Privacy Policy

Last updated: October 17, 2026

This policy explains what personal data Linkdify ("Linkdify", "we", "us") collects when you use linkdify.io, our app, our API, and our integrations with AI assistants such as ChatGPT and Claude. It covers what we collect, why, who we share it with, how long we keep it, and how you can control or delete it.

Questions or requests: email tomer@linkdify.io.

1. Data we collect

Your account

• Name, email address, and password (stored hashed), or your Google account name and email if you sign in with Google.
• Team membership, settings, timezone, and the campaign schedule you choose.
• Billing details. Card payments are handled by Stripe. We store a Stripe customer ID and subscription status, never your full card number.
• The IP address you signed up from, and basic usage records such as daily action counts.

Your LinkedIn account

• When you connect LinkedIn, you sign in through our LinkedIn integration provider. We never see or store your LinkedIn password.
• We store an account identifier, your LinkedIn name, profile URL, profile photo URL, and account features (for example, whether it has Premium or Sales Navigator).
• Your LinkedIn connections, conversations, and messages, so we can run campaigns and show replies in your Linkdify inbox.

People you reach out to ("leads")

• Professional profile information: name, job title, headline, company, location, LinkedIn profile URL, profile photo, summary, skills, follower and connection counts, and sometimes a business email address.
• Posts they have published publicly on LinkedIn, used to personalize messages and to detect buying signals you ask us to watch for.
• Data you upload yourself, such as a CSV of contacts and any custom fields in it.
• The outreach history with each lead: connection requests, messages, voice notes, replies, and their status.

Lead data comes from public LinkedIn profiles, from B2B contact data providers when you search for leads, and from files you upload.

Content you create

• Campaigns, message templates, AI writing instructions and skills you upload, and LinkedIn posts you write or schedule.
• If you use voice notes with your own voice, the voice recording you provide to create the voice, and the voice notes generated from it.

Website and app usage

• Cookies that keep you signed in and remember preferences.
• Analytics data such as pages viewed, clicks, device and browser type, approximate location from IP address, and referring site. Some of our analytics tools record sessions (how pages are scrolled and clicked) so we can find and fix usability problems.
• Server logs with IP address, browser type, and requested URL, used for security and debugging.
• If you arrived through a partner or affiliate link, the referral that brought you.

2. ChatGPT, Claude, and other AI assistants

You can connect Linkdify to AI assistants that support the Model Context Protocol (MCP), such as ChatGPT and Claude. To connect, you sign in to Linkdify and approve the connection. The assistant then gets an access token limited to your own Linkdify account. It can call Linkdify's tools only when you ask it to.

What the assistant sends us (tool inputs)

• Lead search criteria, such as job titles, companies, industries, locations, keywords, and the number of results you want.
• Campaign names, message text, and the leads to add to a campaign.
• Messages, connection request notes, and voice note scripts to send, and replies to conversations.
• LinkedIn post text and scheduling times.
• Keywords or competitors to watch for buying signals.
• Identifiers of your own leads, campaigns, accounts, and conversations.

What we send back to the assistant (tool outputs)

• Your connected LinkedIn accounts (name and status) and a one-time link to connect a new one.
• Lead details: name, job title, company, location, LinkedIn profile URL, profile photo URL, and public posts.
• Campaign names, statuses, and statistics.
• Recent replies from leads, including the message text, sender name, and the conversation identifier needed to reply.
• Confirmation that a message, request, voice note, or post was sent or scheduled.
• Your daily lead search allowance and remaining balance.

We only return data from your own account (and campaigns your team shares with you), limited to what the request needs. We never return your password, payment details, LinkedIn credentials, or API keys to an assistant.

Once data reaches the assistant, the assistant provider's own privacy policy applies to it (for example, OpenAI's for ChatGPT or Anthropic's for Claude).

To stop an assistant's access, disconnect Linkdify in that assistant's settings (in ChatGPT: Settings → Apps). You can also email us and we'll revoke its access token.

