Privacy Policy

FleekSleek LLC ("FleekSleek", "we", "us", or "our") operates the Allen platform (the "Service"), an AI-powered LinkedIn commenting and professional engagement tool. Allen finds posts from the people you want to reach, drafts comments in your voice, and, once you connect your LinkedIn account, posts those comments from your account through LinkedIn's official API, either when you click Post or automatically through Autopilot. The Service includes the tryallen.ai website, the Allen Chrome extension, and the Allen mobile apps. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the practices described here, you should not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account and use the Service, we collect information you voluntarily provide, including:

• Account Information: Your name, email address, and password when you register for an account.
• Payment Information: Credit card or other payment method details necessary to process your Subscription. Payment data is processed and stored by our third-party payment processor and is not stored on our servers.
• Voice Profile Data: Your bio, writing style preferences, tone descriptions, and example comments that you provide to customize the generated content to match your voice.
• Topic Settings: Industry, keywords, excluded keywords, and target country preferences you configure to customize post discovery.
• Schedule Preferences: Your preferred run times, timezone, and automation settings.
• LinkedIn Connection: When you connect your LinkedIn account, LinkedIn gives us an access token together with your LinkedIn member ID, name, email address, and profile picture. We store the token encrypted at rest and use it only to publish your posts and to post comments, replies and likes from your account at your direction, and to read the comments and engagement on your own posts (see Section 15). We never receive, ask for, or store your LinkedIn password. LinkedIn tokens expire after about 60 days, and you can disconnect at any time from Settings.
• Autopilot Settings: If you turn on Autopilot, we store whether it is on, how many comments per day you allow, which days of the week it may run, which audiences it searches, and the history of what it scheduled, posted, and what you removed.
• Integration Credentials: If you connect a CRM (such as HubSpot, Salesforce, Pipedrive, GoHighLevel, or Monday.com) or a webhook (such as TaxDome through Zapier), we store the access token, API key, or webhook URL you provide, encrypted, so we can send the leads you choose to that system.
• Communications: Any messages, feedback, or support requests you send to us.

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

• Usage Data: Information about how you interact with the Service, including pages visited, features used, actions taken (such as generating, rating, posting, or copying comments), comments and likes published from your LinkedIn account through the Service (including comments Autopilot posts for you and comments you remove from an Autopilot batch), and the dates and times of your activity.
• Chrome Extension Data: When you click the Allen button on a LinkedIn post, the extension sends that post's text and the author's name and headline to our servers so Allen can draft a comment, and it checks whether you are signed in to Allen. When you open a LinkedIn profile page, the extension sends that profile's URL to our servers to check whether the person is on your watchlist and whether Allen has a draft waiting for them. If you add someone to your watchlist, we store their public profile URL, name, and headline. Beyond that, the extension does not read other page content, your LinkedIn messages, your browsing history, or your LinkedIn login session.
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. See Section 6 for more details.

