Privacy Policy
Introduction
Process Intelligence Partner LLC, a Florida limited liability company doing business as "Linked By Six" ("Company," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website at linkedbysix.com, and related services (collectively, the "Platform").
Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use the Platform.
This Privacy Policy is incorporated into and subject to our Terms of Service.
1. Information We Collect
We collect several types of information from and about users of our Platform.
1.1 Personal Information You Provide
Account Registration Information
- Full legal name
- Email address
- Phone number (U.S. format)
- Password (encrypted)
- Profile photograph
Profile Information
- Biographical information
- Geographic location (city, state, zip code)
- Timezone
- Profile preferences
Business Information (for Business Users)
- Business name and legal entity information
- Business description
- Industry category and specializations
- Service areas (geographic regions served)
- Business logo and photographs
- Business website URL
- Business contact email
- Employee information (names, roles)
Payment Information
- We do not directly store complete credit card numbers
- Payment processing is handled by Stripe, Inc.
- We store: Stripe customer ID, subscription ID, billing cycle, payment status, and transaction history
Communications
- Messages sent through the Platform
- Customer support inquiries
- Feedback and survey responses
User-Generated Content
- Reviews and ratings
- Comments on business profiles
- Connection notes and relationship descriptions
1.2 Information Collected Automatically
Device Information
- Device type (iOS, Android, Web)
- Device name and model
- Operating system version
- Unique device identifiers
- Mobile network information
Usage Information
- Pages and features accessed
- Time spent on the Platform
- Search queries
- Click patterns and navigation paths
- Feature usage statistics
Log Data
- IP address
- Access times and dates
- App crashes and errors
- Referring URLs (for web access)
Analytics Data
- Session duration
- Feature engagement metrics
- Conversion events
- Performance metrics
1.3 Information from Third Parties
Contact List Data (with your permission)
- Names from your device contacts
- Phone numbers from your device contacts
Payment Processor Data
- Transaction confirmations from Stripe
- Subscription status updates
- Payment failure notifications
Authentication Providers
- Verification status from SMS providers
1.4 Sensitive Information
We do not intentionally collect sensitive personal information such as:
- Social Security numbers
- Financial account numbers (beyond payment processing)
- Health information
- Biometric data
- Racial or ethnic origin
- Political opinions
- Religious beliefs
2. How We Collect Information
2.1 Direct Collection
We collect information directly from you when you:
- Create an account
- Complete your profile
- Subscribe to a plan
- Send messages or make calls
- Submit reviews or ratings
- Contact customer support
- Respond to surveys
- Claim a business profile
2.2 Automatic Collection
We automatically collect information when you:
- Access or use the Platform
- Navigate between pages or features
- Interact with notifications
- Use search functionality
2.3 Third-Party Collection
We receive information from third parties when:
- You grant permission to access your contacts
- Payment transactions are processed
- You verify your phone number via SMS
2.4 Cookies and Similar Technologies
We use cookies, local storage, and similar technologies to:
- Maintain your session
- Remember your preferences
- Analyze usage patterns
- Improve Platform performance
See Section 13 for more details on cookies.
