Privacy Policy

1. Who we are

This Privacy Policy explains how Easynote AB ("Weezly", "we", "us") collects, uses, and protects your personal data when you use Weezly Outreach, our LinkedIn outreach platform, through the web application at outreach.weezly.com and the Weezly mobile app for iOS and Android (together, the "Service").

For the purposes of the EU/UK General Data Protection Regulation (GDPR), Weezly is the data controller of the personal data described in this policy.

• Company: Easynote AB
• Registered address: Anckargripsgatan 3, 211 19 Malmö, Sweden
• Privacy contact: privacy@weezly.com

2. Scope

This policy covers the Weezly Outreach product specifically. Other Weezly products and websites are covered by their own policies. Where this policy and a general Weezly privacy policy differ, this policy governs your use of Weezly Outreach.

3. Information we collect

We collect the following categories of personal data:

Account and authentication data. Your name and email address, and either the password you set or the basic profile information returned by a social sign-in provider (see Section 6). We do not store social-provider passwords.

LinkedIn conversation data. When you connect a LinkedIn account to Weezly, we access and store the messages, contact names, profile photos, and professional headlines of the conversations in that account, so you can read, send, and organize messages within the Service. This may include the content of messages you and your contacts exchange.

Contact and lead information. Professional details about the people you correspond with or research, such as name, job title, company, work history, education, skills, and (where available) public contact details, used to give you context on your conversations and pipeline.

Pipeline and notes data. The pipeline stages, labels, and notes you create and assign to contacts.

Device and push notification data. If you enable notifications in the mobile app, we store a device push token issued by Apple Push Notification service (APNs) or Google Firebase Cloud Messaging, used solely to deliver notifications about new messages and interested leads. We also process basic device and log information (device type, app version, IP address, and error logs) to operate and secure the Service.

Workspace data. If you belong to a shared workspace, your membership, role, and display details so workspace owners can collaborate.

We do not sell your personal data, and we do not use it for advertising or cross-app/cross-site tracking.

4. How we use your information

We use personal data to:

• authenticate you and provide access to the Service;
• retrieve, display, send, and organize your LinkedIn conversations and pipeline;
• enrich contact and lead records so you have context on your conversations;
• deliver push and email notifications you have enabled;
• operate, secure, troubleshoot, and improve the Service;
• comply with our legal obligations.

5. Legal bases for processing (GDPR)

Where GDPR applies, we rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure, maintain, and improve the Service, provided these interests are not overridden by your rights); consent (for example, push notifications, which you can withdraw at any time); and legal obligation where required by law.

6. Social sign-in (Google and Microsoft/Outlook)

You may choose to sign in using Google or Microsoft/Outlook. When you do, we receive basic profile information, your name and email address, from that provider for the sole purpose of authenticating you and matching or creating your Weezly account. We request only the minimum scope needed to sign you in, we do not receive your provider password, and we do not access your email, calendar, contacts, or other provider data through this sign-in.

Weezly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Sign-in data is used only to provide and maintain user-facing features of the Service and is never sold or used for advertising.

7. Service providers

We share personal data with third-party service providers only as needed to operate the Service, and we require each of them to protect your data to a standard at least equal to that described in this policy. These providers include:

• our LinkedIn integration provider, used to access and send messages on the LinkedIn account(s) you connect;
• our data-enrichment provider, used to retrieve professional information about your contacts;
• Apple and Google, used to deliver push notifications;
• our cloud hosting, storage, and infrastructure providers.

We do not permit these providers to use your data for their own purposes.

8. Data sharing and "do not sell" (CCPA/CPRA)

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act. We disclose personal data only to the service providers described above, to comply with the law, or to protect our rights, and (with your direction) to members of your own workspace.

9. International data transfers

Your data is stored within the European Union, in data centers located in Ireland and Frankfurt, Germany. If we ever transfer personal data outside the EU/EEA, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Data retention

We retain your personal data for as long as your account is active and as needed to provide the Service. When you disconnect a LinkedIn account, we remove the conversation and contact data tied to that connection. When you delete your account (Section 12), we permanently delete your personal data within 30 days, except where retention is required by law.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. California residents have the rights to know, delete, correct, and to non-discrimination for exercising those rights. To exercise any right, contact privacy@weezly.com. You also have the right to lodge a complaint with your local data protection authority.

12. Deleting your account and data

You can delete your Weezly account and all associated personal data at any time:

• In the app: Settings → Delete account; or
• By contacting us at privacy@weezly.com.

You may also disconnect any connected LinkedIn account, which removes that connection's conversation and contact data. We permanently delete your data within 30 days of a verified request, except where the law requires us to retain it.

13. Push notifications

If you enable notifications, we send push messages about new messages and interested leads. You can turn these off at any time in your device settings or in the app's notification settings; doing so does not affect your ability to use the rest of the Service.

14. Data security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and secure credential storage (your authentication token is stored in the device's Keychain/Keystore). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Children

The Service is not directed to, and we do not knowingly collect personal data from, children under 16. If you believe a child has provided us personal data, contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. We will post the updated version at this URL and revise the "Last updated" date above. Material changes will be communicated through the Service where appropriate.

17. Contact

Questions or requests about this policy or your data:

Easynote AB
Anckargripsgatan 3, 211 19 Malmö, Sweden
Email: privacy@weezly.com