Privacy Policy

Last Updated: November 20, 2024

1. Introduction

Welcome to ConnectVelocity ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we handle your data. This Privacy Policy explains how our Chrome Extension collects, uses, stores, and protects your information.

By using ConnectVelocity, you agree to the terms outlined in this Privacy Policy.

2. Information We Collect

2.1 Information Stored on Our Servers

We collect and store minimal information on our backend servers:

  • Email Address: Used for account creation, authentication via one-time password (OTP), and communication about your subscription.
  • License Key: A unique identifier for your subscription plan.
  • Subscription Information: Your current plan (Trial, Starter, Pro, Elite), trial start/end dates, and subscription status.
  • Usage Metrics: Monthly counters for AI-generated messages and automated actions to enforce plan limits.

We do NOT store:

  • Your LinkedIn username or password
  • LinkedIn profile data you scrape or interact with
  • Campaign data, messages, or outreach history
  • Connection requests or LinkedIn activity logs

2.2 Information Stored Locally in Your Browser

The following data is stored locally in your browser using IndexedDB and never leaves your device:

  • LinkedIn Profile Data: Information you scrape from LinkedIn (names, headlines, companies, positions, profile URLs) for your campaigns.
  • Campaign Data: Your campaign names, descriptions, workflows, target audiences, and automation settings.
  • Queue Data: Pending connection requests, messages, and follow-up actions scheduled by your campaigns.
  • Activity Logs: History of actions performed by the extension (connections sent, messages sent, acceptances, etc.).
  • Session Data: Your login session (email and license key) for authentication.

Important: All LinkedIn data remains on your device. We never upload this data to our servers.

2.3 Information Sent to Third-Party Services

OpenAI API (for AI Message Generation):

  • When you use our AI message generation feature, we send LinkedIn profile information (name, headline, company, position) to OpenAI's GPT-4 API to generate personalized messages.
  • This data is used only to generate the message and is not permanently stored by us or OpenAI (per OpenAI's API data usage policy).

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Account Management: To create and manage your account, authenticate your login, and provide access to the extension.
  • Subscription Enforcement: To track usage (AI messages) and enforce plan limits.
  • AI Message Generation: To generate personalized LinkedIn messages using OpenAI's GPT-4 based on profile data you provide.
  • Service Improvements: To analyze usage patterns (anonymized) and improve our service.
  • Communication: To send important updates about your subscription, trial expiration, or service changes.

4. Data Storage and Security

4.1 Local Storage (Your Device)

  • All LinkedIn data (profiles, campaigns, messages) is stored locally in your browser using IndexedDB.
  • This data is encrypted and protected by your browser's security mechanisms.
  • You can delete this data at any time by uninstalling the extension or clearing browser data.

4.2 Server Storage (Our Backend)

  • Account data (email, license, plan, usage) is stored on secure servers.
  • We use industry-standard encryption (TLS/SSL) for data transmission.
  • We implement access controls and regular security audits to protect your data.
  • Our database is backed up regularly and stored securely.

4.3 Data Retention

  • Account data is retained for as long as you have an active subscription.
  • If you cancel your subscription, we retain your email and usage history for 30 days to facilitate reactivation.
  • After 30 days, your account data is permanently deleted from our servers.
  • Local data remains in your browser until you manually delete it or uninstall the extension.

5. Data Sharing and Disclosure

We do NOT sell, rent, or share your personal information with third parties for marketing purposes.

We may share your information only in the following circumstances:

  • Service Providers: We use third-party services (email delivery, payment processing, analytics) who may access your data to perform services on our behalf. These providers are bound by confidentiality agreements.
  • Legal Requirements: We may disclose your information if required by law, court order, or government request.
  • Business Transfers: If we are acquired or merge with another company, your information may be transferred to the new owner.

6. Your Rights and Choices

You have the following rights regarding your data:

  • Access: You can request a copy of the data we store about you.
  • Deletion: You can delete your account and data through the Settings page in the extension, or by contacting raviteja@connectvelocity.com.
  • Data Export: You can export your locally stored data (campaigns, profiles) using the extension's export feature.
  • Opt-Out: You can opt out of promotional emails by clicking "unsubscribe" in any email we send.

7. LinkedIn Data and Compliance

LinkedIn Terms of Service:

  • Our extension automates LinkedIn actions on your behalf using your LinkedIn session.
  • You are responsible for ensuring your use of ConnectVelocity complies with LinkedIn's Terms of Service and User Agreement.
  • We implement rate limiting and human-like behavior to minimize the risk of account restrictions, but we cannot guarantee LinkedIn will not take action against your account.

Data Scraping:

  • The extension scrapes publicly available LinkedIn profile data that you have access to through your LinkedIn account.
  • This data is stored locally on your device and is never uploaded to our servers or shared with third parties.
  • You are responsible for using scraped data in compliance with applicable laws (GDPR, CCPA, etc.).

8. Children's Privacy

ConnectVelocity is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

9. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using ConnectVelocity, you consent to the transfer of your data to countries outside your country of residence, which may have different data protection laws.

10. Third-Party Links

Our website and extension may contain links to third-party websites (e.g., LinkedIn, Discord). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending an email notification to your registered email address
  • Displaying a notification in the extension

Your continued use of ConnectVelocity after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

  • Email: raviteja@connectvelocity.com
  • Website: https://connectvelocity.com

13. Chrome Web Store Compliance

ConnectVelocity complies with Google Chrome Web Store Developer Program Policies:

  • We use minimal permissions required for functionality (activeTab, scripting, storage, alarms).
  • We only access LinkedIn.com domains as specified in our manifest.
  • We do not access, collect, or transmit sensitive user data beyond what is disclosed in this policy.
  • We do not use remote code execution or obfuscated code.
  • We provide clear disclosures about data collection and usage.

Thank you for trusting ConnectVelocity with your LinkedIn automation.

This Privacy Policy is effective as of November 20, 2024.