Privacy Policy

Introduction

Glauria is a product of Tari Software, entreprise individuelle, registered in France under SIREN 892 862 301 ("we", "us"). Glauria is a LinkedIn prospecting agent in two parts: a web dashboard at app.glauria.com, and a client that runs on your own computer and uses your own LinkedIn session. This policy covers the data of Glauria users, of visitors to this website, and of the people your agent contacts on your behalf.

Information we collect

We collect the following data.

• Account data: your name, email address, and profile picture. If you sign in with Google, LinkedIn, or Microsoft, we receive them from that provider. We also keep your sign-in sessions, with the IP address and browser they came from.
• Access request: while Glauria is in beta, your sector, job title, company, and why you want to automate your prospecting, from the form you fill in to get access.
• Campaign data: the campaigns, targeting, product description, and playbooks you set up. If you ask Glauria to read your website to set up a campaign, the content of that page.
• Device data: for each computer you connect, its name, operating system, and Glauria version, and the LinkedIn account connected on it.
• Prospect data: the public LinkedIn profile, company, and activity information of the people your agent finds, the messages you exchange with them on LinkedIn, and the notes and summaries your agent writes about them.
• Website data: the pages you visit on this website and how you use them, collected with PostHog analytics.

How we use it

We use account data to sign you in and to support you. We use your access request to decide on your access and to contact you about it. We use campaign, device, and prospect data to run your agent: find leads, qualify them, draft and send messages, and follow up. We use website data to understand how visitors use this site. We do not sell your data or your LinkedIn activity.

Legal bases

Each use rests on one of these legal bases.

• Contract: account, campaign, and device data, to provide the service you signed up for.
• Steps before a contract: your access request, to decide on your access.
• Legitimate interest: prospect data, for business-to-business prospecting; security; and website analytics.

AI and automated scoring

Your agent sends OpenAI the data it needs for each step: a lead's profile to qualify them, a conversation to draft a reply, your campaign description to write in your voice. Under OpenAI's API terms, this data is not used to train OpenAI's models. Your agent also scores leads with a model that learns from your own campaign's results. That model serves only your campaign. We do not use your data to train models for anyone else.

Where your data is stored

Your LinkedIn session, its cookies, and the browser Glauria drives stay on your computer. We never receive your LinkedIn password. What the client reads on LinkedIn for your agent is sent to our servers over encrypted connections. The result, your leads, companies, conversations, and your agent's notes, is stored in our database in Paris, France. That is what your dashboard shows and what your agent decides from.

Data about the people you contact

To find, qualify, and reach the right people, your agent processes public LinkedIn profile information, activity signals, and your conversations with the people you choose to contact. We rely on legitimate interest as the lawful basis for this business-to-business processing. If someone you contacted wants their information removed from our systems, they, or you on their behalf, can reach us at hello@glauria.com.

Service providers

These providers process data for us. Each receives only what its task needs.

• Amazon Web Services: our database and backend servers, in Paris, France.
• Vercel: hosting for the Glauria dashboard, app.glauria.com.
• Cloudflare: hosting for this website and for Glauria client downloads.
• OpenAI: lead qualification, message drafting, and summaries, in the United States.
• Resend: delivery of our emails, in the United States.
• PostHog: website analytics, in the European Union.

Services we do not control

Glauria acts on LinkedIn on your behalf, subject to LinkedIn's own terms and privacy policy. If you sign in with Google, LinkedIn, or Microsoft, that provider's own privacy policy applies to the sign-in.

Data controller

The data controller for the account and billing information described in this policy is Tari Software, entreprise individuelle, SIREN 892 862 301, SIRET 892 862 301 00033, VAT FR09 892 862 301. Our postal address is available on request by email. For questions about how your data is controlled or processed, contact us at hello@glauria.com.

International transfers

OpenAI, Resend, and Vercel are United States companies, so data they process may leave the European Union. We rely on the EU-US Data Privacy Framework where the provider is certified under it, and on standard contractual clauses otherwise.

Cookies

The dashboard uses cookies only to keep you signed in. This website uses PostHog analytics, which stores an identifier in your browser to count visits and understand how the site is used. We do not use advertising cookies.

Retention

We keep each kind of data only as long as it serves its purpose.

• Account data and your access request: while your account is open. Deleting your account deletes them.
• Campaign and prospect data: while your account is open. Ask us at hello@glauria.com and we delete it within 30 days.
• The raw pages your agent reads on LinkedIn: deleted 7 days after the action, once the facts that matter are extracted. Records of your agent's actions: deleted after 90 days.
• Your LinkedIn session and browser data: on your computer, under your control.
• Billing data, once paid plans exist: as long as tax and accounting law requires.

Your rights (GDPR & similar)

Depending on where you live, you have the following rights over your personal data.

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct or update inaccurate or incomplete data.
• Erasure: ask us to delete your personal data where we have no overriding legal reason to keep it.
• Restriction: ask us to limit how we process your data while a request is under review.
• Portability: request your data in a structured, commonly used format.
• Object: object to processing based on legitimate interest, including the prospect data described above.

Automated decision-making

Your agent uses automated scoring to help qualify leads and draft messages. This does not produce legal or similarly significant effects on the people it scores, and you control your agent's autonomy at every step, from reviewing every message to letting it run on its own. Access requests are decided by a person, not by an algorithm. To exercise any of the rights above, contact us at hello@glauria.com. We aim to respond within 30 days. If you are not satisfied with our response, you can lodge a complaint with your local data protection authority.

Data breach notification

If a breach affecting your personal data occurs, we will notify affected users and relevant authorities as required by applicable law, without undue delay.

Children's privacy

Glauria is not directed at, and is not intended for use by, anyone under the age of 18.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or through a notice on this site before they take effect.

Contact

Questions about this policy can be sent to hello@glauria.com.