Privacy policy

LinkFetch is operated by the LinkFetch team. Contact: info@linkfetch.io. The same inbox handles general privacy questions and reaches whoever is acting as our Data Protection Officer.

Account data: email, name, company, billing details (processed by Dodo Payments).

Usage data: API calls, endpoints hit, credit consumption, request IDs.

Ingested data: public LinkedIn records fetched through the user’s own session, via our Chrome extension by default or via Cloud mode if the user opts in. We act as processor for this data; the user is the principal.

LinkedIn session cookie (Cloud mode only): only for users who enable Cloud mode, their LinkedIn session cookie, stored encrypted (AES-256-GCM) and never returned by any endpoint. Users of the Chrome extension alone keep their session in the browser; we never receive it.

Analytics: aggregated and anonymised traffic via PostHog (EU).

To provide the service: fulfil your API requests and meter credits.

To communicate with you: product updates, transactional emails, security notices.

To improve the product: aggregated analytics, anonymised request sampling.

Cloud mode session cookies are used only to perform the LinkedIn actions the user or their AI assistant requests, from a dedicated residential IP in the user's country and within our published safety limits. Never for anything else.

To pick that country when you connect an account, we look up your IP address in a local copy of a country database; the address isn't sent anywhere. IP geolocation by DB-IP.

We do not sell personal data. We do not rent email lists. We do not profile users for advertising.

Primary data store: a dedicated server operated by Hetzner in Helsinki, Finland (EU), on mirrored disks.

Backups: a full copy of the database every night, kept for 1 day on the server and 7 days in a Google Drive account we control.

Cloud mode traffic to LinkedIn egresses through residential IPs provided by our sub-processors Webshare (webshare.io) and IPRoyal (iproyal.com).

See the sub-processor list on our compliance page for the full chain.

Access, rectification, erasure, portability and objection, with response times, are detailed on our compliance page.

For EU and EEA residents: you have the right to lodge a complaint with your local supervisory authority.

For California residents: CCPA and CPRA rights apply in full; the compliance page covers how we handle them.

Account data: for the life of your account plus 2 years for tax and audit.

Ingested data: 30 days by default; customers can shorten or extend this by agreement.

Request logs: 90 days, then aggregated and anonymised.

Cloud mode session cookie: deleted when you disconnect LinkedIn, or automatically after 30 days unused.

Erasure requests are honoured within 30 days under GDPR Article 17.

We use a single essential cookie for session auth. No third-party tracking cookies on the marketing site.

Affiliate links (linkfetch.io/r/…) set one first-party cookie, lf_ref, for 30 days. It holds only the id of that click, so that if you sign up we can credit the affiliate who sent you. We store the click with a hashed IP address (never the IP itself), the browser's user agent, the referring site and the country.

The dashboard uses localStorage for UI preferences only.

We announce material changes 30 days in advance by email and in-app notice.

This policy was last updated on October 18, 2026. For a prior version, email info@linkfetch.io and we’ll send it.