Privacy Policy

Effective Date: February 17, 2026 · Last Updated: March 2026

This Privacy Policy describes the data protection practices of mylnk ("mylnk," "we," "us," or "our"). This Privacy Policy applies to information that we collect and use about you when you access or use the mylnk website, mobile application, or other online services that link to or refer to this Privacy Policy (collectively, the "Services").

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you register for an account, use the Services, or communicate with us. This includes:

Category	Examples
Account Information	Name, email address, username, profile image, institution/school name(s), phone number (optional), pronouns (optional), role (Student or Admin), timezone
Academic & Career Information	Major(s), minor(s), graduation season and year, target industries, target roles, top companies of interest, career goals (internship, full-time, etc.), extracurricular activities
Contacts & Networking Data	Contact names, email addresses, organizations, roles, notes, tags, tasks, social media profiles, pipeline stages
Calendar & Scheduling Data	Events, deadlines, meeting details, reminders
Content You Create	Chat messages, direct messages, AI conversation history, prep session notes, mock interview question scripts, documents you upload
Moderation & Safety Data	Block list (users you have blocked), user reports you submit (reporter, reported user, reason, optional details), and related metadata used for chat moderation and account enforcement
Uploaded Files	Resumes, profile images, shared documents
Video Recordings	Mock interview video responses that you record through the Services
Payment Information	Billing details collected by our third-party payment processors on our behalf

1.2 Information Collected from Third-Party Integrations

When you connect third-party services to your mylnk account, we collect information from those services as described below:

• Google Sign-In: When you authenticate using Google Sign-In, we receive your name, email address, and profile image from your Google account.
• Gmail Integration: If you connect your Gmail account, we access email metadata (subject lines, sender/recipient addresses, dates) to help you manage your networking contacts and generate analytics. We do not read the full content/body of your emails.
• Google Calendar: If you connect your Google Calendar, we access your calendar events to sync scheduling data with your mylnk calendar.
• Google Contacts (People API): If you grant permission, we import contact information from your Google account to populate your mylnk contacts.

mylnk's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace API data to develop, improve, or train generalized AI and/or ML models.

1.3 Information Collected Automatically

When you use the Services, we automatically collect certain technical information, including:

• IP address, browser type and version, operating system
• Device identifiers and device type
• Pages viewed, features used, and the date/time of your visits
• Referring and exit URLs
• General location information derived from your IP address
• Error logs and performance data

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Operate the Services: To create and manage your account, deliver CRM features, enable contact management, calendar synchronization, messaging, mock interview preparation, and other core functionality.
• AI-Powered Features: To generate personalized AI chat responses, news debriefs, contact summaries, email/message drafts, interview preparation content, and other AI-assisted features using the information you provide and your usage patterns.
• Personalized News & Insights: To curate news articles and generate AI debriefs based on your target industries, companies of interest, and career goals.
• Analytics & Reporting: To generate engagement analytics, networking activity reports, goal tracking, and other insights for your dashboard.
• Communications: To send you service-related notices, account updates, security alerts, and support messages.
• Improvement & Development: To understand usage patterns, diagnose technical issues, and improve the Services, including developing new features.
• Security & Fraud Prevention: To detect, investigate, and prevent security incidents, fraudulent activity, and violations of our terms.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Performance of a Contract: Processing necessary to provide you with the Services pursuant to our Terms of Service.
• Consent: Where you have given us explicit consent to process your information for a specific purpose (for example, connecting third-party integrations).
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Services, ensuring security, and communicating with you, provided these interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

4. How We Share and Disclose Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, including cloud hosting (Google Firebase), AI processing (Google Gemini), news data aggregation, payment processing, and analytics. These providers are contractually bound to use your information only to perform services for us and in accordance with this Privacy Policy.
• Institutional Administrators: If you are part of an institution on mylnk, certain aggregated or individual usage information may be visible to the institution's designated administrators, as described in your institutional agreement.
• Other Users: Information you share through messaging, shared documents, chat requests, or mock interview recordings that you choose to share will be visible to the recipients you designate.
• Legal Requirements: We may disclose your information if required to do so by law, or in good faith belief that such action is necessary to: (a) comply with legal processes; (b) enforce our Terms of Service; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of mylnk, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
• Aggregated/De-Identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, or other purposes.

5. Third-Party Integrations

The Services allow you to connect and integrate with third-party platforms, including Google (Gmail, Calendar, Contacts) and potentially LinkedIn. When you enable these integrations:

• We store OAuth tokens securely to maintain your connection. These tokens may be revoked by you at any time.
• The information we receive is governed by this Privacy Policy.
• Your use of third-party services is governed by those services' own terms and privacy policies. We encourage you to review them.
• We do not control, and are not responsible for, the privacy practices of third-party services.

