Lead Privacy Notice

This notice is for people whose information is processed by the NudgeLink platform because one of our customers has identified them as a potential professional contact (“leads”). You are probably reading it because you received a LinkedIn message or an email from a NudgeLink customer, or because a link to this notice was included in one.

Who is responsible for your data

NudgeLink is run by Safiya Yablonskaya, a sole proprietor registered in Poland (CEIDG), NIP 5253077780, REGON 543905315, Warsaw, Poland. It provides software that helps businesses run professional outreach. The customer who added you to a campaign decides why and how your data is used (the “controller”); NudgeLink processes it on their behalf (the “processor”). You can exercise your rights with either of us. If you contact us, we will act on the request and tell the customer.

What data we process and where it comes from

Information from your public LinkedIn profile, accessed through the customer's own LinkedIn account: name, headline, current role and company, location, your public posts and activity, and, if your public profile lists one, a contact email address. We do not access private messages or any non-public information.

Why, and on what legal basis

The data is used to assess whether you are a relevant professional contact for the customer (scoring) and to draft a personalised message to you, sent on LinkedIn or, where your profile lists a public email address, by email. The legal basis is the customer's legitimate interest in B2B business development (GDPR Art. 6(1)(f)): reaching out to people whose public professional profile suggests the contact is relevant to their work.

AI assistance and automation

Draft messages are written with the help of AI language models, and scoring only helps to prioritise. By default, a human reviews and approves every message before it is sent. Customers may switch on automatic sending. In every case, no decision with legal or similarly significant effects about you is made by automated means. The only outcome is whether you receive an outreach message.

How long we keep it

Lead data is automatically and permanently deleted 90 days after it was added to the platform. If you object earlier, we delete it immediately.

Who receives it

The sub-processors that run the platform, under data processing agreements: Anthropic (AI drafting, United States), Unipile (LinkedIn and mailbox connectivity, France), Twilio SendGrid (email delivery, United States) and hosting and monitoring providers (Railway, Vercel, AWS, Sentry, United States). Transfers outside the EEA and the UK rely on the European Commission's Standard Contractual Clauses (2021/914) and the UK IDTA addendum. We do not sell your data and do not use it to train AI models.

Your rights

Under the GDPR you may ask for access, correction, deletion and restriction. You may also object at any time to processing for direct marketing (Art. 21(2)). That objection is absolute: we stop and delete your data. Every outreach email carries a one-click unsubscribe link that stops further emails immediately.

For any request, email privacy@nudgelink.co with the LinkedIn profile URL the request concerns. We answer within one month. You can also complain to your local supervisory authority.