Privacy policy
Last updated: November 2, 2026
This policy explains what Styng (styng.app, "we") does with personal data: yours when you use Styng or visit styng.app, and that of the people you contact through Styng. Styng is run by AI0, a French SASU with its registered office at 14 rue Louis Blanc, 06400 Cannes, France (details in our legal notice), which is responsible for your data (the controller).
What we keep
- Your account: email address, name and picture if you sign in with Google, workspace, team and settings.
- The accounts you connect: LinkedIn profile link, name and identifier; if you connect a mailbox, its address and servers, and its app password or, for a Microsoft mailbox, the access Microsoft gives Styng, encrypted with a key kept apart from the database.
- What you bring into Styng: prospect lists (names, job titles, companies, profile links, email addresses), the conversations your campaigns start on LinkedIn and by email, and what you tell us about your offer. From your mailbox, Styng only reads the answers of the people your campaigns emailed, what you wrote to them yourself, and bounces.
- Technical data: connection logs, IP addresses, the version of the Mac app, error reports.
- What you write to us in Need something?, and our answers: kept with your account, and an email tells each side when the other wrote.
- Your acceptance of our terms: which version, when, and the IP address it came from.
Never your LinkedIn password or session: you sign in to LinkedIn on your Mac, in a Chrome of Styng's own, and your session stays there. Styng is free, so there is no payment data either.
Why, and on what basis
- To run Styng for you and support you: to perform our contract with you.
- To secure Styng and prevent fraud, and to keep proof that you accepted our terms: our legitimate interest.
We do not sell data, use it for advertising, or make decisions about you that are purely automated with legal effect.
The people you contact
For prospect data, the Styng customer who contacts you decides why and how it is used: they are the data controller and we process it for them. If you were contacted through Styng, write to that customer; if you write to us, we pass your request on.
Who helps us
- Supabase: database and sign-in, hosted in Ireland.
- Fly.io: application hosting, in London.
- Resend: sign-in emails.
- Google: sign-in with Google, if you choose it, and our support mailbox.
- Microsoft: the connection to a Microsoft mailbox, if you choose it.
They act on our instructions and protect the data. When data leaves the European Union, it goes to a country the EU recognises as adequate (such as the United Kingdom) or is covered by the EU's standard contractual clauses or the EU–US Data Privacy Framework. If you connect Claude or ChatGPT, they read what you allow them to, under their own terms.
How long
- Account and workspace data: while your account is open, then deleted within 30 days of closing it.
- Prospect data: until you delete it. Leads untouched for 3 years, and conversations and action history older than 3 years, are deleted automatically; campaign emails nobody answered go a year after their sequence ended; everything goes at the latest 30 days after your account closes.
- Connection logs: up to 12 months.
- Proof of your acceptance of our terms: as long as your account is open.
Cookies
Styng only stores what keeps you signed in and remembers your choices. There are no advertising or analytics cookies, and our fonts are served from our own servers.
Security
Data travels encrypted, access is limited to what is needed, secrets such as access tokens are stored hashed, and mailbox passwords and Microsoft access are encrypted.
Your rights
You can access, correct, export or delete your data, restrict or object to its use, and withdraw a consent you gave, by writing to us. We answer within one month. You can also lodge a complaint with a data protection authority, such as the one where you live or work.
Changes
We tell you of important changes to this policy by email or in Styng.