Privacy Policy

Last updated: April 2026

LinkMagnet ("LinkMagnet", "we", "our", "us") is committed to protecting user privacy and handling personal data in a transparent, secure, and responsible manner.

LinkMagnet is a product operated by Incomparable OÜ, an Estonian private limited company, designed to automate the distribution of lead magnets via LinkedIn direct messages.

1. Who We Are

Product: LinkMagnet
Operating entity: Incomparable OÜ, represented by Yannis Haismann
Registered address: Tartu mnt 67/1-13b, 10115 Tallinn, Estonia
Registration number: 17397208
Contact email: yannishaismannpro@gmail.com

LinkMagnet is a standalone product, independent from other products operated by Incomparable OÜ. User data is never shared across products unless the user explicitly uses both services.

A record of processing activities is maintained in accordance with Article 30 of the GDPR and is available upon request.

2. Data We Collect

We follow a strict data minimization approach.

2.1 Data You Provide

Name and email address (during registration)
LinkedIn account connection (via Unipile)
Campaign configuration (keywords, message templates, resource links)
Payment information (managed via Stripe)

Legal basis: Performance of the contract (Art. 6.1.b GDPR).

2.2 LinkedIn Data Accessed via Unipile

When you connect your LinkedIn account, LinkMagnet accesses, strictly via Unipile and only for your own campaigns, the following data:

Comments on the LinkedIn posts you have chosen to monitor
Public profile information of the people who commented on those posts (name, headline, profile URL)
Delivery status of the direct messages sent by the Service on your behalf

This data is used solely to match keywords and deliver lead magnets as configured by you.

Scope limitations. LinkMagnet does not:

Build cross-account databases, aggregated profiles, lead rankings, or any global "social graph" derived from LinkedIn data
Share or correlate one user's LinkedIn data with another user's account
Read, access, or process any private conversations in your LinkedIn inbox other than the direct messages that the Service itself sends on your behalf
Scrape, index, or collect LinkedIn data outside of your own monitored posts and their commenters

Each account's data is scoped to that account's own campaigns.

Legal basis: Performance of the contract (Art. 6.1.b GDPR).

2.3 Automatically Collected Data

IP address
Device and browser information
Usage analytics (via PostHog)

Legal basis: Legitimate interest (Art. 6.1.f GDPR).

3. How We Use Your Data

We use the collected data to:

Provide and operate the Service (campaign execution, keyword matching, DM delivery)
Track campaign performance and contact activity
Process payments and manage subscriptions
Improve and optimize the Service
Communicate important updates
Ensure security and prevent abuse

We do not sell personal data. Data may be shared with the following sub-processors:

Sub-processor	Purpose	Location
Stripe	Payment processing	USA (EU-US DPF)
Unipile	LinkedIn API integration	France (EU)
Vercel	Application hosting	USA (EU-US DPF)
Neon	Database hosting	USA (EU-US DPF)
Resend	Transactional emails	USA (EU-US DPF)
PostHog	Product analytics	EU

All sub-processors are contractually bound to data protection obligations.

About Unipile. Unipile acts as the technical intermediary between LinkMagnet and the LinkedIn API. Specifically, the following data flows through Unipile's infrastructure:

Comments on your monitored LinkedIn posts (used for keyword matching)
Public profile information of the commenters (used to send the direct message)
Direct messages that the Service sends on your behalf, and their delivery status

Unipile does not receive any data unrelated to these purposes. Unipile's own terms and privacy policy apply to their processing of this data and are available on their website at unipile.com.

5. International Data Transfers

Data may be transferred outside the European Union only to service providers that comply with GDPR requirements, using approved safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

6. Data Retention

Account data: Retained while the account is active. Deleted upon request.
Campaign and contact data: Retained while the account is active. Permanently deleted upon account deletion.
Payment data: Retained by Stripe for up to 10 years in accordance with legal obligations.
Usage and analytics data: Retained for a maximum of 24 months.

7. Security

We implement appropriate technical and organizational measures to protect your data:

HTTPS encryption for all communications
Restricted access on a need-to-know basis
Hosting on compliant infrastructure (Vercel, Neon)
LinkedIn account access managed through Unipile's secure integration

As a user, you have the right to:

Access your personal data
Rectify inaccurate data
Delete your data ("right to be forgotten")
Export your data (data portability)
Object to certain processing
Withdraw consent at any time, without penalty
Disconnect your LinkedIn account at any time from your settings

To exercise your rights, contact us at: yannishaismannpro@gmail.com

Competent supervisory authority: Andmekaitse Inspektsioon (Estonian Data Protection Authority) — www.aki.ee

9. Cookies

LinkMagnet uses:

Strictly necessary cookies for authentication and session management
Analytics cookies (PostHog) to improve product quality

A cookie consent banner is displayed in accordance with GDPR requirements. We do not use advertising or tracking cookies for marketing purposes.

10. Payments

Payments are processed by Stripe. LinkMagnet never stores payment or banking information directly. For details on Stripe's data handling, refer to Stripe's Privacy Policy.

11. Age Restriction

LinkMagnet is intended for users aged 18 and older. The Service is not designed for minors.

12. Changes to This Policy

This Privacy Policy may be updated to reflect legal, technical, or product changes. Users will be notified of significant updates via email or in-app notification.