1. Who we are
Swimlane (“we”, “us”) operates Swimlane, a customer relationship platform for people who prospect on LinkedIn. This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it. It covers the Swimlane web application and this website.
For any question about this policy, or to exercise a right described below, write to hello@getswimlane.com.
2. What we collect
Data you give us
- Account details: your name, email address, and the organisation you belong to.
- Content you create in the product: notes, tags, lists, pipeline stages, message templates, and the description of your ideal customer profile.
- Billing details, handled by Stripe. We never see or store your card number.
Data from your LinkedIn account
- Your LinkedIn contacts and their public profile data: name, headline, company, connection degree, profile URL.
- Conversations from your LinkedIn inbox, and the interactions we record on your behalf (invitations sent and accepted, profile views, replies).
- You connect your LinkedIn account yourself and can disconnect it at any time from your settings.
Data we collect automatically
- Usage data: which features you open and when, so we can tell what is worth improving.
- Technical data: browser, operating system, IP address, and the timestamps of your requests.
- Strictly necessary cookies for your session. We do not use advertising cookies.
3. Why we process it, and on what basis
- To provide the service — performance of our contract with you. This covers syncing your contacts, scoring ICP fit, running the campaigns you configure, and delivering your messages.
- To bill you — performance of our contract, and our legal obligation to keep accounting records.
- To keep the service secure — our legitimate interest in preventing abuse, fraud and unauthorised access.
- To improve the product — our legitimate interest, using aggregated usage data.
- To send product news — your consent, which you can withdraw from any email or from your settings.
4. Who we share it with
We do not sell personal data, and we do not share it for anyone else’s advertising. We use a small number of processors, each bound by a data-processing agreement: a cloud hosting provider, Stripe for payments, an email delivery provider for transactional messages, and a product-analytics provider. Where a processor operates outside the European Economic Area, the transfer is covered by Standard Contractual Clauses.
We will disclose data to an authority only where we are legally required to, and only to the extent required.
5. How long we keep it
- Account and contact data: for as long as your account is open.
- After you delete your account: erased within 30 days, except where we must keep records longer by law.
- Invoices: 10 years, as required by accounting rules.
- Technical logs: 12 months.
6. Your rights
Under the GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on our legitimate interest. You may also ask for your data in a portable format — the product exports contacts and conversations directly.
Write to hello@getswimlane.com and we will answer within one month. If our answer does not satisfy you, you may complain to your national data-protection authority.
7. Security
Data is encrypted in transit and at rest. Access to production systems is restricted, individually credentialled and logged. Credentials for your connected LinkedIn account are encrypted with a separate key and are never readable by our team. If a breach ever affects your rights, we will notify you and the relevant authority within 72 hours.
8. Your responsibilities as a user
When you import a contact into Swimlane, you become a controller of that person’s data alongside us. You are responsible for having a lawful basis to process it, for honouring the rights of the people in your CRM, and for complying with LinkedIn’s own terms. Swimlane gives you the tools to delete or export any contact on request.
9. Changes to this policy
We may update this policy. If a change materially affects you, we will tell you by email before it takes effect. The date at the top always reflects the current version.