Privacy Policy

Who we are

Liney is operated by Liney AI, based in New Brunswick, Canada. This policy explains what personal information Liney handles, why, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Questions or requests go to our privacy contact at hello@liney.ai.

The records in your HubSpot account belong to your organization, which decides what's in them. Liney handles those records on your organization's behalf, to do what you ask it to do.

What we collect

Your account. When you connect HubSpot: your name, email address, HubSpot user and owner IDs, and your HubSpot account's ID, name, timezone and currency. The access tokens HubSpot gives us are stored encrypted. We also link the visitor ID from our cookie, and how you first found Liney (the site that referred you, the page you landed on and any campaign tags), to your account.

A copy of your CRM data. To stay fast, Liney keeps a copy of the deals you work on and the contacts and companies linked to them, such as names, email addresses, phone numbers, job titles, addresses and the fields you chose. It also stores your HubSpot account's field settings, pipelines, required-field rules and its list of HubSpot users and owners, with their names and email addresses. The copy refreshes from HubSpot while you use Liney and once a day. Records that are no longer on your deals are removed, except deals you opened by searching, which stay until you delete your data.

Pipeline counts. When you connect, and once a day after that, Liney counts your open deals: how many have gone quiet, are past their close date, have had their close date pushed back more than once, have a next step booked, or are missing fields your team requires. These are numbers, not the deals themselves. We keep them to show how your pipeline changes over time.

Deal change history. HubSpot keeps a history of every value a field has had. For four fields on the deals Liney reads (amount, close date, stage and owner), Liney keeps that history: each value, when it changed, and where the change came from (in HubSpot, a workflow, an import, another app, or Liney), with the HubSpot user who made it when HubSpot says. It's read along with the deals themselves, so it adds nothing HubSpot didn't already record.

Your lines. What you type, what Liney wrote to HubSpot, and the values from before, so you can see your history and undo.

Pre-approved emails. Team admins can add the email addresses of colleagues who may use Liney, so they skip the wait for approval. We store those addresses even if the person never connects.

Things you send us. Feedback, screenshots you attach, and emails you send to us. When you rate a line with a thumbs up or down, we keep the rating, any reasons or comment you add, and a copy of that line: what you typed, what Liney wrote, the values from before, and the contacts and companies it changed. With feedback and ratings we also keep your browser type. We review ratings and turn them into test cases that help improve how Liney reads your words. They aren't used to train AI models.

The beta waiting list. If you ask to be told when a beta place opens, we keep your email address, company, any note you add and your visitor ID, and send them to ourselves by email.

Emails we send you. A copy of each email Liney sends, such as a welcome email or a reply to your feedback.

Usage and security. A random visitor ID stored in a cookie, the pages you visit, the site that referred you, campaign tags in links, whether you're on a phone, and product events such as connecting or asking for a plan. For AI requests we record the model, token counts, cost and timing, without the text. We also keep a log of account actions, such as connecting, disconnecting and deleting data, which can include your email address. When something fails on our servers, we record the error message and the page or request it happened on, so we can fix it.

Advertising. Our website uses Reddit's pixel, which records your visits to our pages for Reddit. If you arrive from a Reddit ad, we keep the ad's click ID. When you connect HubSpot for the first time, we tell Reddit that a sign-up happened, with that click ID, Reddit's cookie ID, your IP address, your browser type and a hashed (SHA-256) copy of your email address.

How we use it

• to run Liney: read your HubSpot records, propose changes, write them when you choose, and let you undo;
• to keep your account secure and prevent abuse, including usage limits;
• to answer feedback and support requests, and to send emails about your account;
• to understand how people find and use Liney, and to improve it;
• to measure which of our ads bring people to Liney;
• to manage plans and billing, and to meet legal obligations.

We don't sell personal information. We never share your CRM data, lines or ratings with advertisers, or use them to train AI models. The only data we share for advertising is what's described under Advertising above.

AI processing

When you write a line, Liney sends the text to Anthropic's API along with the context needed to understand it: details from your deals, contacts and companies, and your field settings. Anthropic returns the proposed changes. Under Anthropic's commercial terms, it doesn't use this data to train its models, and it may keep it for a limited time under its own policies.

Who we share it with

Your team. Team admins on your HubSpot account can see the lines written on records they can open in HubSpot, going back 90 days, the pipeline counts added up across the team, and, from the deal change history, changes to amount, close date, stage and owner on the team's deals over the last 30 days, with who made them.

