Privacy statement

LinkPilot is a service provided by Slimme Schakels, based in Geesteren (7274 AG, 8a), the Netherlands, and registered with the Dutch Chamber of Commerce (KvK) under number 92740324. In this privacy statement we explain which personal data we process through LinkPilot, why we do so and what rights you have. Questions about privacy can be sent to info@linkpilot.app.

1. Two roles: controller and processor

LinkPilot processes two kinds of personal data, and our role differs per kind:

• Your account data. For the data belonging to your account (such as your name, email address and settings), we are the data controller: we determine how and why that data is processed.
• Prospect data. On your instructions, the service also processes data of people on LinkedIn, such as people who comment on your post or whom you have approached through your search settings. For that data, you are the data controller and we are the processor: we only process it according to your settings and not for our own purposes. The arrangements for this are set out in Article 12 of the terms and conditions.

2. What data we process

About you as a user

• first name, last name and email address;
• password (stored encrypted; we cannot see it);
• when signing in with Google: your Google ID, name and email address;
• profile picture (automatically taken from your LinkedIn profile when connecting);
• language preference, time zone and the active hours of the automation;
• data about the connection to your LinkedIn account: the account ID at our integration partner Unipile, your LinkedIn profile ID, your display name and the status of the connection. We never receive or store your LinkedIn password;
• the settings and content you enter yourself: freebies, code words, DM texts, reply variants, search settings, exclusion list, posts and uploaded media;
• a log of executed actions (for example "DM sent" or "connection request sent"), needed to enforce limits and detect errors;
• once payments run through the service: payment and invoice data via our payment provider Stripe. Your full card details are processed by Stripe only and never reach our systems.

About prospects (on your instructions)

• name and first name;
• LinkedIn profile ID and profile URL;
• job title (headline) and follower count;
• profile picture URL;
• the text of comments on your posts;
• connection degree and follow-up status (for example "DM sent").

This only concerns information these people have made visible on LinkedIn themselves or have posted as a comment under your post. The service does not collect private messages from prospects and does not look beyond what LinkedIn shows to your account.

When you contact us

If you fill in the contact form or send us an email, we process your name, your email address and the content of your message in order to answer your question. We send those messages via our email provider Resend to info@linkpilot.app. If you use the support chat on the site, we process your chat messages via our chat provider Crisp.

3. Purposes and legal bases

We never sell or rent your data to third parties and we do not use your data or that of prospects to train AI models.

4. Sub-processors

To provide the service, we engage the following parties. A data processing agreement (DPA) is in place with each of them, safeguarding the security and confidentiality of your data.

If this list changes, we will update this statement. If you have substantial objections to a new sub-processor, you can cancel your subscription.

5. Transfers outside the EEA

We store data within the European Economic Area as much as possible. Where a sub-processor processes data outside the EEA (such as Vercel, Inngest, Anthropic, Resend, Cloudflare, Vimeo, Google and Stripe), this is done on the basis of the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.

6. Retention periods

• Account data and all campaign data (freebies, prospects, comments, connection requests, posts, action log): we keep them for as long as your account exists. If you delete your account, we immediately erase all of this data, including stored files, and remove the connection at Unipile. If your account has been inactive for 24 months (no sign-in and no active subscription), we delete it as well: you will first receive a warning by email and then have 30 days to sign in again before the deletion takes place.
• Invoice and payment data: 7 years, as required by the Dutch tax authorities.
• Email correspondence and messages via the contact form: at most 2 years after our last contact.

7. Your rights

For the data for which we are the controller, you have the right to:

• access the data we process about you;
• rectification of incorrect data;
• erasure of your data (you can also do this yourself, via delete account in the settings);
• restriction of processing;
• data portability: you can export your prospects and connection requests as a CSV file at any time;
• object to processing;
• withdraw previously given consent.

Send your request to info@linkpilot.app. We will respond within one month. For complex or numerous requests, this period may be extended by two months; we will inform you if that is the case.

8. Rights of prospects

Are you listed as a prospect in the system of a LinkPilot user and do you want to exercise your rights? The user who approached you is the controller for that data. If you contact us anyway, we will help you as best we can and, where possible, put you in touch with the right user. Users can also place people on an exclusion list, so that the automation never approaches them (again).

9. Security

We take appropriate technical and organisational measures, including:

• encrypted connections (TLS) and encrypted storage;
• strict separation of data per user in the database (row level security): a user can never see another user's data;
• passwords are stored in encrypted (hashed) form only;
• access to production systems is limited to those who need it;
• integrations with external services are secured with secret keys and signature verification.

10. Data breaches

Despite all measures, something can go wrong. In the event of a data breach, we act in accordance with the Dutch data breach notification obligation: where required, we report the breach to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours and inform affected users. If a breach affects prospect data for which you are the controller, we will inform you without undue delay. If you suspect a security issue yourself, report it immediately via info@linkpilot.app.

11. Cookies

LinkPilot itself only uses functional and strictly necessary cookies: a cookie to remember your logged-in session and a cookie for your language preference. In addition, on some pages we load third-party services that may store something on your device:

• on the pages for signing up, signing in and resetting your password, a bot protection (Cloudflare Turnstile) runs, which processes your IP address and may place a strictly necessary security cookie;
• on the desktop site we load the Crisp support chat, which stores a technical identifier (via a cookie or local storage) so that your conversation can continue;
• our demo and instruction videos are hosted on Vimeo. The video player only loads once you click play yourself; if you do, Vimeo may place cookies.

We do not use analytics, tracking or marketing cookies and we do not place anything for advertising purposes. That is why we do not show a cookie banner.

12. Automated decision-making

We do not make automated decisions about you that have legal effects or otherwise significantly affect you. The automation in the service only executes the settings you have chosen yourself. The AI assessment of comments (see the sub-processor Anthropic) only helps to filter the comments on your freebie; you always remain in control of who is approached.

13. Minors

The service is intended for business use and is not aimed at persons under the age of 18. We do not knowingly process data of minors. If you believe this is happening anyway, please contact us and we will delete that data.

14. Filing a complaint

If you disagree with how we handle your data, we would like to hear it from you first via info@linkpilot.app. In addition, you always have the right to file a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.

15. Changes to this statement

We may amend this privacy statement, for example when new features or other sub-processors are introduced. The current version is always available on this page, with the date of the latest change at the top. In the event of material changes, we will inform you through the service or by email.