Privacy Policy

Who we are

Limnax (“Limnax”, “we”, “us”) provides software that helps agencies and freelancers find prospective clients, audit their websites, and send outreach email from their own mailbox. This policy explains what data we handle and why.

Questions about this policy or your data: aliyakupeyu@gmail.com.

Information we collect

• Account information. Your name, email address and profile image, provided when you sign in.
• Workspace content. The leads, notes, website audits, generated outreach drafts, campaigns and follow-ups you create in the product.
• Prospect information. Publicly listed business details (name, website, phone number, address, category, rating) returned by business-directory searches you run, plus any contact details you add yourself.
• Connected mailbox data. If you connect a Google account, we store your email address and an encrypted refresh token. See the Google section below.
• Sending records. The subject, body, recipient and delivery status of emails sent through the product, so campaigns can be audited and follow-ups scheduled.
• Technical logs. Standard server logs and error reports.

Google user data

Limnax requests a single Gmail permission, https://www.googleapis.com/auth/gmail.send, together with your account email address.

• What we do with it. We use gmail.send solely to send the outreach emails that you compose and schedule in Limnax, from your own address, at the times you configure. Nothing is sent without a campaign you created and started.
• What we do not do. We do not read, search, download, modify or delete your existing email. We do not request permission to do so. We do not use Google user data to train any machine-learning or AI model, and we never sell or rent it.
• What we store. Your Google account email address, and a refresh token encrypted with AES-256-GCM. The token is only decrypted in memory at the moment an email you scheduled is sent.
• Who we share it with. Nobody. Google user data is not shared with third parties, and is not accessible to other Limnax workspaces.
• How to revoke it. Disconnect the mailbox in Limnax under Settings → Sending, or revoke access directly at myaccount.google.com/permissions. Either action deletes the stored token; disconnecting in Limnax deletes it immediately.

Limnax's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• To provide the product: storing your leads, running website audits, generating drafts, and sending the campaigns you configure.
• To keep the service working and secure, including rate limiting, abuse prevention and debugging.
• To communicate with you about your account.

We do not sell your data, and we do not use the contents of your workspace for advertising.

Sub-processors

We use a small number of infrastructure providers to run the service. They process data only on our instructions:

• Vercel — application hosting and file storage (website screenshots).
• Neon — the PostgreSQL database and authentication.
• Google — sending email from your connected mailbox.
• Apify — business-directory search when you run a discovery search.
• Anthropic, via Vercel AI Gateway — generating website audit findings and outreach drafts. Website screenshots and page text from the site being audited are sent for analysis. Your connected mailbox contents are never sent to any AI provider.

Retention and deletion

Workspace content is kept while your account is active. Deleting a lead, audit or campaign removes it from the product. Disconnecting a mailbox deletes its stored token immediately. To delete your account and all associated data, email us and we will action it within 30 days.

Security

Data is encrypted in transit. Mailbox refresh tokens are additionally encrypted at rest with AES-256-GCM. Access to a workspace's data is restricted to members of that workspace and enforced on every request. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data we hold.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us at the address above and we will respond within the period required by applicable law.

Recipients of outreach email

If you received an email sent through Limnax, the sender is the Limnax customer whose address appears in the “from” field, not Limnax itself. Every message includes a working unsubscribe link, which takes effect immediately and permanently for that sender. You may also contact us at the address above.

Changes

We will update this page when our practices change and revise the date at the top. Material changes will be communicated to account holders.