Security & Data Handling
What we collect, how we process it, who touches it, and how to delete it. This page is specific to the LinkedIn Profile Optimizer — separate from the Growleads site-wide privacy policy.
Summary in one paragraph: We read only public data from the LinkedIn profile URL you paste. We never ask for your LinkedIn password or account access. Your data is used to generate your audit and is not used for model training, sold, or shared beyond the subprocessors listed below. You can request deletion at any time by emailing support@growleads.io.
What we collect
When you submit a LinkedIn URL and complete the questionnaire, we collect:
- Public LinkedIn profile data — scraped from the URL you paste (basic info, headline, About, experience, education, certifications, skills, featured, recommendations, honors). This is data already visible to any public visitor to your profile.
- Your questionnaire answers — role, industry, audience, goals, tone preferences, biggest impact, and anything you'd like to avoid on your profile.
- The audit output — generated by OpenAI based on the two inputs above.
- Your email address — only if you explicitly enter one when requesting the PDF report by email, or if you create an account to save audits.
- Payment metadata — only if you unlock the full report: Razorpay payment ID, timestamp, and amount. We never store card numbers or bank details ourselves.
What we do NOT collect
- Your LinkedIn password — we never request it, and there is no field to enter it anywhere on the tool.
- Your LinkedIn session cookies, OAuth tokens, or app access — we do not use LinkedIn's official API and do not read authenticated data.
- Any data behind a LinkedIn login wall — no private DMs, no hidden connections, no non-public fields.
Subprocessors
Every third-party service that touches your data is listed here.
| Service | Purpose | Data shared |
|---|---|---|
| Apify | Public-LinkedIn profile scraping from the URL you paste | LinkedIn profile URL only |
| OpenAI | AI inference to produce the audit | Scraped public profile + questionnaire answers |
| MongoDB Atlas | Storage for scraped profile, questionnaire, and audit | All of the above |
| Razorpay | Payment processing for the $1 full-unlock | Email, name (optional), payment metadata |
| Zoho Books | Invoice generation for paid unlocks | Email, name, country, payment ID |
| Gmail SMTP (Google) | Delivering PDF reports and invoices by email | Email address + PDF attachment |
| Firebase Auth | Optional account creation (Google sign-in / email) | Email, display name, UID |
Retention & deletion
- Scraped profile data, questionnaire answers, and audit output are stored so you can revisit your report.
- You can request permanent deletion at any time by emailing support@growleads.io from the email associated with the profile or account. We delete within seven business days.
- Payment records are retained for tax and accounting purposes per Indian GST requirements (typically 7 years) — this is invoice metadata only, not your profile content.
Data in transit and at rest
- In transit: All requests use HTTPS (TLS 1.2+). Both the optimizer and the API endpoints redirect HTTP to HTTPS via Nginx.
- At rest: MongoDB Atlas encrypts data at rest with AES-256. Passwords (for optional manual accounts) are hashed with bcrypt.
AI training
Your profile data and audit output are not used to train or fine-tune AI models. OpenAI's API terms (which we rely on) state that API inputs and outputs are not used to train their public models by default, and we do not opt in to any training programs.
LinkedIn Terms of Service
Our approach is ToS-safe: we read only publicly visible profile data via a public-data scraping service (Apify). We do not scrape behind a login, automate activity on your behalf, use LinkedIn sessions we don't own, or violate LinkedIn's User Agreement.
Contact
For questions about data handling, retention, deletion, or a specific security review: email support@growleads.io. For an in-depth security or DPA discussion for team or enterprise use, mention "Security review" in the subject line.
Last updated: 2026-04-22. For the site-wide Growleads privacy policy (covering the agency and marketing site), see growleads.io/privacy.