Privacy Policy

This Privacy Policy describes how Safiya Yablonskaya, a sole proprietor registered in Poland (CEIDG), trading as NudgeLink, NIP 5253077780, REGON 543905315, Warsaw, Poland (“NudgeLink”, “we”, “us”) collects, uses, and shares personal information when you use our Services. By using NudgeLink, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

We collect several types of information from and about users of our Services:

• Account data — name, email address, company name, billing address, and authentication credentials.
• Client Map requests — if you ask for a free Client Map on nudgelink.co/map, your name, work email, company website, who you sell to and where, and the page you came from. We use them only to build the map, send it to you and follow up on it.
• LinkedIn profile data — when you connect a LinkedIn account, we access public profile information strictly for the purpose of operating the outreach workflow you configured. The connection runs through our LinkedIn integration provider, Unipile (France), which acts as our processor: you sign in on a secure page Unipile runs, Unipile keeps the session, and NudgeLink never sees or stores your LinkedIn password — we receive only Unipile's account ID for the connection, which cannot be used without our Unipile API key. Profile views, connection requests, messages and replies pass through Unipile.
• Mailbox data — on the Growth and Scale plans you can connect a mailbox (Gmail, Outlook or IMAP), also through Unipile: you sign in on Unipile's page or with Google or Microsoft, and we store Unipile's account ID for the mailbox and the mailbox address. We send the campaign emails you set up and store them; Unipile tells us about new mail in that mailbox, and we keep replies to our emails, other mail from people this mailbox emailed in the last 60 days, and bounce notices. Other mail is not stored.
• HubSpot data — if you connect HubSpot, we store its access tokens (encrypted), your portal ID, which leads correspond to which HubSpot records, and a log of sync events. For contacts we created or matched, we read the email subscription status, so that an address that opted out there is not emailed, and when a lead has no email address we copy the matched contact's address.
• Lead data — profile information of leads you target, including public posts and activity, used for scoring and message generation, and their email address where available, with their email opt-out and bounce status. When you run Scout (web discovery), this includes facts from publicly available web pages — company sites, team pages, news and public profile search results — each stored with the source URL it came from.
• Usage data — how you use the Services, such as which features you use and on which page, and, when you sign up, the page and referring site you first came from and any campaign tags in that link.
• Payment data — processed by our payment provider (Stripe). We do not store full card numbers on our systems.

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Services;
• Process payments and manage your subscription;
• Generate AI-powered scoring and outreach messages on your behalf, using the models of our AI providers;
• Send you administrative messages about your account and the Services;
• Detect and prevent fraud, spam, and abuse.

3. How we share your information

We share information with service providers who perform services on our behalf (hosting and infrastructure, encrypted backup storage, email delivery, error monitoring, payments, AI model providers, and Unipile for the LinkedIn and mailbox connections). Our DPA lists our sub-processors. We do not sell your personal data.

If you connect your own HubSpot portal, we send it your leads, the messages and replies exchanged with them, deals for positive replies and email opt-outs, as described in our HubSpot guide. HubSpot then handles that data under your agreement with HubSpot. AI assistants you connect are covered in section 4.

We may disclose information if required by law, or in response to valid legal processes such as subpoenas, court orders, or government requests.

4. AI assistant connectors (Claude, ChatGPT)

If you connect NudgeLink to an AI assistant such as Claude or ChatGPT, nothing is shared until you sign in to NudgeLink and approve the connection on our consent screen, which lists every permission the assistant is asking for.

• What the assistant can access — your company name and sign-in email, and otherwise only what the permissions you approved allow: your leads (name, title, company, location, score and LinkedIn URL), campaign names, targeting and performance figures, replies you have received, and the results of searches it starts. It can start lead searches (these spend your credits), add people it found to your leads, and write draft messages.
• What it cannot do — it cannot send messages, connection requests or replies, delete anything, or see another customer's data. Drafts are returned to the assistant as text and are not saved or sent. Searches that use your connected LinkedIn account stay off unless you switch them on for that assistant.
• Who processes the data — information a tool returns is passed to the assistant's provider (for example Anthropic or OpenAI) and handled under that provider's own terms and privacy policy. We store the connection (which assistant, which permissions, when it was last used) and its access credentials in hashed or encrypted form; we do not store your conversations with the assistant.
• Disconnecting — Settings → Integrations → Connected AI assistants. Disconnecting revokes the assistant's access immediately for renewals; an already-issued access token expires within 15 minutes.

5. Data retention

We retain account data for as long as your account is active. If you ask us to delete your account, it is erased after a 14-day grace period, except billing records, which are kept with free text removed. Lead records (profile data and the messages, emails and replies exchanged with the lead) are deleted automatically 90 days after their last use: the last message sent to the lead or reply received from them, or, for a lead never contacted, the day it was added. You can delete them earlier. Client Map requests are deleted 90 days after the map is sent to you (or after the request, if no map was sent), unless you become a customer. The security audit log of account actions is deleted after 24 months. Encrypted database backups are kept for 30 days and deleted within 31.

Search suggestions you did not act on are deleted 90 days after they were made; for those you accepted or declined, we then keep only the LinkedIn profile link, your decision and the match scores, so the same person is not suggested to you again. People and companies found by Scout, with the facts and source URLs behind them, are kept while your account exists, so later searches recognise who Scout has already found.

When a person unsubscribes or opts out, an email to them bounces, or they say no, we keep a SHA-256 hash of their email address or LinkedIn identifier (never the address or profile itself), so that their objection is still honoured after their lead record is deleted. These hashes are kept for as long as your account exists and are deleted with it.

6. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you;
• Rectification — correct inaccurate data;
• Erasure — request deletion of your data (subject to legal obligations);
• Portability — receive your data in a structured, machine-readable format;
• Objection — object to certain processing activities.

To exercise any of these rights, email us at hello@nudgelink.co.

7. International transfers

NudgeLink operates globally. Depending on where you are located, your information may be transferred to and processed in countries other than your country of residence, which may have different data protection laws. We use Standard Contractual Clauses where applicable.

8. Security

We apply security measures including AES-256-GCM encryption of stored access tokens and secrets, hashed passwords, encrypted backups, TLS in transit, and access controls. However, no method of electronic transmission or storage is 100% secure.

9. Children

NudgeLink is a B2B service and is not directed to children under 16. We do not knowingly collect personal information from children under 16.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Services.

11. Contact

Questions about this policy? Email hello@nudgelink.co.