3. How We Use Your Information
We use collected information for the following purposes:
3.1 Providing and Maintaining the Platform
- Creating and managing your account
- Processing subscriptions and payments
- Enabling messaging and voice calls
- Displaying your profile to other users
- Facilitating connections and referrals
- Providing customer support
3.2 Improving the Platform
- Analyzing usage patterns and trends
- Identifying and fixing bugs
- Developing new features
- Optimizing performance
- Conducting research and analysis
3.3 Personalization
- Customizing search results
- Recommending connections
- Tailoring content to your interests
- Remembering your preferences
3.4 Communications
- Sending transactional emails (verification, receipts, alerts)
- Sending marketing communications (with opt-out option)
- Delivering push notifications
- Providing customer support responses
3.5 Safety and Security
- Verifying user identity
- Detecting and preventing fraud
- Enforcing our Terms of Service
- Investigating reported violations
- Protecting user safety
3.6 Legal Compliance
- Complying with applicable laws and regulations
- Responding to legal requests and court orders
- Establishing, exercising, or defending legal claims
3.7 Business Operations
- Processing business analytics for Business Users
- Calculating network metrics
- Generating aggregated insights
- Managing subscriptions and billing
4. How We Share Your Information
We may share your information in the following circumstances:
4.1 With Other Users
- Profile Information: Your name, photo, and profile details are visible to other users based on your privacy settings
- Business Profiles: Business information is publicly visible to facilitate discovery
- Connection Information: Your connections may see that you are connected, and connection paths may be shown to other users. The Platform displays to users who in their network is connected to a given business or person, enabling trust-based discovery through mutual connections. Users can also view who is directly connected to them, which enables them to manage and block unwanted connections
- Messages: Message content is shared with message recipients
- Reviews: Reviews you post are publicly visible
4.2 With Service Providers
We share information with third-party service providers who perform services on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database and authentication | Account data, messages, user content |
| Stripe | Payment processing | Payment information, subscription data |
| Resend | Email delivery | Email addresses, email content |
| Expo | Push notifications | Device tokens, notification content |
| Neo4j | Relationship mapping | Connection data, relationship types |
| Sentry | Error monitoring | Error logs, device information |
4.3 For Legal Reasons
We may disclose information:
- To comply with legal obligations
- In response to lawful requests by public authorities
- To protect our rights, privacy, safety, or property
- To protect against legal liability
- In connection with investigations of suspected illegal activity
4.4 Business Transfers
If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
4.5 With Your Consent
We may share information for other purposes with your explicit consent.
4.6 Aggregated and De-Identified Data
We may share aggregated or de-identified information that cannot reasonably be used to identify you for analytics, research, or marketing purposes.
5. Third-Party Services and Integrations
5.1 Payment Processing (Stripe)
All payment transactions are processed by Stripe, Inc. When you make a payment:
- Your payment information is transmitted directly to Stripe
- We receive confirmation of successful/failed transactions
- We store transaction IDs and subscription status
- Stripe's privacy policy applies: https://stripe.com/privacy
5.2 Database and Authentication (Supabase)
We use Supabase for our database infrastructure and authentication:
- Your data is stored on Supabase-managed servers
- Authentication tokens are managed by Supabase
- Supabase's privacy policy applies: https://supabase.com/privacy
5.3 Push Notifications (Expo)
- Device push tokens (Expo push tokens) are collected and stored on our servers
- Tokens are linked to your user account for targeted notification delivery
- Notification content is transmitted through Expo's servers
- Push tokens are deleted when your account is deleted
- We do NOT use push notifications for advertising or location-based targeting
- Expo's privacy policy applies: https://expo.dev/privacy
5.4 Email Delivery (Resend)
- Your email address is shared for delivery
- Email content is transmitted through Resend's servers
- Resend's privacy policy applies: https://resend.com/legal/privacy-policy
5.5 Relationship Mapping (Neo4j)
- Connection data is stored in graph database format
- Relationship types and paths are calculated
- Used for network reach and connection path features
- Neo4j is deployed as a self-hosted database instance; your data is not shared with Neo4j, Inc.
5.6 Error Monitoring (Sentry)
- Crash reports and error logs are transmitted
- Device information may be included
- Sentry's privacy policy applies: https://sentry.io/privacy/
5.7 Voice Calls (WebRTC)
- STUN servers: Google's public STUN servers
- TURN servers: OpenRelay (metered.ca)
- Only call metadata is stored (not audio content)
6. Data Storage and Security
6.1 Data Storage Location
Your data is primarily stored on servers located in the United States, managed by our service providers (primarily Supabase).
6.2 Security Measures
We implement appropriate technical and organizational security measures, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Secure authentication with JWT tokens
- Row-level security policies on database tables
- Regular security assessments
- Access controls and authentication requirements
- Session timeout after inactivity
6.3 Security Limitations
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
6.4 Account Security
You are responsible for:
- Maintaining the confidentiality of your login credentials
- Using strong, unique passwords
- Logging out from shared devices
- Reporting unauthorized access immediately
6.5 Breach Notification
In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
7. Data Retention
7.1 Retention Periods
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + as required by law |
| Profile information | Duration of account |
| Messages | Indefinitely (unless conversation archived) |
| Call metadata | Indefinitely |
| Payment records | 7 years (legal requirement) |
| Analytics data | 3 years |
| Error logs | 90 days |
| Connection data | Duration of account + retained for network integrity |
7.2 Deactivated Accounts
When you deactivate your account:
- Your profile is hidden from other users
- Your data is retained for potential reactivation
- Connection mapping data may be retained to maintain network integrity for other users
- You may reactivate your account at any time
7.3 Data Deletion Requests
You may request deletion of your account and associated personal data at any time by contacting support@linkedbysix.com from the email address or phone number associated with your account. For security purposes, we may request verification to confirm account ownership prior to processing.
