Privacy Policy

Who We Are

Liminl is operated by Liminl Inc., a Delaware corporation. For the purposes of GDPR and similar laws, we are the data controller for the information described in this policy.

Registered Address: San Francisco, CA
Contact: support@goliminl.com
Web: www.goliminl.com

If you have questions, complaints, or want to exercise any of the rights described below, write to the contact address above. We respond within 30 days.

1. Information We Collect

1.1 Information You Provide Directly

Depending on how you use the Service, this may include:

• Account information for students and other signed-in users: email address, name, and password (stored securely; we never store plaintext passwords)
• Onboarding information: career goals, education, work history, skills, target roles, companies, locations, work authorization, and other answers you provide in chat or review
• Resume files you upload, and LinkedIn profile URLs or screenshots you choose to submit during setup
• Alumni opt-in information if you use the alumni form: name, email, graduation year, company, title, industry, seniority, city, optional LinkedIn URL, optional scheduling link, conversation capacity, and notes
• Matching and scheduling information: intro requests, offered times, selected meeting times, time zone, and post-conversation feedback

1.2 Information Collected Automatically

• Device and browser information (type, operating system, browser version)
• IP address and approximate location (city-level, derived from IP)
• Usage data (pages visited within Liminl, features used, session duration)
• Cookies and similar technologies needed to keep you signed in and to operate the Service (see Section 7)

1.3 Information from Google Sign-In

If you choose to sign in with Google, we receive basic identity information from Google Identity Services, such as your name, email address, and profile image. We use this only to create or sign in to your Liminl account.

We do not request access to Gmail, Google Calendar, or Google Contacts. We cannot read, send, or draft email in your Google account, and we do not read your personal calendar or address book.

1.4 Information from Third-Party Sources Used for Matching

To prepare introductions and related emails, we may supplement information you provide with publicly available professional data (for example, title, employer, or education) and with public web research used to draft match context. We use these sources only to operate matching and related communications. We do not sell enriched data.

2. What We Do Not Collect

• Gmail or other inbox content (we have no Gmail access)
• Your Google Calendar events or Google Contacts
• Phone numbers, unless you explicitly enter one
• Financial or payment data (we do not process payments directly)
• Precise geolocation (no GPS or device-proximity data)
• Your browsing history or activity outside the Liminl website and web application

3. How We Use Your Information

We use your information for the following purposes:

• To create and maintain your account, verify your email, and keep you signed in
• To complete onboarding and understand your background and goals
• To match students with alumni and show match context inside the Service
• To schedule introduction conversations, including creating a Liminl-hosted calendar event and a video meeting link
• To send Service emails from Liminl (for example, match notices, scheduling, preparation, and follow-up), including personalized drafts
• To collect optional feedback after a conversation
• To detect, prevent, and address technical issues, security threats, and fraud, including error monitoring
• To analyze aggregate, anonymous usage patterns and improve the Service
• To comply with legal obligations

Liminl sends its own emails about matching and scheduling. We do not send messages from your personal email account.

4. AI-Powered Features

Liminl uses artificial intelligence to extract information from resumes or LinkedIn materials you submit, to help complete onboarding, to generate match explanations, and to draft personalized introduction and follow-up emails.

We currently use the Anthropic API for these features. Data sent to this API is subject to Anthropic's data processing terms and is used only to provide the Service.

AI-generated content consists of suggestions and drafts. Where an email is sent by Liminl, it is sent from Liminl, not from your inbox. We do not use your personal data, including Google sign-in data, to train general-purpose AI models.

5. How We Share Your Information

We do not sell your personal information. We share data only in the following limited circumstances:

Service Providers. We share data with vendors who help us operate the Service, including cloud hosting, email delivery, AI processing, error monitoring, location lookup, video meetings, and public professional-data or web-research providers used for matching emails. These providers are used only for the purposes we specify.

Matched Participants. If you are matched for an introduction, we share the professional information needed to make that introduction (such as name, school or company, title, and why you were matched) with the other participant and in related Liminl emails.

Legal Requirements. We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and obtain explicit prior consent where required.

We do not sell or share your data with advertisers, data brokers, or any party not described above.

6. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following lawful bases: performance of our contract with you (account creation, onboarding, matching, scheduling, and related emails), your consent (Google sign-in, optional alumni form fields, and optional uploads), and our legitimate interests (security logging, fraud prevention, and error monitoring). You may withdraw consent by disconnecting Google sign-in where available or by requesting account deletion.

We do not use automated processing to make decisions that produce legal effects or similarly significantly affect you. Match suggestions are informational and require human action (such as requesting an intro or choosing a time).

7. Cookies and Similar Technologies

The Liminl web app uses cookies and similar technologies for authentication, security, and error monitoring. These are used to operate the Service. We do not use cookies for advertising, retargeting, or third-party advertising analytics. You can manage cookie preferences through your browser settings; disabling essential cookies may affect the functionality of the Service.

8. Data Storage and Security

Your data is stored in the United States, encrypted in transit and at rest. Matching, scheduling, and related operational records may be stored in our cloud systems and operations tools used to run the Service. Access to production systems is limited to authorized Liminl personnel.

We implement reasonable technical and organizational measures to protect your personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

If we discover a breach affecting your personal data, we will notify you and any relevant authorities as required by applicable law, including GDPR and applicable US state breach-notification laws. If you become aware of a security vulnerability, please report it to support@goliminl.com.

9. International Data Transfers

Liminl is operated from and stores data in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. For transfers from the EEA, UK, or Switzerland, we rely on your explicit consent or Standard Contractual Clauses with our infrastructure providers.

10. Data Retention

We retain your personal information for as long as your account is active, or as needed to provide matching and scheduling if you submitted an alumni form without an account. When you request deletion, your data is removed from our primary systems promptly and from backups within 30 days. Anonymized and aggregated data that cannot identify you may be retained for analytics and product improvement.

11. Your Rights and Choices

You have the following rights over your personal data:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information or your entire account and all data permanently.
• Restriction and Objection: request that we pause or stop certain processing.
• Data Portability: request a copy of your data in a structured, machine-readable format.
• Opt-Out of Enrichment: request that we stop supplementing your matching profile with third-party professional data.
• Right to Lodge a Complaint: if you are in the EEA, UK, or Switzerland, you may lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@goliminl.com. We will respond within 30 days.

12. California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act.

Categories of personal information we collect: identifiers (name, email address); authentication information (password; Google sign-in identifiers if you use Google to sign in); professional or employment-related information (onboarding answers, resume or LinkedIn materials you submit, alumni profile fields, match and scheduling details); and inferences used to suggest matches and draft related emails.

You have the right to know what we collect and why, the right to delete, the right to correct, and the right to non-discrimination for exercising these rights. We do not sell or share your personal information as defined under the CCPA, and we do not use sensitive personal information for purposes beyond providing the Service. To submit a request, contact support@goliminl.com from the email address associated with your account or alumni submission.

13. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created a Liminl account or submitted an alumni form, please contact us at support@goliminl.com and we will delete the information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the Effective Date at the top when we revise this document, and we will announce substantive changes by email before they take effect. If we later ask to access additional Google data (such as Calendar or Contacts), we will update this policy and ask for your consent before using that data.

15. Contact Us

Liminl Inc.
Email: support@goliminl.com
Web: www.goliminl.com