Privacy Policy

1. Information We Collect

We collect information you provide directly to us and information generated through your use of the Service:

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Generate AI-powered relationship insights, trust scores, and introduction recommendations
• Enable contact management, network mapping, and CRM functionality
• Send transactional emails (account verification, password resets, introduction drafts)
• Analyze usage patterns to improve the Service
• Comply with legal obligations and enforce our Terms of Service
• Protect against fraud, abuse, and security threats

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: Trusted vendors who assist in operating the Service (cloud hosting, database services, email delivery) under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to users.
• With Your Consent: For any other purpose with your explicit consent.
• Aggregated Data: Non-personally identifiable, aggregated statistics about Service usage.

4. Google OAuth and Third-Party Sign-In

When you choose to sign in using Google OAuth, we receive limited profile information from Google (name, email address, and profile photo) solely for the purpose of creating and authenticating your account. We adhere to Google's API Services User Data Policy, including the Limited Use requirements.

Specifically, we:

• Only request the minimum necessary Google account scopes (profile and email)
• Do not access, store, or use your Google data for advertising or any purpose beyond authentication
• Do not share Google user data with third parties except as required to provide the Service
• Allow you to revoke Google access at any time via your Google Account settings

5. Data Security

We implement industry-standard security measures to protect your information, including TLS encryption for data in transit, bcrypt hashing for passwords, tenant-level data isolation (your data is partitioned and inaccessible to other users), session token authentication with secure cookie settings, and regular security reviews. While we strive to protect your information, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at [email protected]. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Portability: Request a machine-readable export of your data.
• Opt-out: Opt out of non-essential communications at any time.
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

To exercise these rights, contact us at [email protected].

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers are located. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date and, where appropriate, by sending you an email notification. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.