Privacy Policy
This policy explains what Sell By Chat Copilot (“Sell By Chat”, “we”) collects through its Chrome extension and service, how it is used and the choices you have.
Information we collect
Google account. When you sign in with Google we receive your name, email address, profile picture and a Google account identifier (scopes openid, email, profile). We use these to create and identify your account.
Google Calendar. If you connect Google Calendar we request access to check your free/busy times (calendar.freebusy), read your calendar time zone and working settings (calendar.settings.readonly) and create, update or cancel the call invitations you ask us to book (calendar.events). We do not read the contents of your other events. Google refresh tokens are encrypted in storage.
Conversations you choose to work on. When you open a LinkedIn conversation in the extension or paste one in, and request a draft, the conversation text is sent to our AI provider to generate reply suggestions. When you start a conversation from a LinkedIn profile, the name, headline, current role and About text shown on that profile are sent the same way to suggest an opener. We store a summary, extracted facts, the pipeline stage, booking details and activity metadata. We do not store complete conversation histories by default.
Optional content you save. Voice examples, sales reference notes and playbook settings are stored encrypted only when you save them, and relevant excerpts may be included in later draft requests. Files you import (PDF or image) are sent to our AI provider for extraction after you confirm; we do not keep the original file.
Optional CRM connections. If you connect HubSpot, Notion or Google Sheets and explicitly sync a booked conversation, that destination receives the contact and booking details, a summary and the profile link or call outcome. Connector credentials are encrypted in storage.
Operational data. We keep request logs, rate-limit counters and error codes needed to run and secure the service. These do not contain conversation text.
How we use information
We use information only to provide the features you request: signing you in, drafting replies, checking availability, booking and rescheduling calls, syncing to tools you connect, enforcing usage limits and keeping the service secure. We do not sell personal information and do not use it for advertising.
Google API Services User Data Policy
Sell By Chat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features described above, is not transferred to others except as needed to provide those features, comply with law or as part of a merger or acquisition, is not used for advertising, and is not used to develop, improve or train generalised AI or machine-learning models. Humans do not read your Google data unless you give permission, it is needed for security or legal reasons, or it has been aggregated and anonymised.
Service providers
We share data only with providers that process it on our behalf: Railway (hosting and database), Google (sign-in, Calendar and, when configured, Gemini drafting), Anthropic (Claude drafting and file extraction) and, only if you connect them, HubSpot, Notion or Google Sheets. Each provider handles data under its own terms. AI providers receive conversation text only when you request a draft or an import.
Your control
The extension never presses LinkedIn Send; you review and send every message yourself. It only reads conversations you open, inbox rows you explicitly ask it to read, and LinkedIn profiles you open to start a conversation. If you join a workspace, its owners and managers can see your account identity and aggregate results.
Retention and deletion
We keep your data while your account is active. You can delete saved notes and voice examples in Settings at any time. Deleting your account in Settings removes your records from our database and revokes our Google access. Calendar events already created and records already synced to a connected CRM remain in those services and can be deleted there. You can also revoke access at any time from your Google Account permissions page, or email heartachehues@gmail.com to request access, correction or deletion.
Security
Data is sent over HTTPS. OAuth tokens, connector credentials, voice examples and notes are encrypted at rest.
Children
Sell By Chat is a business tool and is not intended for anyone under 16.
Changes
We will post any changes on this page and update the effective date. Material changes will be shown in the extension.
Contact
Questions or requests: heartachehues@gmail.com.