Privacy Policy

1. Who We Are

Superlink AI, Inc. (“Superlink,” “we,” “us”) operates the website at superlink.ai and related services. We help companies identify, evaluate, and communicate with exceptional frontier talent through our recruiting platform, talent graph, and related workflow tools.

2. Information We Collect

Information you provide

• Account information — name, email address, profile details, company, role, workspace membership, and authentication details when you create an account or sign in.
• Recruiting workflow information — roles, search criteria, candidate notes, evaluations, status decisions, messages, attachments, and other information you add to the platform.
• Communications — messages you send to us or through the platform, including support requests, email outreach, LinkedIn messages, and in-product communications.

Information from connected accounts

• Google sign-in — when you sign in with Google, we receive your name, email address, and profile picture as permitted by the scopes you authorize.
• Email accounts — if you connect an email account, we may process mailbox identifiers, message metadata, message content, recipients, timestamps, threads, attachments you send or receive, and delivery or reply events needed to power recruiting communications.
• Google Calendar — if you separately connect Google Calendar, we may request calendar access to read event metadata and make narrow updates to calendar invitations, such as adding relevant recruiting context or invite details. Calendar data may include event titles, times, locations, organizers, attendees, RSVP status, calendar links, and related event metadata.
• Other connected services — if you connect another communication or identity provider, we collect the information authorized by that connection and needed to provide the requested feature.

Candidate and talent information

We may collect candidate and professional profile information from customers, candidates, public sources, data providers, referrals, communications, and our own research. This may include names, work history, education, skills, public profile URLs, compensation or location preferences when provided, notes, evaluations, and recruiting activity history.

Automatically collected information

• Usage data — pages visited, features used, searches performed, timestamps, referring URLs, and interactions with our services.
• Device data — browser type, operating system, IP address, approximate location, and device identifiers.
• Cookies and similar technologies — session cookies, security cookies, and analytics technologies as described below.

3. How We Use Your Information

• Provide, maintain, secure, and improve our services.
• Authenticate users, manage accounts, and administer workspaces.
• Operate recruiting workflows, including search, evaluation, candidate relationship management, outreach, scheduling context, and hiring collaboration.
• Power AI-assisted product features, such as search, summarization, classification, candidate evaluation, and workflow recommendations.
• Sync connected email and calendar information when you choose to enable those features, including meeting context and authorized calendar invitation updates.
• Ignore and do not persist connected-account data that is not directly relevant to an active candidate or recruiting workflow.
• Communicate with you about your account, product updates, support requests, security notices, and our services.
• Detect, prevent, and investigate fraud, abuse, security incidents, and violations of our terms.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not use your personal information or Google user data for third-party advertising.

4. Google API Services and Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request only the Google scopes needed to provide the feature you choose to use, such as basic profile information for sign-in and calendar access for meeting sync and narrow calendar invitation enrichment.
• We use Google user data only to provide or improve user-facing features that are prominent in the product, including authentication, calendar sync, meeting context, and authorized calendar invitation updates.
• We ignore and do not persist Google user data that is not directly relevant to an active candidate or recruiting workflow.
• We do not request access to Google Drive, Google Contacts, or Gmail API data.
• We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine learning models. Our service providers are not permitted to use Google user data for advertising or model training.
• We do not transfer Google user data to third parties except to service providers necessary to provide Superlink’s user-facing features, to comply with law, for security purposes, or with your explicit consent.
• Human access to Google user data is limited to cases where you ask us to help, where access is needed for security or abuse investigation, where required by law, or where the data has been aggregated or de-identified.
• You can revoke Google access through your Google Account permissions or by contacting us at hi@superlink.ai. You may also request deletion of Google user data synced into Superlink.

5. How We Share Your Information

We may share your information only in the following circumstances:

• Workspace users and customers — information in a workspace may be visible to authorized users in that workspace and to Superlink personnel helping provide the service.
• Service providers — trusted vendors who process data on our behalf, such as hosting, database, analytics, email, calendar, authentication, communications, security, AI processing, and infrastructure providers. These providers are contractually required to protect your data, process it under our instructions, and not use Google user data for advertising or model training.
• Connected account providers — providers such as Google, Nylas, or other integration partners as needed to connect accounts, sync authorized data, send messages, or receive webhooks.
• Legal requirements — when required by law, regulation, legal process, or governmental request, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, financing, restructuring, or sale of assets, with appropriate notice where required.

6. Data Retention and Deletion

We retain personal information for as long as needed to provide our services, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. If you disconnect a Google, email, calendar, or other connected account, we stop collecting new data from that account, but previously synced data may remain in the platform where needed for workspace records, audit history, legal compliance, or legitimate business purposes.

If you request deletion of your account or personal information, we will delete or de-identify the relevant data within 30 days unless retention is required by law, security, fraud prevention, contractual obligations, or operational needs. Candidate information may also be retained where it is part of a customer recruiting record or where another lawful basis applies.

7. Your Rights

Depending on your jurisdiction and relationship to Superlink, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Export your data in a portable format.
• Appeal or lodge a complaint with a data protection authority where applicable.

To exercise any of these rights, contact us at hi@superlink.ai. We may need to verify your identity before fulfilling a request.

8. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit (TLS), access controls, logging, least-privilege internal access, vendor review, and security monitoring. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

9. Cookies

We use essential cookies to maintain your session, authentication state, preferences, and security. We do not use third-party advertising cookies. Analytics cookies, if any, are used to understand aggregate usage patterns and improve our services.

10. International Data Transfers

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers of personal information.

11. Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date or by other appropriate means. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this privacy policy or our data practices, contact us at:

Superlink AI, Inc.
Email: hi@superlink.ai