Privacy Policy

Last updated: September 27, 2026

1. Who we are

Inroadly is operated by Frame Perfect Digital, a sole proprietorship based in Austin, Texas, United States ("we", "us"). For anything about privacy, email john@frameperfectdigital.com.

This policy covers the Inroadly website and app. It applies to everyone who uses Inroadly, wherever they live. Where the law where you live gives you more rights than this policy describes, you have those rights too.

2. What we collect

About you, to run your account

• Account details: your name and email address.
• Password: if you create one. We only store it as a one-way hash that can't be turned back into your password.
• Google or Microsoft sign-in: if you use it, the account ID, name, email and profile picture that provider shares with us. We never see your Google or Microsoft password.
• Sign-in records: for each device you're signed in on, its IP address, browser type and when it was last used. These let you see and sign out your devices, and help us spot and block attacks.

What you add to Inroadly ("your content")

Accounts (companies), the people you map (names, job titles, email addresses, phone numbers, LinkedIn links), how they're related, groups, and notes. When you import a spreadsheet, the file is read in your browser; only the columns you choose are sent to us, and the file itself is not stored.

What we don't collect

No analytics, advertising or tracking tools, no payment details (Inroadly is free), and no data bought from other companies.

3. How we use it

• To provide Inroadly: sign you in, save and show your content, and send the emails the service needs (email confirmation and password reset).
• To keep it secure: limit repeated sign-in attempts, detect abuse, and investigate problems.
• To contact you about important changes to the service or these terms.

We don't use your content for anything else. We don't sell it, rent it, share it for advertising, or use it to train AI models. Nobody else using Inroadly can see it.

Legal bases (for users in the EU and UK): providing the service you signed up for (contract); keeping it secure and preventing abuse (legitimate interests); and anything you've asked us to do (consent, which you can withdraw).

4. Information about the people you map

When you add information about other people (your prospects), you decide what to add and why. You're responsible for having a lawful reason to hold it, the "controller" under data protection law. We only store and process it on your behalf, to provide Inroadly to you, as your "processor". The Terms of Use set out our commitments when doing that.

Please don't add sensitive information such as health details, government ID numbers, financial account numbers, or information about someone's race, religion, politics or sexuality. If someone you've mapped asks us about their data, we'll pass the request to you as the account holder.

5. Who we share it with

We use a few trusted service providers to run Inroadly. They handle data only on our instructions:

• Vercel (United States): hosts the website and app.
• Neon (United States): our database, where your account and content are stored.
• Resend (United States): sends our emails (confirmation and password reset).
• Google and Microsoft: only if you choose to sign in with them.

When you create or change a password, we check it isn't one known from past data breaches using the Have I Been Pwned service. Only the first 5 characters of a scrambled version of the password are sent, which can't identify you or reveal your password.

We'll only share data with anyone else if the law requires it (for example a valid court order), to protect people's safety, or as part of transferring the business, in which case this policy continues to apply to your data.

6. Where your data is stored

Your data is stored in the United States. If you use Inroadly from outside the US, your data is transferred there. Where the law requires it (for example for users in the EU and UK), we rely on appropriate safeguards such as the Standard Contractual Clauses our providers offer.

7. How we protect it

• All connections are encrypted (HTTPS), and the database is encrypted at rest.
• Every user's data is kept separate. Every request checks who's signed in, and automated tests check that one user can never read or change another's data.
• Passwords are stored as one-way hashes, passwords found in known data breaches are refused, and repeated sign-in attempts are blocked.
• Signing out, or resetting your password, can end your sessions on every device. Sign-in sessions expire after 7 days of inactivity.
• Only Frame Perfect Digital can access the systems that run Inroadly, using accounts protected by two-step verification.

No system is perfectly secure. If a breach ever affects your personal data, we'll tell you without undue delay and, where the law requires, notify the authorities (within 72 hours for users covered by EU or UK law). To report a security problem, email john@frameperfectdigital.com.

8. How long we keep it

• Your account and content: for as long as you have an account. When you delete something, or delete your account from Account settings, it's removed from our database immediately. Copies in our providers' backups are overwritten within 30 days.
• Sign-in records (IP address, browser): deleted when the session ends or expires.
• Confirmation and reset links: expire after 1 hour, then deleted.
• Security logs: kept for up to 30 days.

9. Your rights and choices

You can see, correct, download and delete your data yourself at any time in the app and in Account settings (use Your data to download everything, and Delete account to erase it). You can also email us to:

• ask for a copy of your data, or for it to be corrected or deleted;
• object to or restrict how we use it;
• withdraw consent you've given; or
• appeal a decision we've made about one of these requests.

We'll reply within 30 days (45 days where US state law allows) and won't treat you differently for using your rights. We may need to confirm it's you first. If you're in the EU or UK, you can also complain to your local data protection authority.

For US state privacy laws (including Texas and California): we don't sell personal data, share it for targeted advertising, or use it for profiling that has legal effects.

10. Cookies

Inroadly uses a single cookie, which keeps you signed in. It's strictly necessary for the service to work, so there's no cookie banner. We don't use advertising, analytics or third-party cookies, and our fonts are served from our own site.

11. Children

Inroadly is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you believe we have, email us and we'll delete it.

12. Changes to this policy

If we make important changes, we'll tell you by email or in the app before they take effect. The date at the top shows when it was last updated.

13. Contact

Frame Perfect Digital · Austin, Texas, United States · john@frameperfectdigital.com