Privacy Policy

Who We Are

selfnode, Inc. ("selfnode", "we", "us", or "our") operates selfnode.me and the selfnode suite of AI products — Twin-Seeker, Twin-Gig, Twin-Sales, and Twin-Marketing. All products run on a single shared backend and identity layer. Privacy enquiries: privacy@selfnode.io.

Information We Collect

We collect information from three sources:

• →Information you provide directly — email on signup, name, password or OAuth profile fields, LinkedIn or profile URLs, and any contacts you import.
• →Information generated through product use — emails sent/received via connected Gmail or Outlook, ICP scores, pipeline activity, and sequence performance.
• →Technical information — IP address, browser, device type, referral URL, and session data via cookies.

How We Use Your Data

Your data is used only to operate selfnode and improve your results:

• →Provide and improve the selfnode services.
• →Generate AI-powered outreach, scoring, and insights on your behalf.
• →Send transactional emails — password reset, billing receipts.
• →Analyse product usage to fix bugs and build new features.
• →Comply with legal obligations.

Gmail & Outlook Integration

When you connect your Gmail or Outlook account, we store an encrypted OAuth refresh token. We use this token solely to send emails on your behalf and to sync inbox replies back into the relevant twin product. We do not read emails unrelated to your connected product's activity.

Data Storage & Security

Your data is stored on servers in the United States (AWS us-east-1). We encrypt all data at rest (AES-256) and in transit (TLS 1.3). OAuth tokens are encrypted using Fernet symmetric encryption before storage. We conduct annual security reviews and follow OWASP security guidelines.

Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data by emailing privacy@selfnode.io. We will process deletion requests within 30 days. Some data may be retained longer if required by law or for fraud prevention.

Cookies

We use strictly necessary cookies for authentication sessions and CSRF protection. We do not use tracking or advertising cookies. We may use analytics cookies (privacy-first, anonymised) to understand aggregate product usage.

Third-Party Sub-processors

We work with a small set of trusted sub-processors. Each is subject to a Data Processing Agreement with selfnode:

Your Rights — GDPR & CCPA

If you are based in the EU/EEA or California, you have the right to:

• →Access your personal data.
• →Correct inaccurate data.
• →Request erasure — the 'right to be forgotten'.
• →Restrict or object to processing.
• →Data portability — export your data in a machine-readable format.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-product notice at least 7 days before they take effect. Continued use of selfnode after that date constitutes acceptance of the updated policy.