In short: we keep your account data, your commercial settings, and the profiles and contacts you choose to capture or save in your CRM, so you can work with them and follow up. Texts are generated with OpenAI. We do not sell data or use it for advertising. Nothing is sent on LinkedIn in your name.
1. Controller
The controller is Miguel García Otón (InSalesAI), based in Alicante, Spain. Contact: miguel@insalesai.com.
2. What data we process and why
- Account data: email, password, name and plan. Used to identify you, give you access to the extension and send service emails (verification, password recovery and, if you agree, news).
- Your commercial settings: value proposition, ideal customer profile, tone, templates, phrases and words you do not use, and the text of your LinkedIn profile that you paste during sign-up to generate them. Used to score profiles and write messages tailored to you.
- Profiles you capture: when you open a LinkedIn profile and capture it, the extension reads the information visible in your session (name, headline, role, company, location, summary, experience, education, follower count and the contact details that person shows). It is stored in your profile database so you do not have to capture it again.
- CRM contacts: the profiles you save to the CRM, with their stages, notes, follow-ups and the activity you record (for example, the messages you generate or save for that contact).
- Conversations: when you capture a message thread, its text is used at that moment to generate the reply.
- Style learning: when you edit a generated message, we store the suggested text and your final version to detect your writing patterns and suggest style rules.
- Usage data: which features are used (which buttons, which signal, how many messages are generated), the AI model and the number of tokens consumed. It does not include the text of your messages. Used to improve the product and control costs.
- Demo requests: the email you leave on the website or in the extension, so we can contact you.
3. Legal basis
We process your data to provide the service you request (performance of a contract), for our legitimate interest in improving and keeping it secure, and with your consent for commercial communications, which you can withdraw at any time.
Regarding third-party data you capture on LinkedIn: you decide whom you capture and for what purpose. Use that data only to contact people in a professional and respectful way, in line with data protection regulations and LinkedIn's terms. InSalesAI stores and processes that data on your behalf to provide the service.
4. Who we share data with
- OpenAI, to generate messages and replies. It receives the necessary context (your settings, the profile data and, if there is one, the thread). According to its API terms, it does not use this data to train its models.
- Google (Google Apps Script and Google Sheets), where accounts, settings, the profile database, the CRM and usage data are hosted, and from which service emails are sent.
- Raiola Networks, hosting of the website insalesai.com, in Spain.
OpenAI and Google may process data outside the European Economic Area with the safeguards provided by the GDPR (standard contractual clauses or adequacy frameworks). We do not sell or transfer data to anyone else.
5. Extension permissions
- linkedin.com: read the profiles and conversations you open, within your session.
- api.openai.com: generate messages.
- script.google.com and script.googleusercontent.com: sign in, sync your settings and save profiles, contacts and usage data.
- insalesai.com: open the web view of the CRM and manage your account.
- storage: keep your session, settings and work in progress in your browser.
- sidePanel: show the extension in Chrome's side panel.
- activeTab and scripting: read the LinkedIn page you have open when you capture.
- alarms: retry in the background any saves that did not complete.
The extension never sends messages, invitations or posts on LinkedIn on its own: you review, copy and decide.
6. How long we keep data
While your account is active. If you ask to cancel, we delete your account, your settings, your profile database and your CRM within a maximum of 30 days, except what the law requires us to keep. Usage data is kept in aggregated form.
7. Your rights
You can request access, rectification, deletion, objection, restriction and portability of your data by writing to miguel@insalesai.com. We reply within a maximum of 30 days. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD, aepd.es).
If you are a person whose profile has been captured by an InSalesAI user and you want your data deleted, write to us and we will handle it.
8. Security and cookies
Communications are encrypted with HTTPS. The insalesai.com website does not use advertising cookies or tracking pixels.
9. Changes
If we make a significant change to this policy, we will notify you by email. The date of the last update appears at the top of this page.
Questions about your data?
Write to me and I will reply within 24 hours on working days.
miguel@insalesai.com