Privacy Policy

1. Demo Bookings

Lead generation agencies can book a walkthrough of the platform before creating an account. Bookings are made through Calendly, and LinkedCamp receives the details entered in the booking form, such as name, email address, company name and any answers about the agency. This information is used to prepare and hold the walkthrough and to follow up about relevant subscription options.

Users may also access previously recorded demos by providing first name, last name, email, and LinkedIn Profile URL. This information helps LinkedCamp deliver appropriate demonstrations and follow up with relevant subscription options.

Demo data is processed under legitimate business interests per GDPR Article 6.1(f). Users may additionally consent to receiving newsletters during signup under GDPR Article 6.1(a).

2. Account and Profile Setup

Platform access requires account registration with the following information: first and last name, email address, preferred language, account password, country, address, company affiliation, and any voucher codes.

To use LinkedIn automation features, users must connect their LinkedIn account via login credentials and a temporary code. Profile settings allow adjustment of interaction parameters including account warm-up, message volume limits, message ranges, active messaging times, and inactive messaging days.

Important: when connecting another person's LinkedIn account, you must have their consent or another applicable legal basis in accordance with GDPR Article 6.

After registration, users can upload profile pictures, enable two-factor authentication, and select subscription types. Users may also create user groups ("agencies") on the platform.

LinkedCamp uses account information to: create and maintain user accounts (legal basis: contract performance per GDPR 6.1(b), or legitimate interest per 6.1(f) when connecting others' accounts); contact users regarding platform functionality or account matters via email and notifications (6.1(b)); analyze platform efficiency under legitimate business interests (6.1(f)); and send marketing materials upon user consent (6.1(a)).

Account data persists for the duration of active accounts. Inactive accounts are deleted or anonymized twelve (12) months after the last user session.

3. Platform Functionality

The platform enables users to automate LinkedIn marketing activities. LinkedCamp stores and processes: tasks created and managed on the platform; messages sent via LinkedIn, including timestamps, recipient information, and content; and messages exchanged between platform users, including timestamps, recipients, and content.

Data processing occurs under contract performance (GDPR 6.1(b)), or legitimate interest (6.1(f)) when connecting others' accounts.

4. ChatGPT and MCP Integration

When you connect LinkedCamp to ChatGPT or another MCP client, LinkedCamp receives the specific tool requests and inputs that you choose to submit through that client. Depending on the requested task, those inputs may include account identifiers, campaign and sequence settings, prospect or lead information, message content, inbox queries, analytics parameters, and instructions used to draft content. LinkedCamp processes this information to authenticate the request, perform the requested LinkedCamp operation, return the requested result, prevent abuse, troubleshoot failures, and maintain service security. The legal bases are performance of our contract with you (GDPR 6.1(b)) and our legitimate interests in securing and improving the integration (GDPR 6.1(f)).

Tool results are returned to the MCP client that initiated the request. When that client is ChatGPT, OpenAI receives and processes the tool inputs and results under OpenAI's own terms and privacy policy. Do not submit information through the integration that you are not authorized to process or disclose. LinkedCamp does not receive the rest of your ChatGPT conversation unless the client includes particular content in a tool request.

The LinkedCamp authorization page accepts your existing LinkedCamp API key to connect the integration. The key is submitted only to LinkedCamp over TLS. It is not placed in a URL, written to LinkedCamp MCP call logs, or returned in a tool result. The authorization service is stateless: it places the key inside encrypted authorization artifacts held by the MCP client. Authorization codes expire after five minutes, access tokens after 30 days, and refresh tokens after 365 days. Rotating the LinkedCamp API key in LinkedCamp settings immediately invalidates tokens containing the previous key.

For authenticated MCP operations, LinkedCamp records an operational call log containing the LinkedCamp user and team identifiers, operation name, requested variables after credential-like fields are redacted, source IP address, user agent, start time, outcome, limited error details, duration, and creation time. Variables larger than 10 KB are replaced with a size and field-name summary. These logs support security, abuse prevention, troubleshooting, and service reliability; they are not used for advertising profiling.

