Privacy Policy

Who we are

radr is run by Arcturus Business Solutions, India. It is the service at tryradr.com, app.tryradr.com and demo.tryradr.com, and the Chrome extension "radr for LinkedIn". In this policy, "we" means Arcturus Business Solutions, and "you" means the person or business using radr.

Questions, requests and complaints about privacy: info@arcturusbusiness.com. Our office details are on the Contact page.

The short version

• We use your data to run radr for you, and for nothing else. We do not sell it and we do not use it for advertising.
• Passwords and the keys to your mailbox and LinkedIn are stored encrypted, and you can remove them at any time.
• Nothing is sent from your mailbox or LinkedIn until you approve it.
• radr finds companies and business contacts from public sources. Anyone we found can ask us to remove them.
• Deleting your account deletes your workspace.

What we collect from you

Your account

Your name, your email address and your password. We keep only a scrambled form of the password (a salted scrypt hash), never the password itself. We also record when the account was made and when you last signed in, and the plan you are on.

What you put into radr

The website and description of what you sell, documents you upload, your customer list if you add one, the kinds of companies you want to reach, your settings, and anything you write or edit in the app, such as messages and replies.

What radr makes for you

Research about your product, the companies and people it finds, the evidence behind each one, the messages it drafts, your sequences, conversations and replies, and a record of what was sent and when.

Connected accounts

When you connect a mailbox or a LinkedIn account, we store what is needed to act for you:

• Gmail or Google Workspace: a sign-in token from Google, your address and your name. We never see your Google password.
• Outlook or Microsoft 365: a sign-in token from Microsoft, your address and your name. We never see your Microsoft password.
• Other mailboxes (for example Zoho): your address, the server names, and the app password you give us.
• LinkedIn: the LinkedIn session cookies of your account (li_at and JSESSIONID), and, only if you choose the password option, your LinkedIn email and password. Also any proxy address you set, and the limits and usage counts for the account.
• Slack: if you add one, the Slack incoming webhook address used for your notifications.

These are stored encrypted (AES-256-GCM) in a separate file per workspace and are never sent to your browser.

Usage

How much of your plan you have used: companies found, people followed, emails sent today, and what your research has cost us this month. We use this to apply plan limits.

The free look

When you try radr at demo.tryradr.com without an account, we keep the website you typed and the answer we made for it, so the same website asked again in the same week shows the saved answer. We use your IP address, held in memory for a short time, to limit how many looks one place can ask for.

Technical data

Like any web server, ours sees your IP address and browser details with each request. We use the address to limit repeated sign-in attempts and other abuse. Errors are written to the server's log to fix problems.

Cookies and browser storage

radr sets one cookie, radar_session. It keeps you signed in for up to 30 days, and is needed for the service to work. We do not use advertising or tracking cookies, and we do not run third-party analytics.

The site and app also keep a few small items in your browser's own storage: which product you last had open, and the website you typed in the free look so it can be carried into a new account. These stay on your device.

Information about the people and companies radr finds

radr researches organizations and their business contacts from public sources: company websites, job posts, tenders, news, official filings, public directories and search results. When you connect your own LinkedIn account, radr also looks at what that account can see on LinkedIn. It records a person's name, role, organization, where it found them, and, when one is published or can be worked out from the company's own email format, a business email address or phone number.

We process this information so our customers can find organizations that may need what they sell and contact the right person about it. You, as the customer, choose whom to write to and approve every message, so you are the sender and are responsible for following the law that applies to your outreach, including the Digital Personal Data Protection Act, 2023 in India, and anti-spam and data protection rules such as CAN-SPAM in the United States and the GDPR in Europe where they apply.

To help with that, radr:

• adds a standard unsubscribe option to the emails it sends for you;
• stops writing to anyone who asks to stop, or whose address bounces, by putting them on your do-not-contact list;
• lets you add any person or address to that list yourself.

If radr found you and you want to be removed, email info@arcturusbusiness.com from the address concerned, or tell us the address and your name. We will remove what we hold about you that we can find and stop it being used for outreach.

How we use data

• To run the service: research your product, find companies and people, draft messages, send what you approve, show replies, and keep your workspace.
• To keep your accounts working: refresh sign-in tokens, check that a mailbox or LinkedIn account still works, and tell you when it needs attention.
• To tell you what happened: in-app notifications, an email when someone replies, and a daily summary if you turn it on. These are sent from your own connected mailbox to you.
• To apply plan limits, prevent abuse and keep the service secure.
• To answer you when you contact us.

We do not sell personal data, rent it, or use it for advertising.

