Privacy Policy

Introfinch drafts LinkedIn outreach messages that you review and send yourself. This page explains what we store, why, and who else handles it.

What we store

• Your account: your email address, your name, and your password. The password is stored only as a one-way hash, so nobody can read it.
• If you sign in with LinkedIn: your LinkedIn member ID, name, email address and profile photo link. We get nothing else: no messages, no connections, and no ability to post or send.
• Your work: the campaigns you create (your offer, goal and tone), the leads you add (name, job title, company, LinkedIn link and your notes), the drafts written for them, and when you marked a message as sent.
• Billing: your plan and a Stripe customer reference. Card details go straight to Stripe and never reach our servers.
• Sign-in attempts: a short-lived count of attempts per email address and network address, kept for up to an hour to block password guessing.

Cookies

Introfinch uses three cookies, all needed for the app to work. There are no advertising or analytics cookies.

• A session cookie that keeps you signed in for up to 30 days.
• A cookie that remembers your time zone offset, so follow-ups are due on your day.
• A cookie that lasts ten minutes while you sign in with LinkedIn, to protect that sign-in.

Who else handles your data

• Vercel hosts the app.
• Neon hosts the database, in the United States.
• Anthropic provides the AI model that writes drafts. To write a draft we send it your name, your campaign's offer, goal and tone, the lead's name, job title, company and your notes about them, and any earlier message being followed up.
• Stripe takes payments and manages subscriptions.
• LinkedIn confirms who you are, only if you choose to sign in with LinkedIn.

We do not sell your data or share it with anyone else.

The people on your lead lists

Your leads are real people. You decide whose details you add, and you are responsible for having a lawful reason to hold and use them under the rules that apply to you. We use those details only to write drafts for you and to show them back to you.

Deleting your data

You can delete any lead or campaign at any time. Deleting your account from Settings removes your account, campaigns, leads and messages from our database straight away and cancels any subscription. Our database provider keeps short-term recovery history, so deleted data can remain there briefly before it expires.

Contact

Contact details will be listed here before launch.

See also the Terms of Service.