Privacy and cookie statement

LinkPilot is a product of Slimme Schakels LLC, an LLC incorporated under the law of the state of Wyoming, United States, with mailing address 1000 Brickell Ave, Ste 715, PMB 2249, Miami, FL 33131, United States.

Where this privacy and cookie statement refers to "we", "us" or "our", this means Slimme Schakels LLC. Do you have questions about the protection of your personal data? Then send an email to info@linkpilot.app.

Slimme Schakels LLC has appointed EML Juridisch Advies, established in 6621 AN Dreumel, the Netherlands, as its representative within the European Union. Do you have questions for our EU representative about the processing of your personal data? Then you can get in touch via hello@emljuridischadvies.nl.

General

This privacy and cookie statement applies to the LinkPilot website (https://linkpilot.app) and to the services we offer via LinkPilot.

Our website may contain links to or services of other organisations. We are not responsible for the privacy and cookie statements or the processing of personal data by those organisations.

Insofar as we use external service providers for our own services, we explain below what role they have and for which purposes they process personal data.

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) is the Dutch supervisory authority for the protection of personal data. You can find more information about privacy and the GDPR on the website of the Dutch Data Protection Authority: www.autoriteitpersoonsgegevens.nl.

Personal data: what is it?

Personal data is information about a person by which that person can be identified directly or indirectly. This can be a name, email address or IP address, for example, but also information that can be traced back to a person in combination with other data.

Which personal data can we process?

Which personal data we process depends on the way you use LinkPilot. Among other things, we may process the following personal data:

• first and last name;
• email address;
• company name and other business details;
• invoice and address details;
• payment and invoicing details;
• LinkedIn profile ID;
• LinkedIn profile URL;
• LinkedIn display name;
• profile picture and profile picture URL;
• job description;
• information about the degree of connection on LinkedIn;
• public comments posted on LinkedIn;
• language preference and time zone;
• settings of the LinkPilot account;
• information you enter in LinkPilot yourself, such as message texts, search settings, freebies and posts;
• uploaded files and media;
• data about actions carried out, such as messages and connection requests sent;
• data about the use of the account, such as when you last logged in;
• IP address and other technical data;
• data processed through cookies and similar techniques;
• communication you have with us, for example by email, the contact form or the support chat.

Because some LinkPilot features work with public comments on LinkedIn, someone may include special or sensitive information in a public comment of their own accord. We do not ask for this and do not use such information as a separate category for selection or profiling.

Where does personal data come from?

Personal data can come directly from you, for example when you create a LinkPilot account, take out a subscription, contact us or enter information in LinkPilot yourself. For certain parts of the services, personal data can also come from public LinkedIn information. This applies, for example, to people who publicly comment on a LinkedIn post of a LinkPilot customer.

Why do we process personal data?

We only process personal data when there is a valid legal basis for doing so. Depending on the processing, the basis can be:

• the performance of an agreement;
• compliance with a legal obligation;
• our legitimate interest, taking your interests and rights into account;
• your consent.

Do you have to provide personal data to us?

Certain personal data is necessary to create and use a LinkPilot account. Without this data we cannot, for example, create an account, perform the agreement or deliver our services. Which data is necessary depends on the purpose for which you provide it. For the contact form, for example, your name, email address and message are needed to handle your question. For a subscription, certain data is needed for payment and invoicing. Where providing personal data is not mandatory, you can choose not to provide it. This may mean that we cannot offer certain services or functionalities.

We process personal data for the following purposes, among others

Processing personal data on behalf of our customers

An important part of LinkPilot is running automations on LinkedIn on your behalf as our customer. In doing so, LinkPilot may process personal data of people who are not LinkPilot customers. This can be, for example, people who publicly comment on a LinkedIn post of a LinkPilot customer. The data that may be processed in this context includes:

• name and first name;
• LinkedIn profile ID;
• LinkedIn profile URL;
• job description;
• number of followers;
• profile picture or profile picture URL;
• the text of public comments;
• degree of connection with the customer;
• status of the follow-up.

This data comes from information you have, or that the person concerned has made public themselves on LinkedIn, or from a public comment under a LinkedIn post. We do not read private messages. As the controller, you are responsible for the lawfulness of the processing and for the choices made within LinkPilot about the target audience, the content of messages and the way people are approached.

Are you not a LinkPilot customer, but is your personal data processed via LinkPilot on behalf of a customer? Then for questions about the processing you can first contact the customer concerned. Of course, you can also contact us at info@linkpilot.app.

LinkedIn

LinkPilot uses technical integrations with LinkedIn to carry out parts of our services. When you connect your LinkedIn account to LinkPilot, we may process your LinkedIn profile ID, display name and profile picture, among other things. LinkPilot does not receive your LinkedIn password. The password of your LinkedIn account does not end up in our systems.