We use these service providers to run Liney. Each receives only what it needs for its part:

• HubSpot: your CRM, which Liney reads from and writes to with your permission;
• Supabase: database, file storage and sign-in;
• Vercel: hosting for the website and app;
• Anthropic: the AI model that reads your lines;
• Resend: sending and receiving email;
• Stripe: billing, once paid plans open;
• Reddit: measuring our ads.

Reddit uses what it receives under its own privacy policy, which lets it use the data to measure ads and to choose the ads it shows you. You can turn that off in your Reddit privacy settings, or block Reddit's cookies in your browser.

We may also disclose information if the law requires it, or as part of a sale or reorganization of the business, under this policy.

Where it's stored

Liney's data is stored in the United States, and our providers may process it in other countries. Information stored outside Canada is subject to the laws of those countries, and may be accessible to their authorities.

Cookies

• Sign-in cookies keep you signed in to Liney.
• A visitor cookie (a random ID, kept for a year) lets us count visits and see which pages lead people to connect. It isn't shared with advertisers.
• A signed-in hint (kept for a year, holding only a 1) tells our pages whether to show Open Liney or Connect HubSpot. It grants no access.
• A short-lived cookie (10 minutes) protects the HubSpot connection step.
• Reddit ad cookies. Reddit's pixel sets a cookie with a random ID, and when you arrive from a Reddit ad we keep the ad's click ID in a cookie for 28 days.

Your theme and view settings are saved in your browser, and a line written offline is kept there, with the changes it proposes, until it's sent. Reddit's pixel is the only third-party advertising script on our website. It runs on our public pages, not inside the app once you've connected.

How long we keep it

• Your account, lines, line ratings, CRM copy and pipeline counts: until you delete your data. Disconnecting keeps them, so you can reconnect where you left off.
• Data that belongs to your HubSpot account as a whole (its ID, name, timezone and currency, field settings, pipelines, list of HubSpot users and owners, required-field rules and pre-approved emails): until the account asks us to remove it.
• Deal change history: 400 days from each change, and removed with the rest of the account's data if the account asks us to remove it.
• Visit and product events: 90 days, then only daily totals, which we keep. Per-visitor daily activity, and how each visitor first found Liney: 25 months.
• AI request records: 13 months, then only daily totals, which we keep.
• Copies of emails we send: the message for 30 days, the delivery record for 12 months.
• The log of account actions: 2 years.
• Feedback, screenshots and emails you send us: until you ask us to delete them.
• The beta waiting list: until the beta ends, or until you ask us to remove you.
• What we send Reddit: Reddit keeps it under its own privacy policy.

Deleted data can remain in database backups for a short time until those backups expire.

Your choices and rights

You can disconnect HubSpot in Settings at any time. Delete my data, also in Settings, removes your lines and their ratings, your copy of CRM data, your settings and field choices, your HubSpot tokens and your sign-in. Records in HubSpot itself aren't touched.

Some things stay after Delete my data. Usage events and AI request records stay without your account linked to them, though a few events can still include your email address. The log of account actions keeps its entries for 2 years, including the one recording the delete, with your name and email address. Copies of emails we sent you stay for their usual time. Feedback, screenshots and emails you sent us, a pre-approved email for you, and a beta waiting list entry stay until you ask us to delete them. We can't take back a sign-up we already reported to Reddit.

Data that belongs to your HubSpot account as a whole also stays, because other people on the account may still use it: the account's ID, name, timezone and currency, its field settings, pipelines, list of HubSpot users and owners, required-field rules and pre-approved emails. To have it removed, the account can email hello@liney.ai.

Disconnecting or deleting your data in Liney doesn't uninstall the app from HubSpot. To remove it there, a HubSpot admin can go to Settings > Integrations > Connected apps.

You can also ask us to access, correct or delete your personal information, or ask a question about how we handle it, by emailing hello@liney.ai. We'll respond within 30 days. If you're a contact in someone's HubSpot account, the organization that owns that account controls your record, so we may refer your request to them. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Security

Data is encrypted in transit, HubSpot tokens are encrypted at rest, and access to production data is limited to the people who run Liney. No system is perfectly secure. If a breach creates a real risk of significant harm, we'll notify you and the Privacy Commissioner as the law requires.

Children

Liney is for business use by people 18 and over. We don't knowingly collect information from children.

Changes to this policy

We'll update this policy as Liney changes, change the date at the top, and tell you in the app or by email about changes that matter. Our Terms of Service cover the rest of the rules for using Liney.