Data Deleted Upon Account Deletion:
- User account and profile information
- Contact information (e.g., phone number and/or email address)
- User-generated profile content
- Unique social graph relationships and referral connections associated with the deleted account
- Authentication credentials and session tokens
Data That May Be Retained:
- Transaction and payment records required for legal, accounting, tax, fraud prevention, or regulatory compliance purposes
- Security logs and audit records necessary to protect platform integrity
- Aggregated or anonymized analytics that do not identify the individual user
Account deletion requests are processed within 30 days of successful identity verification. Upon account deletion, we will initiate deletion or anonymization of user data within our systems and, where applicable, request deletion or minimization of personal data held by third-party service providers, subject to legal and contractual obligations.
For our full Account & Data Deletion Policy, visit: linkedbysix.com/legal/account-deletion
8. Your Privacy Rights and Choices
8.1 Access and Portability
You may request access to your personal information by contacting us. We will provide your data in a commonly used format.
8.2 Correction
You may update or correct your personal information through your account settings or by contacting us.
8.3 Deletion
You may request permanent deletion of your account and personal data by contacting support@linkedbysix.com from the email address or phone number associated with your account. We will verify your identity before processing. Requests are processed within 30 days of successful verification. See Section 7.3 for details on what data is deleted versus retained. For our full policy, visit: linkedbysix.com/legal/account-deletion
8.4 Marketing Opt-Out
You may opt out of marketing communications by:
- Clicking the "unsubscribe" link in marketing emails
- Adjusting your notification preferences in settings
- Contacting us at legal@linkedbysix.com
You cannot opt out of transactional communications while maintaining an active account.
8.5 Push Notification Preferences
You may customize push notification preferences in the Platform settings, including enabling/disabling specific notification types, setting quiet hours, and adjusting sound preferences. You can also disable all push notifications via your device's system settings.
8.6 Contact Sync Preferences
You may choose one-time or continuous contact sync, disable contact synchronization, or revoke contact access through device settings.
8.7 Location Preferences
You may deny location permission when requested, revoke location access through device settings, or use the Platform without location features.
8.8 Do Not Track
We do not currently respond to "Do Not Track" browser signals. However, you may use browser settings to limit tracking.
9. Contact Synchronization
9.1 Permission Request
The Platform may request permission to access your device's contact list. This permission is optional.
9.2 Information Accessed
When you grant contact access, we collect:
- Contact names
- Phone numbers (normalized to U.S. 10-digit format)
We do NOT access: email addresses from contacts, physical addresses, birthdays or other personal details, photos, or notes.
9.3 Sync Options
- One-Time Sync: Contacts are synced once when you initiate it
- Continuous Sync: Contacts are automatically synced periodically (minimum every 15 minutes on iOS)
9.4 How Contact Data Is Used
Imported contacts are used to identify existing Platform users, suggest potential connections, build your network visualization, calculate network reach, and facilitate introductions.
9.5 Contact Data Storage
- Contact information is stored securely on our servers
- Phone numbers are normalized and may be used for matching
- Contact names are associated with your account
- You may block specific contacts from your connections
9.6 Revoking Access
You may revoke contact access at any time through device settings or Platform settings. Previously synced contacts will remain in your connections unless manually removed.
10. Location Information
10.1 When We Collect Location
We request location access only when you use location-based features, such as "Near me" business search and location-based recommendations.
10.2 Information Collected
When you grant location permission: device GPS coordinates (latitude/longitude), approximate location (city, state). Location is used for the specific feature request.
10.3 How Location Is Used
Location information is used to filter search results by proximity, match businesses by service area, and provide relevant local results.
10.4 Location Storage
We do NOT continuously track your location. Location is not stored as a persistent history. Location data is used transiently for search functionality.