3. How we use data

• To provide the service: finding leads, running your campaigns, sending messages and connection requests on your behalf, showing replies and results, and publishing your posts.
• To personalize outreach. When you ask for it, we send a lead's profile and public posts, plus your instructions, to an AI model to draft a message or generate a voice note.
• To keep teams from contacting the same person twice, when you're part of a team.
• To bill you and prevent fraud and abuse.
• To send account and service emails, such as team invites, reply notifications, and password resets.
• To understand how the product is used and improve it, and to debug errors.
• To comply with the law and enforce our Terms of Service.

We don't sell personal data. We don't use your leads' data or your conversations to train AI models, and we don't show them to other customers.

4. Who we share data with

We share data only with service providers that help us run Linkdify, and only what each one needs:

• LinkedIn integration provider (Unipile), to connect your LinkedIn account and send and receive messages on your behalf.
• B2B contact data providers (Apollo, accessed through data resellers) and public web data providers (Apify), for lead search and public LinkedIn posts.
• AI model providers (OpenRouter, which routes requests to models from OpenAI, Anthropic, Google, and others), to draft messages and posts.
• Voice provider (ElevenLabs), to create your voice and generate voice notes.
• Payments (Stripe).
• Hosting and infrastructure (Heroku, Amazon Web Services, Redis Cloud, Cloudflare), log storage (Papertrail), and email delivery (Postmark).
• Analytics (PostHog, Microsoft Clarity, Google Analytics and Google Tag Manager, DataFast) and affiliate tracking (Rewardful).
• Sign-in (Google), if you choose to sign in with Google.

Inside Linkdify, your leads and conversations are visible to you and to teammates in your Linkdify team when you share a campaign with them. If you're a team owner, you can see replies to your teammates' outreach.

We may also disclose data if the law requires it, to protect our rights or users' safety, or as part of a merger or acquisition, in which case this policy would continue to apply.

5. How long we keep data

• Account, leads, campaigns, messages, and content: for as long as your account exists. If you cancel your subscription but keep your account, your data stays so you can come back. Delete your account to remove it.
• When you delete your account: your account, leads, campaigns, messages, and connected LinkedIn accounts are deleted from our database right away. Copies may remain in our hosting provider's disaster-recovery backups for a limited period until they are overwritten.
• When you disconnect a LinkedIn account: we stop accessing it immediately.
• AI assistant access tokens: until you disconnect the assistant, delete your account, or ask us to revoke them.
• Server logs: up to 30 days.
• Billing records: as long as tax and accounting laws require.

6. Your controls and rights

• Delete your account: in your account settings, choose "Cancel my account". This deletes your data as described above.
• Delete specific data: remove leads, campaigns, or LinkedIn posts in the app at any time.
• Disconnect LinkedIn: from the Connect account page.
• Disconnect an AI assistant: in that assistant's settings, or by emailing us.
• Access, correct, export, or delete your data: email tomer@linkdify.io. We respond within one month. Depending on where you live (for example, under the GDPR or CCPA), you may also have the right to object to or restrict processing, and to complain to your local data protection authority.
• Cookies: you can block or delete cookies in your browser. Blocking essential cookies will sign you out.

If you're a lead who received outreach through Linkdify and want your data removed, email us with your LinkedIn profile URL. We'll remove it from the Linkdify account that contacted you.

7. Security

Data is encrypted in transit (HTTPS). Passwords are hashed. Access tokens for AI assistants and the API are scoped to a single account and can be revoked. No system is perfectly secure, so please tell us right away if you suspect a problem.

8. International transfers

We and our service providers process data in the United States and other countries. Where required, we rely on safeguards such as standard contractual clauses.

9. Children

Linkdify is a business tool and isn't meant for anyone under 18. We don't knowingly collect data from children. If you think a child has given us data, email us and we'll delete it.

10. Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll also post a notice on linkdify.io.