Privacy Policy
This policy explains what LinqDesk collects, how it is used, and how it is protected. LinqDesk is operated by the LinqDesk team ("we", "us"). If you have questions, contact us at the address at the end of this page.
What we collect
- Account data. Your name, email address and a hashed password. Passwords are hashed with bcrypt and are never stored or readable in plain text.
- Workspace data you enter. Client names, business details, prospect websites, contact names and email addresses, campaign notes, budgets, costs and link URLs.
- Mailbox credentials. For Gmail, an OAuth refresh token issued by Google. For other providers, the SMTP and IMAP host, port, username and password you supply. Both are encrypted at rest with AES-256-GCM.
- Email conversations with your prospects. For every prospect in your pipeline: message and thread identifiers, sender and recipient addresses, subjects, timestamps and the message text (up to 20,000 characters) of mail sent to them and received from them, in both directions, so the conversation is readable inside the app. Mail that does not involve a prospect is not stored.
- Activity log. Status changes, sends, replies, triage results and link checks per prospect, with who made each change.
How Google user data is used
When you connect a Gmail or Google Workspace mailbox, LinqDesk requests two scopes:
- gmail.send to send the outreach emails and replies you write or approve, from your own mailbox, and to email you alerts about replies and lost links.
- gmail.modify to read mail so the app can show each prospect's conversation, detect replies and bounces, and import outreach you sent directly from Gmail.
What LinqDesk reads. Replies in threads it started; recent inbox mail from the addresses of prospects in your pipeline; and, when a mailbox check runs, the correspondence with each prospect's address or website domain from the last 12 months, plus the recipient addresses of your sent mail from the last 6 months so outreach that matches no prospect can be assigned to a client. Only messages that match a prospect are stored. Sent-folder recipients that match no prospect are shown to you once and are not stored unless you add them as prospects; addresses you dismiss are kept only so they are not suggested again.
What LinqDesk does not do. It does not read, index or store mail that is unrelated to your prospects, does not modify or delete anything in your mailbox, and never shows one workspace's mail to another. Stored messages are deleted when you delete the prospect, erase the workspace or delete your account.
LinqDesk's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, never used to train machine learning models, and never transferred to third parties except as required to provide the service or to comply with law.
Third parties we use
- Anthropic to generate outreach email drafts, reply drafts and article drafts. What is sent: the client profile and prospect details you entered, and, for a reply draft, the text of that one reply. Content sent for generation is not used to train models.
- DataForSEO to look up public SEO metrics for prospect domains.
- Hunter to look up publicly listed contact email addresses for prospect domains, when you use the email finder.
- Dodo Payments to process subscriptions. We never see or store card numbers.
Your mailbox as a whole is never sent to any of these providers.
How long we keep data
Workspace data is kept while your account is active. Stored prospect conversations are removed with the prospect they belong to. Disconnecting a mailbox deletes its stored credentials immediately and revokes the token where the provider supports it. If you delete your account, all workspace data is removed within 30 days.
Your rights
You can export or delete your data at any time from inside the application, or by contacting us. You can revoke LinqDesk's access to your Google account at any time at myaccount.google.com/permissions.
Security
Credentials are encrypted at rest. All traffic runs over HTTPS. Sessions use signed, HTTP-only cookies. Access to production data is limited to the operators of the service.
Children
LinqDesk is a business tool and is not directed at anyone under 16.
Changes
If this policy changes materially, we will notify account holders by email before the change takes effect.
Contact
Questions about this policy or your data: privacy@linqdesk.com