Your CRM data should remain yours.

1. Scope and responsibility

This policy applies to the LinkAvro website, authenticated CRM platform, account and billing pages, and optional browser helper. LinkAvro provides a hosted workspace for organizing professional contacts, relationship notes, relationship history, and private CRM insights. LinkAvro determines why and how account data is processed to provide that service. Customers remain responsible for having an appropriate lawful basis to upload and use contact information in their CRM workspace.

LinkedIn is an optional CRM integration. LinkAvro is independent and is not affiliated with or endorsed by LinkedIn Corporation. LinkAvro does not ask you to type or upload your LinkedIn password or session cookies. If you deliberately enable the optional read-only LinkedIn integration, LinkAvro receives only the public connection information needed to display and search your relationship directory. LinkAvro does not access private inbox content and does not send messages, invitations, or connection requests.

2. Information LinkAvro collects

• Account information: name, email address, authentication provider, verification state, and account ID.
• CRM records and workspace content: profile URLs, names, professional details, email addresses you supply, notes, tags, imported contact lists, relationship status, history, and other CRM fields you choose to save.
• Service and security data: feature usage, quota counters, errors, provider event identifiers, delivery status, suppression records, and technical logs needed to protect and operate the service.
• Website analytics: Google Analytics receives aggregate page views, referrers, device information, and interaction events when you visit the public website. LinkAvro does not send CRM records, LinkedIn cookies, workspace content, or authentication values to Analytics.
• Billing information: subscription status, billing interval, customer and transaction identifiers, and billing contact details. Paddle handles payment-card data and merchant-of-record payment support.
• Optional LinkedIn integration data: the public URL and display name of the profile you deliberately connect, plus the public names, headlines, profile URLs, and connection dates shown in the read-only directory available to your account. LinkAvro does not collect private inbox content and does not use the integration to send messages, invitations, connection requests, or other social activity. The optional connector does not ask you to provide a password or private message content.
• Provider authorization information: when the LinkedIn-approved OAuth connection is enabled, LinkAvro stores the provider member identifier, granted permission scopes, token expiration times, and encrypted access or refresh tokens. Tokens remain in a server-only collection and are deleted when you revoke the connection.

Do not upload passwords, authentication codes, government IDs, financial account details, health information, or other sensitive personal data. LinkAvro is not designed for those categories.

3. How information is used

LinkAvro uses information to:

• create and secure your account and private CRM workspace;
• store, search, normalize, and organize contact records and relationship context;
• save and display notes, tags, relationship history, insights, and workspace exports;
• provide the optional read-only relationship directory;
• process subscriptions and provide billing support through Paddle;
• diagnose errors, prevent abuse, and improve reliability; and
• meet legal obligations and enforce responsible-use terms.

Depending on applicable law and context, processing may rely on performing the service you request, legitimate operational and security interests, consent, or compliance with legal obligations.

4. Browser integrations and limited use

LinkAvro's use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Browser-helper data is used only to provide and secure the optional read-only relationship directory and the CRM features described above. LinkAvro does not sell this data, use it for personalized advertising, or use it to send social activity.

5. Service providers and sharing

LinkAvro does not sell personal information or CRM records. Information is shared only as needed to provide the service, follow your instructions, protect users, complete a business transaction with appropriate safeguards, or comply with a valid legal requirement.

Providers may process information in countries other than yours. Their contractual and legal transfer safeguards apply to their processing. LinkAvro does not authorize providers to use CRM records or workspace content for their own advertising. LinkedIn credentials and cookies are excluded from analytics and other third-party marketing uses.

6. Retention and security

Account data and CRM records are retained while your account is active and as reasonably needed to provide the service. You can request export or deletion using the choices below. Some billing, security, suppression, and legal records may be retained longer where necessary to prevent abuse, resolve disputes, or meet legal obligations. Provider backups and logs may take additional time to expire under provider retention schedules.

LinkAvro uses verified authentication, user-scoped database rules, server-controlled entitlements, restricted provider fields, and encrypted network connections. LinkedIn browser-session values are encrypted with application-layer AES-GCM and Cloud KMS before they are stored in a server-only collection; the active version is the only one used for processing. Raw values are excluded from browser storage, logs, and analytics. No internet service can guarantee absolute security. Report suspected unauthorized access promptly.

7. Your choices and privacy rights

You can correct core profile information in your account and export saved people and CRM records from the workspace where that feature is available. Depending on where you live, you may also request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where processing relies on consent. LinkAvro may verify your identity before completing a request and may retain information where legally permitted or required.

Account deletion is not yet an instant self-service action. Use the secure form below while signed in to submit a verified request. You may also complain to the privacy or data-protection authority where you live.

8. Children

LinkAvro is a business CRM service and is not directed to children under 18. It does not knowingly collect information from children.

9. Changes to this policy

Material changes will be posted on this page with a revised date. Where appropriate, LinkAvro will also provide an in-product notice before a change takes effect.