Security. How we protect accounts and data.
What Perpetual can and cannot access when you connect an account, and how customer data is protected. For personal data rights, see the Privacy Policy.
On this page
01LinkedIn access
We never see or store your LinkedIn password or session cookies. You sign in on the hosted page of our connection provider, Unipile, and Unipile keeps the session. We keep only a reference to the connected account and its status. You can disconnect at any time in the app; disconnecting also deletes the account on the provider’s side.
02Mailbox access
Mailbox access tokens are encrypted with AES-256-GCM before they reach the database. Each token is bound to its own record, and the encryption key can be rotated. Only the backend service can read them, and they never appear in logs or in the user interface. Data is encrypted in transit.
03Data isolation
Each customer workspace is isolated at the database level with row-level security. One customer cannot read another customer’s data, and access for our own people is limited to those who need it.
04Sending controls
A message goes out only after a person approves it, or within automatic-sending rules the account owner has switched on, such as a daily limit. Every send passes our sending limits, suppression and opt-out checks. An opt-out is honored across all customers.
05Logging and audit
Logs never contain recipient addresses, message bodies or tokens. Key account and sending actions are recorded in an internal audit trail that stores what happened, not message content.
06Retention and deletion
Conversation content is kept for 90 days, and automated jobs purge or redact expired data every day. Account deletion, workspace deletion and export of the data tied to an email address are built into the product.
07Service providers
We use a small set of providers, each processing personal data only on our instructions. The current list, and what each one does, is in section 5 of the Privacy Policy. The application runs on Vercel in the EU (Dublin).
08Incidents and contact
No system is perfectly secure. If a breach affects your data and puts your rights at risk, we will notify you and the competent authority as the law requires. To report a vulnerability, ask for our Data Processing Agreement or ask a security question, write to [email protected].