In addition, LinkPilot may process public LinkedIn information on your behalf about people who, for example, comment on your LinkedIn post. Which data is processed and on whose behalf is explained under "Processing personal data on behalf of our customers". LinkedIn is itself responsible for the processing of personal data within its own platform. LinkedIn terms and privacy policy apply to the processing by LinkedIn itself.

Special categories of personal data

We do not aim to collect or process special categories of personal data. For example, we do not ask for health data, citizen service numbers, data about ethnicity, religion or political opinions, biometric data or identity documents. LinkPilot can process public LinkedIn information. A person may, for example, include information of a special or sensitive nature in a public comment of their own accord.

We do not ask for this and do not use such information for selection, profiling or other purposes for which special categories of personal data are needed.

No data of people under 18

LinkPilot is intended for business use and is not aimed at minors.

We therefore do not intend to collect personal data of people under the age of 18. However, we cannot always check how old someone is. If you believe we have processed personal data of a minor, please contact us at info@linkpilot.app.

Account and use of LinkPilot

To use LinkPilot, you create an account. When creating an account we may process your first name, last name, email address and password. Your password is stored only in encrypted form as a hash and cannot be viewed by us. You can also choose to log in with Google. In that case we may receive your Google ID, name and email address, among other things.

When setting up your account we may also process your language preference, time zone and the active hours within which the automation may run. When you connect your LinkedIn account, we process the data necessary for this, including your LinkedIn profile ID, display name and profile picture. While using LinkPilot we may also process the data you enter in the service yourself, such as:

• freebies;
• code words;
• message texts;
• search settings;
• posts;
• uploaded media;
• other campaign settings.

We also keep a log of actions carried out, for example whether a message or connection request has been sent.

Payments and invoicing

We use Stripe for payments and subscriptions. When taking out a subscription, name, email address, billing address and payment details may be processed by Stripe. Full card details do not end up in our own systems. Stripe also processes data needed for invoicing and payment administration.

External service providers

We do not sell your personal data. We only share personal data with third parties when this is necessary for our services, when we are legally obliged to do so or when there is another valid legal basis. For certain parts of our services we use external service providers. Among other things, we use:

We only provide these parties with the data needed for the relevant service. When a party processes personal data on our behalf, we make appropriate arrangements about this, including a data processing agreement where necessary. The exact role of an external party can differ per processing operation. Some parties process personal data on our behalf, while other parties may be independently responsible for their own processing.

Webhooks and integrations with external services

Within LinkPilot, users can set up webhooks. With a webhook you can choose to have certain data from LinkPilot automatically forwarded to an external URL specified by you when a certain event takes place. This can happen, for example, when a post has been published or when another action within LinkPilot has taken place.

You decide yourself whether a webhook is set up, to which external URL data is sent and which data is passed on. We do not determine which data the user sends to an external party via a self-configured webhook. The external party that receives data via a webhook you have set up is itself responsible for the further processing of this data from the moment of receipt. The privacy statement of that external party applies to that processing.

You are yourself responsible for setting up webhooks carefully and for ensuring that forwarding personal data to the external party concerned happens lawfully.

Data of LinkedIn contacts and potential contacts

Our services can automatically search for people on LinkedIn on the basis of search criteria or keywords you provide. When the tool finds people who meet these criteria, we may record data about these people, such as their name, LinkedIn profile and other data available via LinkedIn. We use this data to select relevant people on your behalf and, for example, to send a connection request.

In addition, we may keep a copy of your LinkedIn connection list. We use this data among other things to be able to select and mention people in messages or posts. This may involve people who have not contacted us themselves, have not responded to a message or have had no other active interaction with us. The data is processed insofar as this is necessary to deliver the services you purchase from us.

In doing so we only process the data needed for these purposes and we do not keep it longer than necessary. When you end the LinkedIn connection or delete your account with us, the data we keep in the context of this functionality is deleted, unless we are required under a legal obligation to keep certain data for longer.

Functional emails

We do not send a newsletter from LinkPilot and there is no general mailing list. We do send functional emails that are necessary for the services. Think, for example, of an account confirmation, a password reset, a warning when the LinkedIn connection no longer works, a notification when a scheduled post could not be published, a reminder that a trial period is ending;

a warning before an inactive account is deleted. These emails are part of delivering and managing the services and are not a general marketing newsletter. To send these emails we use Resend and Supabase, among others.

AI

AI is part of the LinkPilot service. LinkPilot uses AI to automatically assess public comments under a LinkedIn post. The AI assesses whether a comment is likely to be a request for a freebie. Based on that assessment, an automatic follow-up can be started. For this we use Anthropic via the API, with the Claude Haiku 4.5 model.