1.3 Information from Third Parties

• Professional Content Data: We use third-party data services to discover publicly available LinkedIn posts that match your audience and keyword settings. This includes the post text, post URL, and engagement counts, and information about the post's author that is publicly visible on LinkedIn: name, headline or job title, profile URL, and general location. We also collect public engagement on comments you post through the Service (such as likes and replies) so we can alert you to replies. Post authors are usually not Allen users. We process their public information only to help you decide whom to engage; we do not contact them ourselves and we do not sell it.
• LinkedIn: When you connect your LinkedIn account, LinkedIn provides the information described under "LinkedIn Connection" in Section 1.1.
• Payment Processor: Our third-party payment processor may provide us with limited information about your payment method, such as the last four digits of your card and billing address, for billing and fraud prevention purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To generate AI-powered comments tailored to your voice profile, discover relevant professional content, and deliver the core functionality of the platform.
• Posting on Your Behalf: To publish your own posts, comments, replies and likes from your LinkedIn account through LinkedIn's official API: when you click Post or Like or publish a post, at the time you scheduled a post, through Boosts you switched on for a post (a first comment you set up, and replies using text you set), or, if you have turned on Autopilot, on the schedule you chose. Autopilot only posts comments that were shown to you in that morning's preview and that you did not remove before their scheduled time.
• Integrations You Choose: To send lead details (the person's name, headline, profile URL, and the post and comment thread) to a CRM or webhook you connected, when you push a lead or turn on automatic pushing.
• Alerts: To email you when someone replies to a comment you posted, to send you Autopilot's daily preview and any pause notices, and to tell you about credit balances and LinkedIn reconnection deadlines.
• Account Management: To create and maintain your account, authenticate your identity, and manage your Subscription.
• Billing and Payments: To process payments, manage Subscriptions, send billing-related communications, and resolve payment disputes.
• Service Improvement: To analyze usage patterns, identify bugs, improve features, and develop new functionality.
• Communications: To send you important service-related notices (such as trial expiration reminders, billing confirmations, and policy updates), to respond to your support requests, and to send onboarding tips and occasional offers, which you can unsubscribe from at any time.
• Security and Fraud Prevention: To protect against unauthorized access, detect and prevent fraud, and enforce our Terms and Conditions.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to respond to lawful requests from public authorities.
• Chargeback Defense: To retain and present evidence in connection with payment dispute investigations, as described in our Terms and Conditions.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the Service, including:
  • Payment processing providers
  • Cloud hosting and database providers
  • AI and natural language processing providers
  • Data aggregation and web services providers
  • Email delivery providers
  • Customer relationship and marketing tools (when you sign up, we add your name and email to our own customer records so we can onboard and support you)
  • Affiliate and referral tracking providers
  • Error monitoring and logging providers
  These providers are contractually obligated to use your data only for the purposes of providing services to us and to maintain appropriate security measures.
• Platforms and Integrations You Connect: At your direction we send data to LinkedIn (the comments and likes you post, including through Autopilot) and to any CRM or webhook you connect (the leads you push). Once data reaches those systems it is governed by their terms and privacy policies, not ours.
• Legal Requirements: We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the safety of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
• Payment Disputes: In connection with chargeback or payment dispute investigations, we may share relevant account activity, billing records, and consent documentation with card networks, payment processors, or financial institutions.

4. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, including:

• Active Accounts: We retain your data for as long as your account is active and you maintain a Subscription.
• After Account Closure: Following account termination, we may retain certain data for up to 12 months for legal compliance, dispute resolution, and fraud prevention purposes.
• Billing Records: We retain billing and transaction records for up to 7 years as required for tax and legal compliance.
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and service improvement purposes.

5. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

6. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Service to function properly, including session management and authentication.
• Preference Cookies: Store your settings and preferences, such as theme (dark/light mode) and display preferences.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve functionality and user experience. We use Google Analytics, which runs by default when you visit the Service unless you decline the cookie banner; declining stops it immediately and keeps it off on future visits. Data collected is shared with Google LLC and is subject to Google's privacy policy. We also use Hotjar, which may record anonymized interactions such as clicks and scrolling; Hotjar loads only after you accept the cookie banner.
• Advertising Cookies: We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising, including page views and trial signups. The Meta Pixel runs by default when you visit the Service unless you decline the cookie banner; declining stops it immediately and keeps it off on future visits. When you create an account we also send a matching signup event to Meta from our servers, which includes an irreversibly hashed version of your email address so Meta can attribute the signup to the ad you saw without receiving your address in readable form. Data collected is shared with Meta Platforms, Inc. and is subject to Meta's privacy policy.
• Marketing Attribution: When you arrive from an ad or campaign link, we store the campaign parameters from that link (such as utm_source and utm_campaign) in your browser and, if you create an account, on your account record, so we can tell which campaigns bring people to the Service.
• Referral Cookies: We use Rewardful to credit partners who refer people to Allen. When you arrive through a referral link it sets a cookie so the referrer is credited if you subscribe. Because it exists only to honor the referral you arrived on, it loads regardless of your cookie banner choice. It is not used for advertising.

