How personal information about the people you contact is handled, for users and for them.
Roles
For your own account data, Road to J is the controller. For third parties you research and contact, you decide who to contact and why (controller); we process their data on your instructions and to run the service safely.
Sources and provenance
Every imported person records its source (provider, LinkedIn export, Google contacts, manual) and the import date. Work email sources are kept for Spam Act consent records.
Minimisation and retention
- Only professional information is used: name, title, company, work email, public posts and talks.
- Imported people never contacted are deleted after 12 months.
- Opt-outs and bounces go on a do-not-contact list that every send checks first.
Security
Encrypted in transit (TLS) and at rest by our hosting providers; OAuth tokens are never exposed to the browser; access is limited to the account owner, and to admins for abuse review.
Requests from people you contacted
Anyone can email privacy@roadtoj.com to learn where their details came from or to be removed. We act within 30 days.