For this AI assessment, the text of the public comment is provided to Anthropic. As context for the assessment, the name of the freebie and the text of the LinkedIn post under which the comment was placed may also be sent along. The name, profile picture, LinkedIn profile ID and other data about the person commenting are not sent to the AI for this assessment. The data is not used by Anthropic to train the models.

The AI assessment does not by itself lead to a decision with legal effects or a similarly significant effect for the data subject. The AI is used as part of the automation within LinkPilot. You determine the target audience, settings and texts yourself and can intervene or exclude people within the service. When the AI assessment is not available nothing happens.

We do aim to limit the personal data processed in the context of AI as much as possible. We do not process personal data in AI tools when this is not necessary for the performance of our services. Because AI can be part of our services, we may use different AI providers.

We may adjust, replace or expand the software and tools we use from time to time when this is necessary for the performance and improvement of our services. For more information about how we use AI, which data may be processed in the process and which arrangements and safeguards apply, we refer to our AI statement on the website.

The AI assessment is not used to assess people legally or in a similarly significant way. The assessment only determines whether a certain follow-up step is carried out within the automation set up by the customer.

Affiliate partners

We work with affiliate partners who can recommend LinkPilot via a personal affiliate link. When someone visits LinkPilot via an affiliate link and subsequently takes out a subscription, we may record that the sign-up came about via that affiliate. The affiliate receives a fee for this. The affiliate does not get to see names, email addresses or other directly identifying personal data of customers. The affiliate only receives information about the sign-ups that came about via their affiliate link and the associated fee.

Reviews

We intend to ask customers for a review about our services in the future. If we want to publish a review on our website or via other communication channels, we ask for permission in advance where this is necessary. On publication, the name or other information provided with the review may be included. Consent once given can be withdrawn. You can also ask us to remove a review you have provided.

Retention periods

We do not keep personal data longer than necessary for the purpose for which we process it. Different retention periods apply to different types of data.

When you delete your account, the account data, campaign data and stored files are deleted. The connection with the external integration partner is broken in the process.

Data subject to a statutory retention obligation may be kept by us longer than the periods mentioned above, insofar as this is legally necessary.

Transfers to third countries

Slimme Schakels LLC is established in the United States. In addition, we use service providers that are established outside the European Economic Area (EEA) or that may process personal data outside the EEA. When personal data is transferred to a country outside the EEA, we ensure that an appropriate transfer mechanism within the meaning of the GDPR is applied.

Depending on the supplier concerned, this can be, for example, an adequacy decision, the EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs) or another appropriate safeguard. We assess per service provider which transfer mechanism applies and take additional measures to protect personal data where necessary.

Your rights

The GDPR gives you various rights when it comes to the processing of your personal data. Exactly which rights you can exercise depends on the legal basis on which we process your personal data and on the circumstances of the case. You have, among others, the following rights:

Right of access

You have the right to know which personal data we process about you. You can ask us for a copy of this personal data and for information about, among other things, the purpose of the processing, the categories of personal data we process and the parties with whom we share this data.

Right to rectification

Is your personal data incorrect or incomplete? Then you can ask us to correct or complete this data.

Right to erasure

In certain situations you have the right to ask us to delete your personal data. We delete your data when we no longer need it or when there is another legal reason for doing so. This right is not unlimited. Sometimes we are legally obliged to keep certain data, for example.

Right to restriction of processing

In certain situations you can ask us to temporarily restrict the processing of your personal data. We may then, for example, still store your data but not process it further.

Right to data portability

When we process your personal data on the basis of your consent or because this is necessary for the performance of an agreement and the processing takes place by automated means, in certain situations you can ask to receive your personal data in a structured, commonly used and machine-readable file. You can also ask us to transfer this data directly to another organisation, insofar as this is technically possible.

Right to withdraw consent

Have you given us consent for a certain processing of your personal data? Then you may withdraw this consent at any time. Withdrawing your consent has no consequences for the lawfulness of the processing that took place before the moment you withdraw your consent.

Right to object

In certain situations you can object to the processing of your personal data. This applies, for example, when we process your personal data on the basis of our legitimate interest. We will then assess your objection and stop the processing if we have no compelling legitimate grounds to continue. You can also always object to the use of your personal data for direct marketing.

How can you exercise your rights?

Do you want to exercise one of the rights above? Then send an email to info@linkpilot.app. In your message, please state clearly which request you are making and which personal data your request relates to.

We respond to your request as soon as possible and in any case within one month. If your request is complex or if you submit several requests at once, this period can be extended by a maximum of two months where the GDPR permits this. We will then inform you about that within one month.

To prevent us from providing personal data to the wrong person, we may ask you for additional information to verify your identity. In doing so we do not ask for more information than is necessary to establish your identity.

