Privacy policy

Who we are

Frosty is a LinkedIn outreach automation product operated by MojoLabs. Where this policy says “we”, it means MojoLabs acting as the operator of Frosty. You can reach us at [email protected].

What we collect

Account information

Your name, work email, company and billing details. We need these to create your account, charge you and support you.

LinkedIn session tokens

We never ask for, receive or store your LinkedIn password. If you choose to run campaigns from your own LinkedIn account, we capture a session token — the credential your browser already holds when you are signed in. It is encrypted before storage, decrypted only inside the process that runs your campaigns, and never displayed, logged or shared. If you run only on managed profiles, we hold no credential of yours at all.

Campaign and lead data

The criteria you set, the sequences you write, the public profile information of the people a campaign sources, the state each lead is in, and the replies your campaigns receive.

Usage data

Standard technical logs — IP address, browser, pages viewed, errors — used to keep the service working and secure. We do not sell this or build advertising profiles from it.

How we use it

• To run the campaigns you configure, and only those.
• To show you results, replies and account activity.
• To bill you and to provide support.
• To detect abuse and to protect the standing of the profiles running outreach.
• To send service messages. Marketing email is opt-in and always carries an unsubscribe link.

What we never do

• Sell your data, your leads or your replies.
• Share your campaign data with other customers.
• Use your campaigns, messages or replies to train models for anyone else.
• Use a session token for anything beyond the campaigns you have set up.

Data about the people you reach

A campaign processes professional information that its targets have published on LinkedIn — name, role, employer, public activity. We process it on your instructions, as your processor, for the purpose of the outreach you have configured. You remain responsible for having a lawful basis for that outreach in your jurisdiction and for honouring any request a recipient makes to stop being contacted. A reply of any kind, including a refusal, ends the sequence automatically.

Sub-processors

We use a small number of third parties to operate the service — infrastructure and database hosting, error monitoring, email delivery, and payment processing. Each is bound by contract to process data only on our instructions. We will provide the current list on request to [email protected].

Security

Data is encrypted in transit and at rest. Session tokens carry an additional layer of application-level encryption. Access inside our team is limited to the people who need it to operate the service and support you, and is logged.

Retention and deletion

• Disconnecting a LinkedIn account deletes its stored token immediately.
• Deleting a campaign deletes its leads and message history.
• Closing your account removes your data within 30 days, other than records we are required to keep for tax and accounting purposes.
• You can export your campaign and lead data at any time, in a usable format.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Write to [email protected] and we will action it within 30 days.

Cookies

The marketing site uses only what is necessary to serve pages. The application uses a session cookie to keep you signed in. We do not run third-party advertising trackers on either.

Changes

If this policy changes materially we will email account holders before the change takes effect. The date at the top always reflects the current version.

Contact

Questions, requests or complaints: [email protected].