Privacy Policy

• Account data: your name, email address and authentication identifiers (including when you sign in with Google or via email one-time code).
• Billing data: plan, subscription status and transaction references. Card and payment details are collected and stored by our third-party payment processor, not by us.
• Connected-account data: the LinkedIn session credentials and/or cookies you choose to connect, which are stored in encrypted form and used solely to operate the Service for you.
• Content and contacts: campaigns, messages, templates, notes, lead lists, and the contact records you import, search or enrich.
• Support communications: messages you send us.
• Identity verification status: if you choose to verify your identity to unlock restricted message wording, we store the outcome only - never your ID documents, photograph or biometric data. See Section 15.

• Usage and device data: log data, IP address, browser type, device information, pages viewed and actions taken.
• Cookies and similar technologies: used for authentication, security, preferences and analytics (see Section 9).
• Security and anti-abuse signals: such as sign-up IP address and trial-usage history, used to detect and prevent fraud and trial abuse.

When you sign in with Google, we receive basic profile information (such as your email and name) as permitted by your Google account settings. When you operate outreach, the Service processes publicly available professional profile data on the platforms you use.

Our optional browser extension collects data only after you install it and link it to your LinkedMinds account. Section 4 describes exactly what it collects and why.

• LinkedIn authentication cookies. When you connect or refresh a LinkedIn account, the extension reads your browser’s cookies for the linkedin.com domain and transmits them to your LinkedMinds workspace. This is the complete LinkedIn cookie set for that domain - not only the li_at cookie - because LinkedIn rejects a partial session as suspicious, which would break the automation you have configured and put your account at risk. These cookies are transmitted over TLS, stored encrypted at rest, and used for one purpose only: to act on LinkedIn as you, exactly as you have instructed.
• Your own LinkedIn profile. Your name, photo, headline, profile URL and (where available) the email address on your LinkedIn account, so your connected account is identifiable in the dashboard.
• Profile data you explicitly capture. When you click the capture button and confirm an import, the extension reads profile information already displayed on the LinkedIn page you are viewing - name, profile URL, headline, job title, employer, location and, on a full profile page, the About text, work history, education and skills - and adds it to the list or campaign you choose. This is personal data about third parties; see Section 2 regarding your responsibilities as its controller.
• Extension settings. Your workspace token and dashboard URL, held in browser storage so the extension knows which workspace to talk to.

• It does not read, collect or transmit data from any site other than LinkedIn and LinkedMinds.
• It does not collect data in the background from pages you merely visit: profile capture happens only when you click the capture button and confirm.
• It does not send additional requests to LinkedIn. Capture reads only what your browser has already rendered on screen.
• It does not read your LinkedIn messages, password, or payment information.
• It contains no advertising, analytics or third-party tracking code.

• cookies - to read your LinkedIn session so the Service can act on your behalf, as described above.
• storage - to remember your workspace token and settings.
• notifications - to tell you when an account has connected or a session needs attention.
• Access to linkedin.com - to read your session and the profile data you choose to capture.
• Access to linkedminds.in - to receive your workspace token from the dashboard so you do not have to copy and paste it.

Our use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically, data obtained through the extension is used only to provide and improve the features you have chosen to use. We do not:

• sell, rent or license it, or transfer it to data brokers or information resellers;
• use or transfer it for advertising, retargeting, or personalised advertising;
• use it to train, fine-tune or improve generalised artificial-intelligence or machine-learning models;
• allow humans to read it, except with your explicit consent for a support request you have raised, where required by law, or where necessary for security or abuse investigation, and in each case only on de-identified or aggregated data where that is sufficient.

Machine-learning features that are part of the Service itself - such as scoring the risk to your own connected account - operate only on your own workspace’s data and are not used to build models offered to other customers on identifiable data.

Nothing is collected until you install the extension and link it. You can stop collection at any time by removing the extension from your browser. To delete data already collected, disconnect the LinkedIn account in your dashboard - which deletes the stored session cookies for that account - or email support@linkedminds.in to request deletion of your workspace and its contents.

Before a message, connection note, campaign or post is saved or sent, the Service checks its wording against a published list of patterns covering scams, financial and business-opportunity claims, spam, harassment, discriminatory content and adult content. This is an automated keyword and pattern check, not an AI judgement about you, and no decision is made about a person outside your account.

When a check blocks something, we record the category matched, the pattern that matched, and a short excerpt of the surrounding text (up to 500 characters) so we can investigate abuse and correct false positives. We do not store the rest of the message for this purpose. These records are visible only to LinkedMinds staff, are retained for up to 24 months, and are deleted when your account is erased.

Two of those categories - scam-style financial claims and crypto, forex and business-opportunity wording - can be unlocked on your account if you verify who you are. Verification is entirely optional. You can use the Service in full without it; it only affects whether that particular wording is permitted.

Verification is carried out by Didit, our identity-verification provider, acting as a processor on our behalf. You are shown Didit’s own flow, in which you present a government-issued photo ID and a selfie. That process may involve biometric analysis of your facial image for the sole purpose of confirming that you match your document, and it is performed by Didit under its own privacy notice, to which you consent before starting.

We do not receive, view or store your identity documents, your photograph, or any biometric data. The only information written to your LinkedMinds account is:

• whether you are verified (a true/false flag) and the date it was granted;
• the status reported by Didit (for example in progress, in review, approved, declined or expired);
• a Didit session reference and the timestamp of the last result we accepted.

The legal basis is your consent, and performance of our contract with you where verification is needed to release a restricted feature. We also rely on our legitimate interest in preventing our platform being used for fraudulent outreach. You can withdraw consent at any time by emailing support@linkedminds.in; we will clear your verification status, which restores the default wording restrictions. Any data held by Didit is deleted in accordance with its retention policy, and we will pass on your request.

A verification can be reviewed by a human at Didit if the automated check is inconclusive. If it is later declined or expires, the restricted wording is blocked again automatically. If you believe a verification decision is wrong, contact us - a person will look at it, and you are not subject to a decision based solely on automated processing that produces legal or similarly significant effects.