A request to delete your personal data does not automatically mean that we can delete all data immediately. When we are legally obliged to keep certain data, for example, we have to keep that data for the statutory retention period. If we process personal data on behalf of a customer, it may be necessary to forward your request to the customer concerned. In that case, that customer is the controller.

Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, unwanted disclosure and unauthorised alteration. The measures we take include:

• access to personal data is limited to the systems and people that need this access;
• our devices are secured with passwords, access codes and, where available, biometric security;
• the systems used are equipped with access security;
• passwords are stored securely in a password vault;
• we limit the number of devices with which access to personal data is possible;
• we use secure connections;
• we make sure that the software and systems used are updated where necessary;
• storing and deleting data is automated where possible;
• technical logs and other data are not kept longer than necessary.

No security measure can guarantee that personal data is completely safe under all circumstances. Do you suspect that your personal data is not properly secured or that there is misuse? Then contact us as soon as possible at info@linkpilot.app.

Data breaches

Despite our security measures, a security incident may occur in which personal data is lost, altered or becomes accessible to unauthorised persons. In that case we assess what has happened and which measures are needed. When we are obliged as controller to report a data breach to the Dutch Data Protection Authority, we do so within the applicable statutory period.

When we process personal data on behalf of a customer and there is a data breach relating to that processing, we inform the customer concerned in accordance with the arrangements made about this in the data processing agreement. Do you suspect a data breach or another security incident? Then report this as soon as possible via info@linkpilot.app.

Filing a complaint

Do you have a complaint about the way we handle your personal data? Then first contact us at info@linkpilot.app. We will of course first try to resolve your complaint ourselves. In addition, you always have the right to file a complaint with the Dutch Data Protection Authority if you believe that we do not process your personal data in accordance with privacy legislation.

Cookies

Our website uses and places cookies and similar techniques. By having this cookie statement we meet the obligations that apply to the use of cookies, and you know how we handle cookies too.

What is a cookie?

A cookie is a small text file that can be stored on your computer, tablet or smartphone on your first visit to a website. Among other things, cookies make sure a website works properly and can be used, for example, to remember settings or preferences.

Which cookies do we place?

We do not use analytical cookies to analyse the behaviour of visitors on our website. We also do not use tracking cookies, marketing cookies or advertising cookies to follow visitors or show personalised advertisements. For example, we do not use Google Analytics or a comparable analytics package.

Functional cookies

Our website uses functional cookies. These cookies are necessary to make our website and services work properly. For example, we use a session cookie to keep you logged in and we may use a cookie or similar technique to remember your language preference. No consent has to be requested for placing and using cookies that are strictly necessary for the functioning of our website and services.

Affiliate programme

We use a functional cookie for our affiliate programme. When you arrive at our website via an affiliate link, a temporary cookie is placed. This cookie contains only an affiliate code and no name, email address or other personal data. We use the affiliate cookie to be able to attribute any sign-up to the affiliate via whose link you came to our website. The cookie is kept for a maximum of 30 days and is deleted as soon as you sign up. The cookie is not used to track you across different websites or for other marketing or tracking purposes.

The affiliate functionality is carried out entirely within our own systems. We do not use an external affiliate party for placing and reading this cookie.

Session cookie

With the help of a session cookie we can recognise your session while you use our website. As a result, for example, you do not have to log in again every time you use different parts of our services. A session cookie is deleted as soon as the session ends or when you close your browser, depending on the technical set-up of the cookie concerned.

Bot protection

On the pages for registration, logging in and resetting a password we use a technical bot protection service. This service helps us to counter automated and possible misuse of our website and services. When using it, technical data including the IP address may be processed. This processing is necessary for the security of our website and services.

Support chat

A support chat may be available on our website. For this we use an external chat service. This service may place a technical identifier on your device to make the chat function properly and to ensure that a conversation can be continued.

Videos

Videos offered via an external video service may be displayed on our website. The video player is only loaded after you have clicked the video yourself to play it. When playing a video, the video service concerned may process technical data.

Refusing, blocking and deleting cookies

You can refuse, block or delete cookies via the settings of your browser. For example, you can set your browser so that no cookies are stored or so that you receive a notification when a website wants to place a cookie. You can also choose not to allow certain cookies. How you do this differs per browser. Therefore check the help function or settings of your browser for more information.

Please note: blocking or deleting cookies may have consequences for the operation of our website and services. For example, certain functions may no longer work properly or you may have to log in again.

Unforeseen cookies

In some cases it may happen that cookies or similar techniques are placed via our website by third parties that we are not always immediately aware of, for example because an external service changes its technical operation. Do you come across a cookie that you cannot find in this statement? Then let us know at info@linkpilot.app. Then we can investigate this and adjust our cookie statement where necessary.

Changes

We may change this privacy and cookie statement from time to time, for example when our services, the systems we use or legal obligations change. The most recent version is always on our website. This version is dated 28 August 2026.