MCP call logs and associated platform content are retained while needed to provide and secure an active account. For an account with no current plan and no qualifying activity for six months, LinkedCamp's cleanup process removes MCP call logs and the associated operational content. You may request earlier deletion as described under Your Rights. Some account, subscription, transaction, and legal records may be retained longer where required to establish, exercise, or defend legal claims or comply with law.

You can stop future MCP access by removing the LinkedCamp plugin or connection in your MCP client and rotating your LinkedCamp API key at https://app.linkedcamp.com/settings/integrations. Removing the connection from a client does not by itself delete information already stored in your LinkedCamp account; contact support@linkedcamp.com to request access or deletion.

5. Payments

Users may generate invoices for platform usage directly within their profiles. LinkedCamp processes account data to calculate payment amounts and deliver invoices.

Payment information goes to third-party payment processors. LinkedCamp only receives information about payment confirmation from that provider — no raw card data is stored on our systems.

Payment data processing uses contract performance as its legal basis (GDPR 6.1(b)). Financial data retention also supports financial performance analysis under legitimate interests (6.1(f)) and compliance with accounting laws (6.1(c)).

6. Technical Support

Support requests submitted via website forms or email are used to provide assistance, fix and improve the platform, and analyze efficiency through inquiry statistics.

Legal bases include contract performance (GDPR 6.1(b)) and legitimate interest in platform improvement (6.1(f)). When connecting others' accounts, legitimate interest (6.1(f)) applies.

7. Whitelabel and Affiliate Partner Registration

Affiliate and whitelabel partner registration collects company affiliation, name, email, phone number, marketing tools used, number of managed accounts, and distribution plans.

This data supports contract formation and performance with partners. The legal basis is contract performance (GDPR 6.1(b)). Data retention spans twelve (12) months following last activity.

8. Recipients and Service Providers

LinkedCamp discloses personal data only as needed to operate the services or comply with law. Recipient categories may include cloud hosting and infrastructure providers; authentication, security, monitoring, and customer-support providers; email-delivery and communications providers; payment processors and accounting providers; analytics and advertising-measurement providers where you have provided the required consent; LinkedIn, connected email providers, CRM services, webhook destinations, and AI providers that you choose to connect; and OpenAI or another MCP client provider when you invoke LinkedCamp through that service.

These providers receive only the information needed for their function and process it under their own terms or contractual data-protection obligations, as applicable. LinkedCamp may also disclose information to professional advisers, regulators, courts, law enforcement, or a successor in a corporate transaction where legally permitted or required.

9. Website Analytics, Advertising, and Cookies

Our website uses necessary storage for site operation and, with your consent where required, analytics, customer-support, affiliate-attribution, and advertising-measurement technologies. These technologies may process device and browser information, pages viewed, referral information, campaign identifiers, approximate location derived from IP address, and interaction timestamps. Providers used for these purposes may include Google Analytics, Meta, Intercom, FirstPromoter, and Ahrefs.

You can accept, reject, or revise optional analytics and advertising choices through Cookie Preferences in the website footer. Withdrawing consent affects future optional processing and does not invalidate processing that occurred before withdrawal.

10. Your Rights

Under GDPR and similar regimes you have the right to access your data, correct inaccurate data, request deletion, restrict processing, object to processing, and request data portability. Contact support@linkedcamp.com to exercise any of these rights. We respond within 30 days.

11. Changes to This Policy

LinkedCamp may update this Privacy Policy from time to time. Material changes will be communicated via email and the in-product notification system before they take effect.

12. Data accessed by AI clients you connect

When you connect ChatGPT, Claude or another MCP client, data returned by tools is processed by that provider under its terms.

13. BYOK model providers

Bring-your-own-key model providers (OpenAI, Anthropic, Google Gemini, DeepSeek, xAI): prompts and lead data are sent to the provider you choose.