Legal
Privacy Policy
Introd is built on relationships, and relationships run on trust. This policy explains, in detail, what we collect, why we collect it, the legal bases we rely on, how long we hold it, who else touches it, and the control you keep over your data at every step.
Last updated September 8, 2026
- We never sell
- No sale or sharing of personal information, ever
- Your graph is yours
- Signals are computed for your account only
- Minimum scopes
- Narrowest permission each integration allows
- Delete on request
- Production deletion within 30 days
01
Scope and roles
This policy covers getintrod.ai, the Introd application and everything connected to them. It applies to visitors to our site, individual users and members of team workspaces.
Where you use Introd as an individual, we are the controller of your personal data. Where your employer provides Introd to you as part of a workspace, your employer is the controller of workspace content and we act as a processor on their instructions; their internal policies also apply to how they use Introd.
Introd, Austin Centre, 701 Brazos Street, Austin, TX 78701, United States is the entity responsible for the processing described here.
02
Information we collect
We collect only what we need to help you find people and paths. Data reaches us in three ways: you give it to us, you authorise a connected source to share it, or it is generated as you use the product.
Information you give us
- Account details: name, email address, password credential, company, role and time zone.
- Billing details: billing contact, address and payment metadata handled by our payment processor. We do not store full card numbers.
- Content you create: introduction requests, notes, collections, missions and support messages.
Information from connected sources
- Contacts: names, employers, roles and connection edges from professional networks and address books.
- Calendar: participants and timing of meetings, used to measure interaction recency and cadence.
- Email and messaging: participants, timestamps and, where you enable it, content used to extract relationship signals.
- Public professional profiles you or your teammates link to a person record.
Information generated automatically
- Product usage: searches, paths viewed, introductions requested and features used.
- Derived signals: relationship strength, warmth and recency scores computed from the sources above.
- Technical data: device and browser, IP address and approximate location derived from it, and server log information.
03
Why we use your information
We use each category of data for a defined purpose. Where the law requires a legal basis, the one we rely on is set out below.
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide the service: search, paths, introductions | Account data, connected-source data, derived signals | Performance of a contract |
| Compute relationship strength and warmth | Interaction metadata and, where enabled, content | Performance of a contract; consent where required for content |
| Billing and account administration | Account and billing data | Performance of a contract; legal obligation |
| Security, abuse prevention and debugging | Log and technical data | Legitimate interests in keeping the service safe |
| Product improvement and reliability | Pseudonymous usage events | Legitimate interests in improving the product |
| Marketing email about Introd | Name and email address | Consent, or legitimate interests for existing customers, with opt-out |
We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not use your private relationship data to target ads at you or anyone else.
04
Connected accounts and permission scopes
When you connect a source, we request the narrowest access the provider offers for the feature you enabled. Nothing syncs until you authorise it, and connections are per-user — connecting your mailbox does not connect anyone else's.
You can disconnect a source at any time in settings. Syncing stops immediately and the data derived from that source is queued for deletion.
- Message content is used to compute signals for you. It is never displayed to other users and never shared with other customers.
- Where a provider offers a metadata-only scope, we prefer it over full content access.
- We honour the terms of each platform we integrate with and do not scrape beyond them.
- Data about a third party reaches us only because you already have a relationship with them recorded in a source you control.
05
People who are not Introd users
Introd necessarily holds information about people in your network who have not signed up. We limit this to professional context — name, employer, role and the fact that an interaction occurred — and we treat it as restricted data.
If you are not an Introd user and want to know what we hold about you or ask us to remove it, email privacy@getintrod.ai. Where the data was supplied by a customer acting as controller, we will pass your request to them and support them in responding.
07
International transfers
Introd is operated from the United States and customer data is stored in US regions. If you access Introd from the European Economic Area, the United Kingdom or Switzerland, your personal data is transferred to the United States.
For those transfers we rely on the European Commission's standard contractual clauses, together with the UK international data transfer addendum where relevant, and we apply supplementary measures including encryption in transit and at rest, access logging and a policy of challenging overbroad government requests.
08
Retention
We keep information for as long as it serves the purpose it was collected for, and no longer. Retention is set per data type rather than as a single blanket period.
| Data | Retention | On deletion request |
|---|---|---|
| Account profile | Life of account | Deleted within 30 days |
| Relationship graph and derived signals | Life of account | Deleted within 30 days |
| Connected-source sync data | Rolling window needed for freshness | Deleted immediately on disconnect |
| Introduction history | Life of account | Deleted within 30 days |
| Billing and tax records | As required by law, typically 7 years | Retained where legally required |
| Application and access logs | Up to 12 months | Anonymised or expired on schedule |
| Encrypted backups | 35 days rolling | Expire on the standard cycle |
09
Your rights and controls
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time without affecting prior processing.
Most of these you can exercise yourself in settings; for anything else, email privacy@getintrod.ai. We respond within 30 days and will not charge you or degrade your service for making a request. You also have the right to complain to your local supervisory authority.
- Disconnect any source, at any time, in one click.
- Export your data in a portable format.
- Delete your account and the relationship data associated with it.
- Control what teammates can see about your relationships.
- Opt out of marketing email with one click; we will still send essential service notices.
- Turn off model-derived enrichment for your account or workspace.
US state privacy rights
Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have the right to know, delete, correct and obtain a copy of their personal information, and to opt out of sale, sharing and targeted advertising. Introd does not sell or share personal information and does not conduct targeted advertising, so there is nothing to opt out of — but the rights to know, correct and delete are available on request. We do not discriminate against anyone who exercises them.
11
Security
We encrypt data in transit and at rest, enforce least-privilege access with multi-factor authentication, isolate tenants at the data layer, log administrative access and maintain an incident response plan with a 72-hour breach notification commitment.
Full detail — including infrastructure, subprocessors, testing programme, recovery objectives and responsible disclosure — is documented in our Trust Center at /security.
12
Automated decision-making
Introd scores relationships to rank search results and suggest paths. These scores are advisory and are not used to make decisions with legal or similarly significant effects about you. You can always see the interactions behind a score, and no message is ever sent without an explicit human action.
13
Children
Introd is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal information, email privacy@getintrod.ai and we will delete it.
14
Changes to this policy
We will post updates on this page with a revised date at the top. For material changes we will notify you by email or in the product before they take effect, and where the law requires it we will ask for your consent.
Questions?
Write to us at legal@getintrod.ai or Introd, Austin Centre, 701 Brazos Street, Austin, TX 78701, United States.