomes a Business account.
• Sign-in codes: until they expire or are used, with related security records kept for a limited period to protect accounts. Technical logs: for the limited periods set by our hosting and network providers.
• Any information: longer where the law requires it, or where it is needed to establish or defend a legal claim.

10. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (HTTPS) and encryption at rest through our database provider, row-level access rules that limit each account to the data it is entitled to see, role-based access for our own staff, hashed storage of passwords, sign-in codes, and trusted-browser tokens, rate limits and bot checks on public forms, and secure management of credentials. Our staff access personal information only when needed to operate, support, or secure the Service.

No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your own email account and sign-in details secure. If a security breach creates a real risk of significant harm to you, we will notify you and the relevant authorities as required by law.

11. Your rights and choices

Depending on where you live, you may have the right to know what personal information we hold about you and how we use it; to access it and receive a portable copy; to correct it; to have it deleted; to object to or restrict certain processing; and to withdraw consent. To make a request, email info@fyilink.com from the email address connected to your account or to the information concerned. We may need to confirm your identity before acting. You may use an authorized agent, who must provide proof of their authority. We will respond within 30 days, or tell you within that time if we need more time and why, as the law allows. We will not treat you differently for exercising your rights.

If we decline a request, we will explain why. You may appeal by replying to our decision with the subject line "Privacy appeal", and we will respond to your appeal in writing within the time the law allows.

11.1 Referrers: self-service download and deletion

You can download a copy of your own account data at any time from Account Settings. The download includes your profile, address, the Businesses you are enrolled with, your payout methods, and a summary of the Introductions you have made (the Business name, the Customer's first name, and the Introduction's status). It never includes another person's full contact details.

You can also request deletion of your account from Account Settings. This immediately deactivates your account and starts a 14-day window in which you can cancel the request and fully restore the account. When the window ends, your information is removed as described in Section 9. You can also update your profile, change your link name, pause or leave any Business's program, and remove payout methods at any time.

11.2 Customers

If your information was submitted through FYI Link and you want it corrected or removed from our systems, email info@fyilink.com. We will act on your request, but the Business you were introduced to may also hold your information in its own records, so you may need to contact that Business directly as well.

11.3 Businesses and Team Members

Businesses can update their details, Content, Offers, and Team Members from the dashboard at any time. To export or delete a Business account, email info@fyilink.com from the Business contact email.

11.4 United States residents

Residents of states with comprehensive privacy laws have the rights described in this section, subject to the exceptions in those laws. We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising or for profiling that produces legal or similarly significant effects. We do not knowingly process sensitive personal information for purposes that require an opt-out.

11.5 Canadian residents

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including Quebec's Act respecting the protection of personal information in the private sector and the personal information protection acts of Alberta and British Columbia. You may contact our Privacy Officer with any question or complaint. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), or your provincial regulator, such as the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

12. Automated processing

The Service automatically flags Introductions that may be duplicates or self-referrals, and applies automated rate limits and bot checks. Flags are shown to the Business for its own review. We do not make decisions that produce legal or similarly significant effects about anyone based solely on automated processing.

13. Children

The Service is intended for people aged 18 or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact info@fyilink.com and we will delete it.

14. Links to other websites

The Service may link to other websites, such as a Business's own website or its Google or Facebook review page. Those websites are governed by their own privacy policies, and we are not responsible for them.

15. Changes to this Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify affected account holders by email or by a notice on the Service before the changes take effect. Continuing to use the Service after the effective date means you accept the updated Policy.

16. How to contact us

For any privacy question, request, or complaint, contact our Privacy Officer:

Privacy Officer, Amenity8 LLC (FYI Link)

Email: info@fyilink.com

Mail: 1621 Central Ave, Cheyenne, Laramie County, WY 82001, USA