10.5 Revoking Location Access
You may revoke location access through your device settings. The Platform will continue to function without location features.
11. Communications and Messaging
11.1 Message Storage
All messages sent through the Platform are stored on our servers, associated with your account, and retained indefinitely unless the conversation is archived.
11.2 Message Visibility
Messages are visible to the sender and recipient(s), our personnel when investigating reported violations, and law enforcement when required by law.
11.3 Message Content
Messages may include text content, emoji, file attachments, and links to external content.
11.4 Typing Indicators
We transmit real-time typing indicators between conversation participants. This data is not stored.
11.5 Read Receipts
We track and display when messages have been read. This information is stored with message metadata.
11.6 Email Communications
We send emails for account verification and security, subscription and payment confirmations, weekly digests and reminders (marketing - opt-out available), claim code delivery, and platform updates.
11.7 SMS Communications
We send SMS messages for one-time password (OTP) verification and critical security alerts. Standard carrier messaging rates may apply.
12. Voice Calls
12.1 Voice Call Technology
The Platform enables voice calls using WebRTC (Web Real-Time Communication) technology. Calls are peer-to-peer when network conditions allow.
12.2 What We Store
We store call metadata only: caller and recipient identifiers, call start and end times, call duration, and call status (completed, declined, missed, timed out).
12.3 What We Do NOT Store
We do NOT record or store voice call audio content. Your conversations are not monitored or retained.
12.4 Third-Party Servers
Voice calls may route through third-party STUN/TURN servers (Google STUN servers, OpenRelay TURN servers). These servers facilitate connection establishment but do not record call content. STUN/TURN servers may process your IP address during connection establishment. Connection metadata (IP address, port) is used transiently and is not stored by relay servers. Audio streams are encrypted via SRTP (WebRTC standard encryption).
12.5 Camera and Microphone Access
Camera Access
- The camera is used for uploading profile photos, business profile images, and recording journey videos
- Photos and videos are stored on our servers (Supabase Storage)
- Camera access is requested only when you initiate a photo or video action
- You can revoke camera permission at any time via your device settings
Microphone Access
- The microphone is used solely for in-app voice calls via WebRTC
- Audio is transmitted peer-to-peer and is NOT recorded, stored, or monitored by us
- Microphone access is requested only when you initiate or answer a call
- You can revoke microphone permission at any time via your device settings
13. Cookies and Tracking Technologies
13.1 Types of Technologies Used
Cookies — Small text files stored on your device that help us maintain your login session, remember your preferences, and analyze usage patterns.
Local Storage — Browser-based storage used for caching data for performance, storing user preferences, and maintaining session state.
Analytics Tools — We use analytics to understand Platform usage: page views and feature usage, error tracking (Sentry), and performance monitoring.
13.2 Cookie Types
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, security, basic functionality | Session |
| Functional | Preferences, settings | Persistent |
| Analytics | Usage statistics, performance monitoring | Persistent |
13.3 Managing Cookies
You may control cookies through browser settings (blocking or deleting cookies) and device settings (for mobile apps). Note that disabling cookies may affect Platform functionality.
13.4 Third-Party Tracking
Our service providers may use their own tracking technologies. See Section 5 for third-party privacy policies.
14. Artificial Intelligence and Automated Processing
14.1 AI Features
The Platform uses artificial intelligence for:
- Conversational Search: Natural language processing to understand search queries
- Blog Generation: AI-assisted content creation for our blog
- Profile Enhancement: Suggestions for improving business profiles
- Semantic Search: Vector embeddings for improved search relevance
14.2 AI Data Usage
Your interactions with AI features may be used to improve AI model performance, enhance search accuracy, and develop new AI features.
14.3 Automated Decision-Making
We use automated processing for content moderation flag prioritization, search result ranking, connection suggestions, and network reach calculations. These automated processes do not make significant decisions about your account without human review.
14.4 AI Limitations
AI-generated content and suggestions may contain errors. Users should review AI outputs before relying on them.
15. Children's Privacy
15.1 Age Restriction
The Platform is intended for users who are at least 18 years of age. We do not knowingly collect personal information from children under 18.
15.2 COPPA Compliance
We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect information from children under 13.
15.3 Parental Notice
If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
15.4 Reporting
If you believe we have collected information from a child under 18, please contact us immediately at legal@linkedbysix.com.
16. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
16.1 Right to Know
You have the right to request information about categories of personal information collected, sources, business purposes for collection, categories of third parties with whom we share data, and specific pieces of personal information collected.
16.2 Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions.
16.3 Right to Correct
You have the right to request correction of inaccurate personal information.
16.4 Right to Opt-Out of Sale/Sharing
We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.
16.5 Right to Limit Use of Sensitive Information
You have the right to limit our use of sensitive personal information to purposes necessary to provide services.
16.6 Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
16.7 Categories of Information Collected
In the past 12 months, we have collected:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email, phone, IP address | Yes |
| Customer Records | Billing information, subscription data | Yes |
| Commercial Information | Transaction history, subscription tier | Yes |
| Internet Activity | Usage data, search history, interactions | Yes |
| Geolocation | Approximate location when using search | Yes |
| Professional Information | Business name, industry, role | Yes |
| Inferences | Network reach, connection recommendations | Yes |
16.8 Exercising Your Rights
To exercise your California privacy rights, email legal@linkedbysix.com with "California Privacy Request" in the subject line and provide sufficient information to verify your identity. We will respond to verified requests within 45 days.
16.9 Authorized Agents
You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority.
16.10 "Shine the Light" Law
California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing purposes.
17. Other State Privacy Rights
17.1 Virginia (VCDPA)
Virginia residents have rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising and sale of personal data.
17.2 Colorado (CPA)
Colorado residents have rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising, sale, and profiling.
17.3 Connecticut (CTDPA)
Connecticut residents have rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising, sale, and profiling.
17.4 Utah (UCPA)
Utah residents have rights to access, delete, and opt out of targeted advertising and sale of personal data.
17.5 Exercising State Privacy Rights
To exercise rights under state privacy laws, contact us at legal@linkedbysix.com with your state of residence, the specific right you wish to exercise, and information to verify your identity.
17.6 Appeals
If we deny your request, you may appeal by contacting us within 30 days. We will respond to appeals within the timeframe required by applicable law.
18. International Users
18.1 Data Transfer
The Platform is operated in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States.
18.2 Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data based on:
- Contract: Processing necessary to provide the Platform services
- Legitimate Interests: Analytics, security, fraud prevention
- Consent: Marketing communications, contact synchronization
- Legal Obligation: Compliance with applicable laws
18.3 International Rights
Users in certain jurisdictions may have additional rights, including right to access, rectification, erasure, restrict processing, data portability, object, and rights related to automated decision-making.
18.4 Data Protection Officer
For privacy inquiries from international users, contact legal@linkedbysix.com.
18.5 Complaints
EEA residents may lodge complaints with their local data protection authority.
19. Changes to This Privacy Policy
19.1 Right to Update
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
19.2 Notification
We will notify you of material changes by posting the updated Privacy Policy on the Platform, updating the "Last Updated" date, sending an email notification for significant changes, and displaying an in-app notice.
19.3 Review
We encourage you to periodically review this Privacy Policy to stay informed about our data practices.
19.4 Continued Use
Your continued use of the Platform after changes to this Privacy Policy constitutes acceptance of the updated terms.
20. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Process Intelligence Partner LLC
d/b/a Linked By Six
Email: legal@linkedbysix.com
Support Email: support@linkedbysix.com
Website: https://linkedbysix.com
Response Time: We aim to respond to privacy inquiries within 30 days.
Summary of Key Points
| Topic | Summary |
|---|---|
| Data Collection | We collect account info, usage data, device info, and optional contacts/location |
| Data Use | Providing services, improving Platform, personalization, communications, security |
| Data Sharing | With other users (profiles, messages), service providers, and as required by law |
| Data Storage | United States, primarily via Supabase; encrypted and secured |
| Voice Calls | Metadata only - we do NOT record call audio |
| Messages | Stored on our servers; reviewed only for safety/compliance |
| Contact Sync | Optional; names and phone numbers only; you control sync settings |
| Location | Optional; used only for search; not continuously tracked |
| Cookies | Used for sessions, preferences, and analytics |
| Your Rights | Access, correct, delete, opt-out of marketing |
| Age Requirement | 18+ only; no children's data collected |
| California Rights | CCPA rights apply; we do not sell personal information |