You can opt out of analytics and advertising cookies by choosing "Decline" on the cookie banner, and you can control or delete cookies through your browser settings. We also treat a Global Privacy Control (GPC) signal from your browser as a Decline. When you have declined, we do not load Google Analytics, Hotjar, or the Meta Pixel, and we do not send the server-side signup event to Meta. Disabling essential cookies may prevent you from using certain features of the Service.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can update or correct inaccurate information through your account settings or by contacting us.
• Deletion: You can delete your account yourself from the Account page in the app, which cancels your subscription, removes your LinkedIn connection and any integrations, and deletes your data. You can also request deletion by contacting us at support@tryallen.ai. Certain data may be retained as described in Section 4.
• Disconnect: You can disconnect LinkedIn or any CRM at any time from Settings, which deletes the stored token. You can also revoke Allen's access from LinkedIn's own permitted-services settings. Disconnecting LinkedIn pauses Autopilot immediately.
• Data Portability: You can request a machine-readable copy of your data.
• Opt-Out of Marketing: You can opt out of promotional communications by following the unsubscribe instructions in our emails or by contacting us.
• Do Not Track and Global Privacy Control: We do not respond to "Do Not Track" browser signals, as there is no industry-standard protocol for compliance. We do honor Global Privacy Control signals as described in Section 6.

To exercise any of these rights, please contact us at support@tryallen.ai. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, sell, or share.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have the right to ask us to correct inaccurate personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Sale and Sharing: We do not sell personal information. Our use of the Meta Pixel and the matching server-side signup event may count as "sharing" for cross-context behavioral advertising under California law. You can opt out of that sharing by choosing "Decline" on the cookie banner or by turning on Global Privacy Control in your browser; either one stops both the pixel and the server-side event.

To submit a CCPA request, contact us at support@tryallen.ai with the subject line "CCPA Request".

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

10. Children's Privacy

The Service is not directed to individuals under the age of 16, and our Terms do not allow anyone under 16 to use it. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us at support@tryallen.ai.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services, including professional networking platforms. We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with our Service.

12. AI and Data Processing

The Service uses third-party AI models, operated by our AI service providers, to draft comments. To do that, we send the model your voice profile data (bio, style preferences, and example comments), the text of the post being commented on, and the post author's public name and headline. Our AI providers are contractually barred from using this data to train their models, and we do not use your personal data to train third-party models. Generated content is stored in our database and associated with your account.

When Autopilot is on, Allen runs automated checks before scheduling a comment (for example, it skips posts that are too old, too short, or that fail its safety filters) and then posts the comments you did not remove during the preview window, as described in our Terms. Those checks reduce but do not eliminate the chance of an unsuitable comment, which is why every scheduled comment is shown to you in advance with a remove link.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of material changes by email or by posting a notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data deletion requests, please include your account email address and specify what data you would like deleted. We will respond within 30 days.

15. LinkedIn Connection and Third-Party Platform Disclaimer

FleekSleek LLC and the Allen platform are independent products and are not affiliated with, endorsed by, sponsored by, or in any way officially connected with LinkedIn Corporation, Microsoft Corporation, or any of their subsidiaries or affiliates. "LinkedIn" is a registered trademark of LinkedIn Corporation. Any references to third-party platforms within this Privacy Policy are for descriptive purposes only and do not imply any partnership, endorsement, or affiliation.

Allen interacts with your LinkedIn account only through LinkedIn's official developer API, and only after you have connected your account by signing in on LinkedIn's own authorization page. LinkedIn then issues us a limited access token. We use that token to publish your own posts, post comments and replies from your account, like posts from your account, read the comments and engagement on your own posts (for analytics and, if you switched them on, automatic replies), and read basic profile details to confirm which account is connected. Allen does not send messages, send connection requests, follow people, or read your feed, messages, or connections. We never ask for or store your LinkedIn password, and we never log in to LinkedIn as you through a browser or session cookie.

Comments are posted either when you click Post or Like in Allen, or, if you have turned on Autopilot, automatically on weekdays at the times shown in your daily preview. Your own posts are published when you publish them or at the time you scheduled, and Boosts act only on the posts where you switched them on. Every Autopilot comment is emailed to you before it goes out with a link to remove it, and you can pause Autopilot or disconnect LinkedIn at any time from Settings, which deletes the token and stops all posting immediately. Your use of LinkedIn remains subject to LinkedIn's own terms and policies.