Privacy Policy
Last updated: October 31, 2026
This policy explains what personal data Netwarm collects, why, and what rights you have. It covers four groups of people:
- Customers: people who create a Netwarm account
- People who appear in Netwarm: people who engaged with the LinkedIn posts of a profile tracked in Netwarm
- Reveal visitors: people who unlock a resource shared through a Netwarm Reveal link
- Website visitors: people who browse netwarm.com
1. Who we are
Netwarm is operated by the company registered in France under SIREN 942232950 (“Netwarm”, “we”, “us”).
For any question about your personal data, contact us at max@netwarm.com.
2. Customers
What we collect
- Account data: name, email address, password or Google sign-in identifier, workspace name, team members you invite
- LinkedIn profile data: the public URL of the LinkedIn profiles you track, and the public data of that profile and its posts
- LinkedIn connection (optional): if you connect LinkedIn to schedule posts, we receive an access token from LinkedIn’s official sign-in. It only lets us publish the posts you schedule. We never see your LinkedIn password.
- Content you create: scheduled posts and their media, Reveal resources, targets, topics, notes, stages and settings
- Billing data: plan, invoices and billing address. Card details are handled by Stripe, and we never see them.
- Usage data: pages viewed, features used, errors, device and browser type, IP address
- Support messages: what you send us by email
Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing the service: syncing engagement, scoring, scheduling, Reveal, alerts | Performance of our contract with you |
| Billing and tax | Contract, and our legal obligations |
| Service emails: alerts, digests, security, billing | Contract |
| Product emails: tips and new features (you can unsubscribe anytime) | Our legitimate interest in helping you use Netwarm |
| Analytics and error tracking, to improve the product | Legitimate interest or consent, depending on the cookie or tracker used (see section 6) |
| Security and fraud prevention | Legitimate interest |
3. People who appear in Netwarm
If you liked, commented on or reposted a LinkedIn post published by a profile tracked in Netwarm, you may appear in that profile’s workspace.
What we collect
- Public LinkedIn profile data: name, headline, photo, profile URL, current and past roles, company, industry, location
- Public company data: company name, size, industry and headquarters
- Your public engagement with the tracked profile’s posts: reactions, comments (including their text), reposts, and their dates
- Data the tracked profile’s owner adds: stage, target, notes, and contact details if you gave them
Where it comes from
We collect public professional data and public company information from the web. We don’t access private LinkedIn data, private messages or profile views.
Why we use it, and on what legal basis
We use this data so that professionals can understand who engages with their public content and decide whom to start a conversation with. Netwarm computes a “warmth” score from your engagement over the last 90 days, and uses AI to classify your comments (for example, as a question about an offer).
Our legal basis is legitimate interest: yours in your public professional engagement being understood, and our customers’ in knowing their audience. We limit this to public professional data, never send messages on our customers’ behalf, and don’t sell your data.
No automated decisions with legal effects: the warmth score only helps our customers prioritize. It has no legal or similarly significant effect on you.
Who is responsible
- Netwarm is the controller of the public profile and engagement data it collects.
- Each customer is the controller of what they add about you (notes, stages, contact details). Netwarm processes that data on their behalf.
Your right to object
You can object at any time by writing to max@netwarm.com with your LinkedIn profile URL. We’ll remove your data from Netwarm and stop collecting it.
4. Reveal visitors
When you unlock a resource shared through a Reveal link, we collect your LinkedIn username and email address, and any other fields the creator asked for (first name, last name, phone number). We email you the resource and share your details with the creator who shared the link, matched to your public LinkedIn profile.
The creator is the controller of these details and decides how to use them, and Netwarm processes them on their behalf. The legal basis is your request for the resource. Download links expire after a while. To have your details removed, contact the creator or write to max@netwarm.com.
5. Who we share data with
We don’t sell personal data. We share it only with:
- The customers whose posts you engaged with (for people who appear in Netwarm and Reveal visitors)
- Our service providers, who process data on our behalf under contract:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | US |
| Vercel | Hosting | US |
| Sign-in and post publishing | US | |
| OpenRouter, and the AI model providers it routes to | Comment classification, topics, targets, openers | US |
| Firecrawl | Reading public company websites | US |
| Stripe | Payments and tax | US |
| Resend | Transactional emails | US |
| PostHog | Product analytics | US |
| Sentry | Error tracking | US |
- Authorities, when the law requires it
Transfers outside the EU
Our service providers are based in the United States. These transfers are covered by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses.
6. Cookies
We use cookies that are strictly necessary for signing in and keeping you signed in, and PostHog cookies to understand how the product is used. You can block or delete cookies at any time in your browser settings.
7. How long we keep data
| Data | Kept |
|---|---|
| Account data | As long as your account exists, then deleted within 30 days |
| Content and captured engagement in a workspace | Until the workspace owner deletes it or the account is closed |
| Public profile data of people who appear in Netwarm | As long as they appear in at least one active workspace |
| Reveal visitor details | Until the creator deletes them or their account is closed |
| Invoices | 10 years (legal obligation in France) |
| Analytics and error logs | 12 months at most |
Customers can delete all captured data or their whole account at any time from Settings.
8. Your rights
Under GDPR, you have the right to access, correct and delete your data, to object to its use, to restrict how it’s used, and to receive it in a portable format. Customers can export their data as CSV from Settings at any time.
To use any of these rights, write to max@netwarm.com. We answer within one month.
You can also complain to your data protection authority. In France, that’s the CNIL (cnil.fr).
9. Security
Data is encrypted in transit and at rest. Access is restricted by workspace and role. Secrets are never exposed to the browser, and access to production data is limited to the people who need it.
10. Changes
If we make significant changes to this policy, we’ll tell customers by email before they apply.