Gmail and Google data

When you choose "Sign in with Google", radr asks Google for permission to use your Gmail account through Google's mail servers (the scope https://mail.google.com/), and for your email address and name. We use that access only to:

• send the emails and replies you approve in radr, from your own address;
• read new messages arriving in your inbox, only to find replies to emails radr sent for you and delivery failures (bounces) for them. Messages that are not a reply to one of radr's conversations are not stored.

Replies that match a radr conversation are stored in your workspace so you can read and answer them in radr. If you turn on "Read replies with AI", the text of those replies is sent to our AI provider to suggest an answer and to sort replies (for example, interested or asked to stop).

In particular, we do not:

• use Gmail data for advertising, or sell it;
• transfer it to anyone except as needed to provide radr's features to you, to comply with the law, or as part of a merger or sale of the business with the same protections;
• use it to develop, improve or train generalized AI or machine-learning models;
• let people read it, unless you ask us to (for example for support), it is needed for security or to investigate abuse, or the law requires it.

You can disconnect Gmail in radr under Connections, which deletes the stored token, and you can also remove radr's access at any time from your Google Account settings.

Outlook and Microsoft data

When you choose "Sign in with Microsoft", radr asks Microsoft for permission to send mail as you (Mail.Send), read your mail (Mail.Read), know your basic profile (User.Read), and stay connected (offline_access). We use this exactly as described for Gmail above: to send what you approve, and to find replies and bounces to radr's emails. The same promises apply: no advertising, no sale, no training of AI models, and no person reads it except as described above. You can disconnect in radr, or remove radr's access from your Microsoft account.

LinkedIn and the Chrome extension

radr can use your LinkedIn account, when you connect it, to look up people at the companies it finds, follow the people and topics you choose, send the connection requests and messages you approve, and bring LinkedIn replies into radr. It respects daily limits you can change. LinkedIn may limit or restrict accounts that it thinks are automated; see our Terms.

The radr for LinkedIn Chrome extension has one purpose: to let radr use your own LinkedIn account from your own Chrome. It:

• reads your LinkedIn session cookies (li_at and JSESSIONID) and sends them to radr only to connect your own account, and again when you sign in to LinkedIn anew;
• makes on linkedin.com only the requests radr asks for on your behalf, which are the actions you set up or approved, and sends the answers back to radr;
• talks only to linkedin.com and to radr (app.tryradr.com);
• keeps a link token and your account name in the extension's own storage on your computer;
• does not read your browsing history, other websites, or other cookies, and shows no ads.

The extension's data is used only for radr's features, is not sold, and is not used for anything unrelated to connecting your LinkedIn. You can unlink it from radr's LinkedIn page or the extension's window, and removing the extension deletes its local storage.

Who else handles data

We use these service providers to run radr. They handle data only on our instructions.

• Microsoft Azure hosts radr on servers in India.
• Azure OpenAI Service (Microsoft) does radr's AI work. What it receives includes your product information and documents, public information about companies and people, your drafts, and, if you turn on the reply assistant, the replies you receive. Under Microsoft's terms for this service, this data is not used to train Microsoft's or OpenAI's models.
• Google and Microsoft carry your email when you connect a Gmail or Outlook mailbox, and your own mail provider when you connect another mailbox.
• LinkedIn receives the requests made with your account when you connect it.
• Slack receives notification text, only if you add a Slack webhook.

radr opens public web pages and runs web searches to do its research. Those websites see a request from our server, not from you.

We may disclose data if the law requires it, to protect people's safety or our rights, or to a buyer of the business, who must keep the promises in this policy.

How long we keep data

• Your workspace data is kept while your account exists.
• Disconnecting a mailbox or a LinkedIn account deletes its stored credentials at once.
• Deleting your account (Account, Delete account) deletes your workspace and its connected-account credentials from the live system at once.
• Saved free-look answers are kept for a limited number of recent looks and replaced by newer ones.
• We take a copy of the service's data each time we update the service, to recover from mistakes. Deleted data can remain in those copies until they are cleared.

Security

radr uses HTTPS, stores passwords only as salted hashes, stores connected-account credentials encrypted, keeps each workspace's data separate, and refuses requests from other websites. No system is perfectly secure; if we learn of a breach that affects your data, we will tell you and the authorities as the law requires.

Your rights

You can see and change most of your data in radr, disconnect any connected account, and delete your account yourself. You can also ask us to tell you what we hold about you, correct it, delete it, or stop using it, and you can withdraw consent you gave (for example by disconnecting an account). Email info@arcturusbusiness.com; we will answer within 30 days. If you are not satisfied with our answer, you may complain to the data protection authority where you live, including the Data Protection Board of India.

Children

radr is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.

Changes to this policy

If we change this policy, we will post the new version here with a new date. If the change is significant, we will tell you by email or in radr before it takes effect.