Privacy Policy

1. Introduction

We-Link API is owned and operated by We-Connect Systems LLC ("We-Connect," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our LinkedIn automation API service and related website (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Our role in your data

We-Link plays two different roles depending on whose data is involved.

When you sign up, pay, contact support or browse our website, we decide why and how your information is handled. For that data, your name, email, company, billing details and API usage, we act as the data controller.

When you use the API to act on LinkedIn, whether through an AI agent over MCP or your own program over REST, the personal data of the people you reach, their profiles, your connection requests, and the messages sent and received, is data you control. You set the purpose and the instruction; We-Link only carries it out. For that data you are the controller and We-Link is your processor, acting on your documented instructions under our Data Processing Agreement at we-link.ai/dpa. You are responsible for the lawful basis of your outreach, for informing the people you contact where required, and for handling their requests to exercise their rights.

If a customer has contacted you through We-Link and your request concerns that customer's data, please contact the customer directly. If you send the request to us, we will pass it to the relevant customer without undue delay.

3. Information we collect

3.1 Information you provide

Account information: When you register for our Service, we collect your name, email address, company name, billing information, and any other information you provide during registration.

LinkedIn connection: To act on LinkedIn on your behalf, we store an encrypted session token for the account you connect. Some connection methods also require your account password, which we store encrypted. Both are used solely to carry out the actions you request through the API, and are deleted when you disconnect the account or close your account.

API configuration data: Information about your API integration settings, usage preferences, and customization options.

Communications: When you contact us for support or inquiries, we collect the content of your communications and any information you choose to provide.

3.2 Automatically collected information

Usage data: We collect information about how you interact with our Service, including API call volumes, features used, timestamps, and performance metrics.

Device and technical information: IP addresses, browser type, operating system, device identifiers, and other technical data.

Cookies and tracking technologies: We use cookies, web beacons, and similar technologies to track activity on our Service and store certain information. You can control cookie preferences through your browser settings.

3.3 Third-party information

LinkedIn data processed on your behalf: When you call the API, whether from an agent or your own program, we process the LinkedIn data involved in that action, profile details, connection status, and the content of messages sent and received, only to carry out your instruction and return the result to you. We process this data as your processor, do not keep it as a standing database, and do not use it for our own purposes. How long each type of data persists is set out in the Data Retention section.

4. How we use your information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process your API requests and enable LinkedIn automation functionality
• Manage your account and provide customer support
• Send administrative information, updates, and security alerts
• Monitor and analyze usage patterns to improve Service performance
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and enforce our Terms of Service
• Develop new features and services

These uses apply to the account and usage data we control. We do not use the LinkedIn data processed on your behalf to develop our products, or for any purpose other than carrying out your instructions.

5. How we share your information

We do not sell your personal information. We may share your information in the following circumstances:

Service providers: We work with third-party companies that provide services on our behalf, including payment processing, data hosting, network connectivity through dedicated proxies, analytics, and customer support. These providers have access only to the information necessary to perform their functions and are obligated to protect your information.

Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

Legal requirements: We may disclose your information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

With your consent: We may share your information for any other purpose with your explicit consent.

The providers we work with are listed below. Those under IT infrastructure and network proxy services may process data we handle on your behalf, and act as our subprocessors. The others support our own operations, such as marketing, communications and billing.

6. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction. These include:

• encryption of data in transit, and encryption at rest for the data we retain, such as account details, connection credentials and logs
• dedicated, geo-matched IP addresses for each connected account, provided through a specialized proxy provider acting as our subprocessor
• access controls limiting employee access to personal data
• regular security assessments and monitoring

Because prospect data is processed in transit and returned to you rather than warehoused, it is not held in a standing store. No method of transmission or storage is completely secure, and while we work to protect your information we cannot guarantee absolute security.

7. Data retention

We keep different kinds of data for different periods:

• Prospect personal data processed through the API is transient. It is processed to carry out your instruction and returned to you, not held as a standing database on our systems.
• Request metadata and technical logs are kept for up to 3 months for monitoring, debugging, usage reconciliation and security, unless a specific security investigation requires holding them longer.
• Account and connection data, including your encrypted session token and connection credentials, is kept for as long as your account is active. When you close your account we permanently delete it within 90 days, and confirm the deletion in writing within 30 days of your request.

8. Your rights and choices

Depending on your location, you may have certain rights regarding your personal information:

Access: Request access to the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information, subject to certain legal exceptions.

Portability: Request a copy of your information in a structured, machine-readable format.

Objection: Object to our processing of your personal information in certain circumstances.

Withdrawal of consent: Withdraw consent where we rely on your consent to process your information.

To exercise these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

Where your request concerns data we process on behalf of a customer, please contact that customer as the controller. If you contact us, we will pass your request to them and assist as needed.

9. International data transfers

We-Link processes data on servers in the United States. Where personal data is transferred out of the EU, EEA, UK or Switzerland, the transfer is covered by the Standard Contractual Clauses incorporated into our Data Processing Agreement at we-link.ai/dpa, together with any additional safeguards required. Our geo-matched proxies route the outbound action to LinkedIn from a location matched to your connected account; this is separate from where We-Link stores account and log data.

10. California privacy rights

This section applies to California residents and supplements the rest of this Privacy Policy.

For the personal information we process on a customer's behalf through the API, the customer is the "business" and We-Link acts as a "service provider" under the California Consumer Privacy Act and the California Privacy Rights Act (together, the "CCPA"). We use that information only to provide the Service, on the customer's documented instructions, and for no other purpose.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding 12 months.

Subject to the CCPA and its exceptions, California residents have the right to: know what personal information we collect and how we use it; request access to that information; request correction of inaccurate information; request deletion of their information; and opt out of any sale or sharing. We will not discriminate against you for exercising any of these rights.

To exercise a California right, contact us at [email protected]. We may need to verify your identity before responding. You may use an authorized agent to submit a request on your behalf. If your request concerns information we process on behalf of a customer, please submit it to that customer as the business; if you contact us, we will pass it to them and assist as needed.

11. Children's privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

12. Third-party links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13. LinkedIn-specific provisions

Not affiliated with LinkedIn: We-Link is not affiliated with, endorsed by or sponsored by LinkedIn. We act only from an account you have connected, and only when you trigger an action through the API.

Activity limits: We pace activity to stay within LinkedIn's per-account limits. You control your automation settings and are responsible for using the Service in line with LinkedIn's terms.

Your responsibility: You are responsible for how you use the Service. We are not liable for account restrictions resulting from use that falls outside LinkedIn's terms.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of the Service after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

15. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at [email protected].