Privacy Policy

1. Introduction

Lengrowth Outreach ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including our website and associated applications.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. By accessing and using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (hashed and encrypted)
• Full name
• Company name (optional)
• Phone number (optional)

2.2 LinkedIn Data

To provide the Service, we collect and store:

• LinkedIn Credentials: Email and password (encrypted at rest using AES-256)
• Session Cookies: Authentication tokens for secure API access (encrypted)
• Profile Data: Public profile information, connections, messages, and activity
• Account Settings: Visibility settings, notification preferences
• Search Activity: Saved searches and filters you create within the Service

2.3 Campaign Data

We collect:

• Campaign names, descriptions, and objectives
• Target audience profiles and search criteria
• Message templates and AI-generated messages
• Leads and contact information collected or added to campaigns
• Deal states and qualification status

2.4 Communication Data

We store:

• Messages sent and received through the Service
• Chat history and conversation transcripts
• Voice note recordings (if you use this feature)

2.5 Analytics and Usage Data

We automatically collect:

• IP address and browser type
• Pages visited and actions taken
• Time spent on features
• Feature usage (which campaigns are active, messages sent, etc.)
• Performance metrics and error logs

2.6 Payment Information

We collect payment details through our payment processor Stripe:

• Billing name and address
• Credit card or payment method (processed by Stripe, not stored by us)
• Transaction history and invoice information

We never store full credit card details. Stripe handles all payment processing securely.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

• To provide, maintain, and improve the Service
• To process your account registration and authentication
• To execute automation tasks on your LinkedIn accounts
• To store and retrieve your campaigns, leads, and messages
• To generate analytics reports and insights

Billing and Payments

• To process subscription payments and renewals
• To send invoices and billing notifications
• To track subscription status and plan limits

Communication

• To send account notifications (trial ending, payment failed, etc.)
• To respond to support requests
• To send product updates and feature announcements
• To send marketing emails (with unsubscribe option)

Product Improvement

• To analyze usage patterns and feature adoption
• To identify and fix bugs and performance issues
• To develop new features and improvements
• To train our AI models for better message generation

Security and Compliance

• To detect and prevent fraud, abuse, and security incidents
• To enforce our Terms of Service
• To comply with legal obligations and court orders

4. Data Storage and Security

Storage Location

Your data is stored in MongoDB Atlas, hosted on Amazon Web Services (AWS) in the United States. We use encrypted connections (TLS 1.3+) for all data in transit.

Encryption

• At Rest: LinkedIn credentials and sensitive data encrypted with AES-256
• In Transit: All communications protected with TLS 1.3 or higher
• Password: Your password is hashed using bcrypt with salt

Access Controls

• Only authorized employees can access user data (with audit logging)
• All admin access is multi-factor authenticated
• Data is isolated by user (multi-tenant architecture with strict isolation)

Security Measures

• Regular security audits and penetration testing
• Automated backups with encrypted backup storage
• Incident response plan and 24/7 monitoring
• Database authentication and network isolation

5. Third-Party Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data with the following:

Required Sharing

• LinkedIn: We send automation commands via LinkedIn's API (you control what data we access via OAuth scopes)
• Stripe: Payment information for billing (Stripe is PCI DSS compliant)
• LLM Providers: Message content sent to OpenAI, Anthropic, Google, or other AI providers for message generation (depends on your AI model choice)

Optional Sharing

• Email Enrichment: If enabled, we share prospect emails with BetterContact for enrichment (they do not retain data)
• Analytics: We may use aggregated, anonymized data with analytics services

Legal Compliance

We may disclose your information if required by law, court order, or government request. We will notify you of such requests unless legally prohibited.

6. Your Data Rights

Access

You can access your personal data at any time by logging into your account.

Correction

You can update or correct your account information through your account settings.

Deletion

You can request deletion of your account and all associated data at any time. Upon request, we will:

• Cancel your subscription immediately
• Delete all personal data within 30 days
• Remove all LinkedIn credentials and campaign data
• Release any LinkedIn accounts from our system

Note: Aggregated and anonymized data may be retained for analytics and product improvement.

Data Export

You can request a copy of all your data in machine-readable format (JSON). Contact support@lengrowth.com to request an export.

Opt-Out

You can opt out of marketing emails by clicking "Unsubscribe" in any email we send. This does not apply to transactional or account-related emails (billing notifications, support responses, etc.).

GDPR and CCPA Compliance

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). If you are located in California, you have additional rights under the California Consumer Privacy Act (CCPA). Contact us to exercise these rights: support@lengrowth.com

7. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences
• Track usage analytics
• Prevent fraud and abuse

Session Cookies: These are necessary for the Service to function and are automatically cleared when you close your browser.

Persistent Cookies: We use persistent cookies to remember your preferences (e.g., dashboard layout). You can disable these in your browser settings, but some features may not work properly.

Third-Party Cookies: Our analytics provider may use cookies to track usage. You can opt out of this tracking in your account settings.

8. Data Retention

We retain your data for as long as your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes.

Active Accounts

Data is retained for the duration of your account subscription plus 30 days.

Deleted Accounts

Upon account deletion request:

• Personal data (email, name, etc.) deleted within 30 days
• LinkedIn credentials and campaign data deleted immediately
• Chat history and messages deleted within 7 days
• Backups containing your data retained for 90 days (for disaster recovery)

Legal Hold

If we receive a legal request or are involved in litigation, we may retain data longer than specified above.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information and terminate the child's account.

10. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on the Service and updating the "Last Updated" date. Your continued use of the Service after such modifications constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy, your data, or our privacy practices, please contact us at:

support@lengrowth.com

We will respond to privacy inquiries within 30 days. For data subject requests (GDPR/CCPA), we will respond within 45 days.