Application: Aimaly AI Revenue Maximizer
Controller: Oleksandr Prosianyk, Ukraine
Contact email: info@aimaly.io
Last updated: 03 December 2025
Introduction
This Privacy Policy explains how Aimaly AI Revenue Maximizer (“we”, “us”, “our”) collects, uses, stores and protects personal data obtained through LinkedIn and our application, as well as the choices and rights available to data subjects.
Aimaly AI Revenue Maximizer is a tool that helps identify relevant leads on LinkedIn and generate personalized first-contact messages for outreach.
Data controller
The data controller responsible for processing your personal data is:
Oleksandr Prosianyk
Ukraine
Email: info@aimaly.io
If you have any questions about this Privacy Policy or our processing of personal data, you can contact us by email.
What data we collect
When you authorize our application to access LinkedIn data, or when we process publicly available LinkedIn profile information for lead generation purposes, we may process the following categories of personal data:
Identification data: full name as shown in LinkedIn profile.
Contact data: email address (if accessible via LinkedIn or provided by you).
Professional profile data: headline, job title, company, industry and similar professional information available in the LinkedIn profile.
Technical data (limited): internal identifiers assigned by our system, timestamps of when a lead was created or updated, and basic metadata about interactions for outreach tracking.
We do not intentionally collect sensitive personal data (such as health information, political opinions, religious beliefs, etc.) and we request that such data is not provided to us.
How we use personal data
We use personal data strictly for business-to-business lead generation and outreach purposes, including:
Searching for and identifying potentially relevant leads on LinkedIn.
Filtering and segmenting leads according to defined criteria.
Storing leads in our system for further processing.
Analyzing and enriching lead data to assess relevance and potential fit.
Using AI-based tools to generate personalized first-contact messages.
Tracking and managing communication history for outreach campaigns.
We do not use the collected data for automated decision-making that produces legal or similarly significant effects on individuals.
Legal bases for processing (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland, we process your personal data in accordance with the General Data Protection Regulation (GDPR) and corresponding local laws. Depending on the context, our processing is based on:
Legitimate interests (Art. 6(1)(f) GDPR) – for B2B lead generation, segmentation and personalized outreach in order to promote our services to professionals who may reasonably expect such contact based on their role and profile.
Consent (Art. 6(1)(a) GDPR) – where you explicitly provide your data to us (for example, by signing up or authorizing our app) and consent to its processing for specific purposes.
Contract performance (Art. 6(1)(b) GDPR) – where processing is necessary to perform a contract or to take steps at your request prior to entering into a contract.
Where we rely on legitimate interests, we always balance our interests against your rights and freedoms and implement appropriate safeguards to protect your privacy.
Data sources
We obtain personal data from the following sources:
LinkedIn APIs and integrations, based on your authorization and LinkedIn’s platform policies.
Publicly available LinkedIn profile information.
Information you provide directly to us (for example, through email or forms).
Data sharing and disclosure
We do not sell or share personal data with third parties for their own marketing purposes.
We may share personal data only with:
Service providers (processors): trusted vendors who provide hosting, infrastructure, email delivery, analytics or AI processing services and who process data solely on our behalf and under our instructions.
Legal and regulatory authorities: where required by applicable law or in response to valid legal requests.
In all such cases, we take appropriate contractual and technical measures to ensure that your data is protected and processed in accordance with this Privacy Policy and applicable data protection laws.
International data transfers
Depending on the location of our infrastructure and service providers, your personal data may be transferred to and processed in countries outside of your country of residence. Where such transfers concern personal data of individuals in the EEA, UK or Switzerland, we implement appropriate safeguards, such as:
Standard Contractual Clauses (SCCs) approved by the European Commission.
Other equivalent legal mechanisms recognized under applicable data protection laws.
Data retention
We store personal data for no longer than is necessary for the purposes described in this Privacy Policy. In general, we retain lead and outreach data for up to 1 year, unless a longer retention period is required or permitted by law (for example, for record-keeping or defense of legal claims).
When data is no longer needed, we will delete it or anonymize it in a secure manner.
Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration. These measures may include:
Encryption of data in transit (TLS/HTTPS) and, where appropriate, at rest.
Role-based access control and restricted access to personal data.
Authentication and logging of access to systems that store personal data.
Regular updates and security monitoring of our infrastructure.
Procedures for deletion and anonymization of data when it is no longer needed.
However, no method of transmission or storage is completely secure; therefore, we cannot guarantee absolute security of your information.
Your rights (GDPR and similar regulations)
If you are located in the EEA, UK or Switzerland, you have the following rights in relation to your personal data, subject to certain conditions and limitations under applicable law:
Right of access: to obtain confirmation whether we process your personal data and to receive a copy of such data.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): to request deletion of your personal data in certain circumstances.
Right to restriction of processing: to request limitation of processing in specific cases.
Right to data portability: to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.
Right to object: to object at any time to processing based on our legitimate interests, including profiling.
Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Right to lodge a complaint: to submit a complaint to a competent data protection supervisory authority in your country of residence or workplace.
To exercise any of these rights, please contact us at info@aimaly.io
.
Consent withdrawal, access and deletion requests
You can at any time:
Withdraw your consent to processing where our processing is based on consent.
Request access to your data, its correction, deletion or restriction of processing.
Request a copy of your data in a portable format, where applicable.
To make such a request, please send an email to info@aimaly.io
from the email address associated with the data, describing your request. We may need to verify your identity before acting on the request.
Use of LinkedIn APIs and compliance
Our application uses LinkedIn’s APIs and services in accordance with LinkedIn’s terms, policies and applicable developer documentation. We:
Access only the data necessary for the functionality of the application.
Do not override LinkedIn users’ privacy settings.
Do not sell or transfer LinkedIn data to third parties for their own purposes.
Use LinkedIn data solely for lead generation, segmentation and outreach via our application.
Delete or anonymize data when no longer needed or upon a valid deletion request.
This Privacy Policy is intended to complement, and not to replace, LinkedIn’s own privacy policy and terms of use. Your use of LinkedIn is additionally governed by LinkedIn’s own policies.
Children’s privacy
Our services are intended for use by business professionals and are not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will delete it without undue delay.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this Privacy Policy periodically.
Contact
If you have any questions about this Privacy Policy, our data processing practices, or if you would like to exercise your data protection rights, please contact:
Email: info@aimaly.io