Your data, in plain words.

Luckgraph is operated by [Company legal name, address] ("we", "us"). This policy explains what we collect, why, and what we will never do. If anything here is unclear, write to privacy@luckgraph.com.

1. What we collect

• Account data: your name and email when you join the waitlist or create an account.
• Sources you connect, only with your explicit consent per source: Google Calendar (attendees, times), your LinkedIn data export (connections, roles, companies), Contacts (names, emails, phones, companies), Gmail metadata (sender, recipient, date; not message bodies unless you separately grant that scope), and later WhatsApp exports, Slack DM metadata and X.
• Signals you set: needs and offers you type into Luckgraph or into an agent connected to it.
• Usage data: page views and events on this site via privacy-friendly analytics, and product logs needed to run the service.

2. What we do with it

• Build your relationship graph and score how close you are to each person.
• Answer whether a path exists to a person or company, and broker introductions after consent from everyone involved.
• Enrich people in your graph with public professional information (role, company, job changes) from data providers.
• Send you transactional messages: intro requests, confirmations, and one email when your city opens.

3. What we will never do

• Show your contacts, or any list derived from them, to any other user, company or partner.
• Sell your data, or use it for advertising.
• Train machine-learning models on your data outside your own account.
• Reveal a name in an introduction before the connector has explicitly said yes.
• Scrape platforms on your behalf. We only read sources you connect or export yourself.

4. Google user data

Luckgraph's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to build and update your own graph, is never sold, never used for advertising, and never shared with other users except as an anonymous "a path exists" answer and, after your consent, the specific introduction you approve.

5. Retention and deletion

Raw source data is deleted after it has been normalised into relationship events. Derived data is kept while your account exists. Disconnecting a source removes the edges built from it within 24 hours. Deleting your account removes your graph, signals and account data within 30 days, except records we must keep by law.

6. Your rights

You can access, export, correct or delete your data at any time from your account or by emailing us. If you are in the EU/EEA or UK, you have the rights set out in the GDPR, including the right to complain to your supervisory authority. Our legal basis for processing is your consent for each connected source and our legitimate interest in operating the service for account and usage data.

7. Processors and transfers

We use hosting, email delivery, analytics and professional data providers as processors under written agreements. Data may be processed in the United States and the EU with appropriate safeguards. A current list of processors is available on request.

8. Security

Data is encrypted in transit and at rest. Second-degree people are referenced by opaque identifiers until both consents exist. Every reveal is logged. We commission an independent security review before opening beyond our first cities.

9. Changes and contact

We will notify you by email of material changes. Contact: privacy@luckgraph.com, [Company legal name, address].