Data Rights

Submit a request

Email [email protected] from the address associated with your Crispy account. State the right you want to exercise, the relevant account or organization, your state or country of residence, and enough detail for us to understand the scope. Please do not send passwords, LinkedIn session cookies, government identification, or other sensitive credentials by email unless we specifically request an appropriate verification method.

Rights we support

Depending on applicable law and our role, you may ask to:

• access or obtain a portable copy of personal data;
• correct inaccurate personal data;
• delete personal data, subject to lawful exceptions;
• restrict or object to processing;
• withdraw consent for future processing;
• opt out of targeted advertising or the sale or sharing of personal data; or
• appeal a decision on a privacy request.

If Crispy processes data only on behalf of a business customer, we may direct the request to that customer or assist it as required because that customer controls the processing.

Verification and timing

We generally verify control of the relevant account and may request proportionate additional information when necessary. We aim to respond within 30 days. Where a U.S. state privacy law applies, the response deadline is generally no more than 45 days, subject to any extension allowed by that law. We will explain a denial and available appeal route. A recognized browser privacy signal keeps optional browser analytics and marketing off by default. Our broader universal opt-out and authorized-agent workflows are still under development; an agent may contact us, but we may need evidence of authority and verification permitted by law.

Deletion choices are different

• Disconnect LinkedIn: ends the provider connection and session operation. It does not itself delete the Crispy account or all contacts, messages, campaigns, or activity.
• Cancel or churn: stops a paid term or renewal. The current target for sweeping contacts and activity is 180 days after the paid term ends.
• Hard-delete: deletes account-associated data through the deletion flow, subject to legal, billing, security, audit, and suppression exceptions.

A 90-day message-cache limit and 60-day raw-import limit can apply independently. Some billing, audit, and suppression records may be kept longer. See the Privacy Policy for details.

EEA and UK residents

Where the GDPR or UK GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may complain to the data protection authority where you live or work, or where you believe an infringement occurred. Exercising a right is subject to the conditions and exceptions in applicable law.

United States residents

State rights vary, and statutory thresholds and exemptions determine whether a law applies. Delaware's Personal Data Privacy Act, for example, does not automatically apply to every company or request. We nevertheless accept access, correction, deletion, portability, consent, opt-out, and appeal requests through the channel above and will honor rights required by applicable law. Delaware residents may contact the Delaware Department of Justice at [email protected] about a complaint.

Appeals and questions

To appeal, reply to our decision or email [email protected]with the subject "Privacy request appeal" and explain why you disagree. This page describes our request channel and does not expand a statutory right beyond applicable law.