What happens to your data

We never ask for your LinkedIn password

• You bring in the file LinkedIn gives you, or a spreadsheet. We never log in to LinkedIn for you.
• No browser extension, no scraping, no automatic messages or connection requests.
• The free Network X-ray reads your file inside your browser. It isn't uploaded.

Where your data is kept

• Your contacts, Sales CRM, Recruiting and CVs are kept in Vercel's private storage, which isn't reachable from the internet. Vercel may store and process it in the United States and other countries.
• Everything is sent over HTTPS.
• Nothing is kept inside Saudi Arabia or Egypt today.

Who processes it

• Vercel hosts the website and stores the data.
• Resend sends password reset emails, so it gets your email address.
• Paddle, our Merchant of Record, handles payments, invoices and tax. We never see your card number.

No one else. We don't use advertising, tracking or analytics cookies, and we don't sell data. Nothing you store is sent to an AI service, and CVs are never read, scanned or used to train anything. The quick log that understands your notes runs in your browser.

Who can see it

• Only you, unless you start or join a team.
• In a team, every member sees the team's Sales CRM, Recruiting and CVs. Your LinkedIn leads and your own workspace stay yours alone.
• A quotation link can be opened by anyone who has it. It stops working 30 days after the quotation's valid-until date (60 days after sharing if it has none, and never later than 180 days), and you can switch it off at any time.
• Calendar and Google Sheets links are private addresses. If one leaks, make a new one and the old one stops working.

How deleting works

• Each part has its own delete button: all LinkedIn leads, the whole Sales CRM, all Recruiting data, or one candidate with their CV.
• Deleting your account, under Account settings, deletes your contacts, Sales CRM, Recruiting, CVs, files and shared links. It asks for your password first.
• A team's records belong to the team. Its owner can delete them, or the whole team.
• We can't bring back deleted data, so export it first if you might need it. You can export to Excel or CSV at any time, on every plan.

How sign-in is protected

• Passwords are stored only as a scrypt hash.
• Sessions use one signed, HTTP-only cookie.
• Repeated wrong passwords are locked out, and every part of the app limits how fast it can be used.
• Our pages load no scripts from other sites, except Paddle's at checkout.

What we don't have yet

• Two-step sign-in (a code as well as a password).
• Email address checks at sign-up.
• An independent security audit or certification, such as SOC 2 or ISO 27001.
• Storage inside Saudi Arabia or Egypt.

Data about other people

The contacts and candidates you add are about other people. You decide why you hold them, and we keep them only for you. Recruiting records why you hold each candidate and a keep-until date, reminds you when it passes, exports everything about one person when they ask, and deletes someone on request. Read the Privacy Policy for the full detail.