Security and privacy

What The Sales Ninja accesses, what it stores, and where it acts on your behalf.

What we access

Your LinkedIn session. During onboarding, the Chrome extension securely connects the LinkedIn account you're already logged into in your browser to your workspace. Two things worth knowing:

• We never ask for your LinkedIn password. The extension links your existing browser session; your password is never seen or stored by us.
• The extension's reach is narrow. It only operates on linkedin.com and app.thesales.ninja — it cannot read other tabs or browsing activity.

After setup, your agent works entirely server-side. You don't need to keep the extension, a LinkedIn tab, or your computer open. The extension stays installed only to keep the connection fresh — if your LinkedIn session changes (for example, you log out and back in), it re-links automatically. See Connect LinkedIn.

Your mailbox, if you connect one. On the Pro plan you can connect Gmail or Outlook in Settings → Connections so your agent can send email follow-ups alongside LinkedIn. It uses that mailbox only to send the cadence emails and to read the replies to them.

Your CRM, if you connect one. On the Pro plan an admin of your workspace can connect folk, Twenty, HubSpot, Salesforce or HighLevel in Settings → Connections. The sync is one-way — we write to your CRM, we never pull your CRM's records into your agent. For each lead that accepts your invitation we match or create a contact there, then log the milestones that follow (message sent, reply received, meeting booked); on the providers that support it, a booked meeting can also open a deal in the pipeline and stage you chose when connecting. Existing leads are backfilled once, and you can disconnect from the same place.

Your leads data. As your agent prospects, it stores the professional profile information of the people it sources (name, title, company, LinkedIn profile), its qualification decisions, and the outreach conversations it has on your behalf. This is the data you see in your Leads tab.

Your setup data. Your targeting (ICP), message guidance, learned rules, and account settings.

Your writing style. When you connect LinkedIn, your agent reads the messages you sent from that account — including ones from before you signed up — to learn how you write. It keeps a short style profile and a few of your own messages as examples; other people's message content is never kept for this. The profile and the saved examples are only ever used for your own agent. You can view and edit the profile, or have it removed — profile and saved examples together — at any time by asking your Ninja in the app.

Where we act on your behalf

Your agent performs these actions from your LinkedIn account, within its daily allowance and pacing rules (see LinkedIn safety):

• Searching for and viewing profiles that match your targeting. Profile views are not anonymous — the prospect can see that you looked at their profile, which is deliberate: a view before an invite reads as a real person doing their homework.
• Liking a post or comment. Before sending an invitation, your agent may leave a plain "like" on one relevant recent post or comment from the prospect. This is visible to them and to their network, exactly like a like you'd leave yourself, and it measurably improves how many invitations get accepted. It never writes comments of its own.
• Sending connection requests, without a connection note.
• Sending the first message and cadence follow-ups to accepted connections.

If you've connected a mailbox (Pro), it also sends the email steps of your cadence from that mailbox, under your own name and address.

When someone replies, the follow-up cadence for that person stops. By default your agent then only drafts an answer and waits for you to send it — that is how every new account starts. If you switch a flow's replies to automatic, it answers that conversation itself until you stop it; see Autonomy and approvals. It never posts content, writes comments, or changes anything on your LinkedIn profile.

If you'd rather your agent didn't like anything from your account, contact support and we'll turn it off for your agent.

Payments

Payment details are entered on our payment provider's hosted, secure checkout page. Your card details never touch our servers.

Team access

If you add team members to your workspace, they can see the workspace's leads, conversations, and results. See Billing and seats.

Connected AI assistants

You can connect your own AI assistant — Claude, Codex, or anything else that speaks MCP — to your agent, from Settings → Connections. It's optional and off until you connect one.

A connected assistant can do everything you can do in the Ninja chat, including approving a message, which sends it from your LinkedIn account. You sign in to connect it and choose the one agent it acts on, so it carries your own access and nothing more — it can't reach a teammate's agent or another organisation. Every call it makes is recorded under your name, and disconnecting one takes effect on its very next call. Full walkthrough: Connect your own AI assistant.

Data handling

• All traffic between your browser, the extension, and our platform is encrypted in transit (HTTPS).
• Your workspace's data is isolated from other customers' workspaces.
• Sensitive data — in particular the LinkedIn session linked through the extension — is encrypted at rest. Where our data is hosted and the subprocessors we rely on are listed in our Privacy Policy.
• We keep your data while your subscription is active. After cancellation you have 30 days to export it, after which it's deleted from active systems (encrypted backups clear within 90 days). To request deletion at any time, email support@thesales.ninja. Full details are in our Privacy Policy.
• To disconnect your LinkedIn account, open Settings → Connections, click the green Connected pill on the LinkedIn row and choose Disconnect. That revokes the session, deletes the stored credentials and unlinks the account at our provider. Removing the Chrome extension only stops the connection from being refreshed — the disconnect in Settings is what actually unlinks it.

Questions

If anything here doesn't answer your concern, ask your Ninja in the app or contact support — we'd rather over-explain than leave you guessing about your account.