6. Artificial Intelligence and Automated Processing

mylnk uses artificial intelligence (powered by Google Gemini) to provide features such as:

• Conversational AI chat for career-related queries
• Automated drafting of emails, texts, and LinkedIn messages
• Pre-game briefs and post-call debriefs
• Personalized news debriefs and contact summaries
• Interview question generation from job descriptions
• Pipeline classification of emails and calendar events

When you use AI-powered features, the content you provide (including your prompts, contact details, career information, and conversation history) may be sent to our AI service provider for processing. We take the following precautions:

• AI processing is performed to provide the specific feature you are using and is not used to train general-purpose AI models.
• We minimize the personal data shared with AI processors to what is necessary for the requested feature.
• AI-generated outputs are provided for informational and preparatory purposes and should not be relied upon as professional, legal, or career advice.

7. Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity and to distinguish you from other users of the Services. This helps us provide you with a good experience and allows us to improve the Services.

• Essential Cookies: Required for the Services to function, including authentication and security.
• Analytics Cookies: Help us understand how users interact with the Services so we can improve them.
• Preference Cookies: Remember your settings and preferences.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Services.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Services. We may also retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements
• Protect against fraudulent or illegal activity

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required by law to retain it or where retention is necessary for the purposes stated above. Backup copies may take additional time to be fully purged.

Video recordings from mock interviews are retained for as long as your account is active. You may delete individual recordings at any time through the Services.

9. How We Protect Your Information

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication via Google Sign-In with OAuth 2.0
• Firebase Security Rules to restrict data access
• Regular security assessments and monitoring
• API key protection through environment variables and backend proxies
• Secure storage of OAuth tokens and sensitive credentials

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Restriction: Request that we restrict processing of your personal information.
• Objection: Object to processing of your personal information based on our legitimate interests.
• Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.

To exercise any of these rights, please contact us at support@milnk.app. We will respond to your request within 30 days (or as required by applicable law).

Account Controls

• You can review and update your profile information through your account settings.
• You can disconnect third-party integrations (Gmail, Calendar, Contacts) at any time.
• You can adjust your privacy settings to control who can send you chat requests (e.g., restrict to same institution).
• You can block or report other users from chat or profile (⋯ menu). Blocked users cannot interact with you in chat; reports are reviewed and may result in enforcement (including account deletion after repeated reports).
• You can request deletion of your account and associated data at any time: (1) In the app, go to Profile and tap "Delete my account" to open our deletion request page, or (2) visit Request Account & Data Deletion, or (3) email us at support@milnk.app with "Account deletion request" and your account email. We will process your request and delete or anonymize your personal information as described on the deletion page.

Communication Preferences

You may opt out of non-essential communications by adjusting your notification settings or by following the unsubscribe instructions in any marketing email. You cannot opt out of transactional or service-related communications necessary for the operation of your account.

11. Children's Privacy

The Services are designed for college and university students and are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe a child under 16 has provided us with personal information, please contact us at support@milnk.app.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information:

Categories of Personal Information Collected

Category	Collected	Examples
Identifiers	Yes	Name, email address, username, IP address
Personal Information (Cal. Civ. Code § 1798.80(e))	Yes	Name, email address, education, employment information
Education Information	Yes	Institution, major, minor, extracurricular activities
Internet or Network Activity	Yes	Browsing history, search history, interaction with Services
Geolocation Data	Yes	General location derived from IP address
Professional Information	Yes	Career goals, target industries, companies of interest
Audio/Visual Information	Yes	Mock interview video recordings, profile images
Inferences	Yes	AI-generated contact summaries, engagement scores

Your California Rights

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, contact us at support@milnk.app.

13. International Users

The Services are hosted in the United States using Google Firebase infrastructure. If you access the Services from outside the United States, your information will be transferred to and processed in the United States. By using the Services, you consent to this transfer. We will take appropriate measures to ensure your information is protected in accordance with this Privacy Policy and applicable data protection laws, including the use of Standard Contractual Clauses where required.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation. To exercise those rights or request a Data Processing Agreement, please contact us at support@milnk.app.

14. Educational Records (FERPA)

mylnk is designed for student use, and certain information within the Services may constitute "education records" under the Family Educational Rights and Privacy Act (FERPA). Where mylnk operates as a school official with a legitimate educational interest under an institutional agreement, we will handle education records in compliance with FERPA requirements. We will not disclose FERPA-protected information to unauthorized third parties without proper consent or legal authorization.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on the Services with a revised "Effective Date" and, where appropriate, by sending you a notification through the Services or via email. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us