Go to app

Security and privacy

What The Sales Ninja accesses, what it stores, and where it acts on your behalf.

What we access

Your LinkedIn session. During onboarding, the Chrome extension securely connects the LinkedIn account you're already logged into in your browser to your workspace. Two things worth knowing:

  • We never ask for your LinkedIn password. The extension links your existing browser session; your password is never seen or stored by us.
  • The extension's reach is narrow. It only operates on linkedin.com and app.thesales.ninja — it cannot read other tabs or browsing activity.

After setup, your agent works entirely server-side. You don't need to keep the extension, a LinkedIn tab, or your computer open. The extension stays installed only to keep the connection fresh — if your LinkedIn session changes (for example, you log out and back in), it re-links automatically. See Connect LinkedIn.

Your mailbox, if you connect one. On the Pro plan you can connect Gmail or Outlook in Settings → Connections so your agent can send email follow-ups alongside LinkedIn. It uses that mailbox only to send the cadence emails and to read the replies to them.

Your leads data. As your agent prospects, it stores the professional profile information of the people it sources (name, title, company, LinkedIn profile), its qualification decisions, and the outreach conversations it has on your behalf. This is the data you see in your Leads tab.

Your setup data. Your targeting (ICP), message guidance, learned rules, and account settings.

Your writing style. When you connect LinkedIn, your agent reads the messages you sent from that account — including ones from before you signed up — to learn how you write. It keeps a short style profile and a few of your own messages as examples; other people's message content is never kept for this. The profile and the saved examples are only ever used for your own agent. You can view and edit the profile, or have it removed — profile and saved examples together — at any time by asking your Ninja in the app.

Where we act on your behalf

Your agent performs these actions from your LinkedIn account, within its daily allowance and pacing rules (see LinkedIn safety):

  • Searching for and viewing profiles that match your targeting. Profile views are not anonymous — the prospect can see that you looked at their profile, which is deliberate: a view before an invite reads as a real person doing their homework.
  • Liking a post or comment. Before sending an invitation, your agent may leave a plain "like" on one relevant recent post or comment from the prospect. This is visible to them and to their network, exactly like a like you'd leave yourself, and it measurably improves how many invitations get accepted. It never writes comments of its own.
  • Sending connection requests, without a connection note.
  • Sending the first message and cadence follow-ups to accepted connections.

If you've connected a mailbox (Pro), it also sends the email steps of your cadence from that mailbox, under your own name and address.

It does not reply to leads for you — when someone replies, automation for that person stops and the conversation is yours. It doesn't post content, write comments, or change anything on your LinkedIn profile.

If you'd rather your agent didn't like anything from your account, contact support and we'll turn it off for your agent.

Payments

Payment details are entered on our payment provider's hosted, secure checkout page. Your card details never touch our servers.

Team access

If you add team members to your workspace, they can see the workspace's leads, conversations, and results. See Billing and seats.

Connected AI assistants

You can connect your own AI assistant — Claude, Cursor, or anything else that speaks MCP — to your agent, from Settings → Connections. It's optional and off until you generate a token.

A token you generate there can do everything you can do in the Ninja chat, including approving a message, which sends it from your LinkedIn account. It's pinned to one agent in your own workspace and can't reach anyone else's, every call it makes is recorded, and you can revoke it at any time — revocation takes effect on the token's next call. Keep tokens to yourself and revoke ones you no longer use. Full walkthrough: Connect your own AI assistant.

Data handling

  • All traffic between your browser, the extension, and our platform is encrypted in transit (HTTPS).
  • Your workspace's data is isolated from other customers' workspaces.
  • Sensitive data — in particular the LinkedIn session linked through the extension — is encrypted at rest. Where our data is hosted and the subprocessors we rely on are listed in our Privacy Policy.
  • We keep your data while your subscription is active. After cancellation you have 30 days to export it, after which it's deleted from active systems (encrypted backups clear within 90 days). To request deletion at any time, email support@thesales.ninja. Full details are in our Privacy Policy.
  • To disconnect your LinkedIn account, remove the Chrome extension — that ends the session link — or ask support to revoke it for you.

Questions

If anything here doesn't answer your concern, ask your Ninja in the app or contact support — we'd rather over-explain than leave you guessing about your account.