DRAFT: not legally approved. This document is a placeholder and must be reviewed by counsel before launch.
Privacy notice
Last updated: draft
Who we are
ProfileSignal processes personal data provided by you in order to prepare LinkedIn profile content and generate professional headshots. This notice remains subject to external legal approval before commercial launch.
What we collect
Account information (name, email), the LinkedIn PDF and profile text you upload, reference photographs you upload, generated outputs, billing records and, only if you opt in, limited first-party product event outcomes.
LinkedIn integration
If you choose to sign in with LinkedIn, ProfileSignal receives your name, email address, LinkedIn member identifier and profile photo only, not your full career history. Standard LinkedIn sign-in does not import positions, education, skills, or any other profile section.
Separately, if LinkedIn approves ProfileSignal for its Member Data Portability API and you opt in, you may choose to import your full profile directly from LinkedIn. That optional connection uses LinkedIn's official OAuth flow with the r_dma_portability_3rd_party scope. Access and refresh tokens are encrypted at rest server-side and never sent to your browser. You can revoke that connection and permanently delete the imported LinkedIn data at any time from the LinkedIn Profile Optimiser screen. Deleting your ProfileSignal account also deletes your LinkedIn tokens and imported records.
We do not scrape LinkedIn pages, use browser automation against LinkedIn, collect LinkedIn passwords, or use unofficial LinkedIn data providers. Data imported via LinkedIn's API is labelled with its source and is not represented as independently verified by LinkedIn.
How we use it
To deliver the service you requested, to bill correctly, to prevent abuse, and to improve reliability. AI processing runs through named providers on a strict-need basis and is not used to train third-party models.
Optional product analytics
If you opt in, first-party analytics records a fixed feature name, route, source and whether the action started, succeeded or failed. Google Analytics 4 records allowlisted acquisition, funnel and ecommerce events. Neither stream receives profile text, evidence, prompts, filenames, photos, generated content or payment details. First-party product events are deleted after 12 months, and you can withdraw consent at any time.
Service security, safety and cost records
Minimal operational and security records are used independently of optional marketing analytics to run the service, diagnose failures, calculate provider costs and prevent abuse. Image safety records contain policy decisions, category scores, face and person counts and account actions, not the image itself. Evidence is private by default; administrator access requires a reason and is audited. Operational records are retained for up to 12 months and safety assessments for 30 days unless an unresolved review requires them for longer.
Storage and retention
Source files and outputs are stored privately in your account. Defaults: LinkedIn source files are retained for 30 days; generated headshots for 90 days. You can delete anything sooner and request full account deletion at any time.
Your rights
You can access, export, correct, or delete your data. Contact us to exercise these rights.
Transfers
Some processing takes place outside the EEA on the providers listed above. Appropriate safeguards apply.
Contact
Privacy questions can be sent to privacy at profilesignal.