Privacy Policy

PhewDo, a sole proprietorship owned by Khalid Al Rashid, registered at Office 1204, Innovation Hub, Dubai Internet City, Dubai, UAE ("we," "us," or "our"), operates the PhewDo platform at phewdo.com, including all associated browser extensions, APIs, and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using PhewDo, you agree to this Privacy Policy.

Information We Collect

1.1 Account Information

When you register for a PhewDo account, we collect:

• Personal identifiers: Full name, email address, and password.
• Billing information: Payment details processed through our payment gateway (we do not store full card numbers).
• Organization details: Company name, role, and team size (if provided).

1.2 LinkedIn Account Data

To power your outreach campaigns, we collect:

• LinkedIn session cookies: Authentication tokens (li_at, JSESSIONID) synced via our Chrome extension.
• LinkedIn credentials: Email address and password associated with your LinkedIn account, provided voluntarily for proxy-based session management.
• LinkedIn profile data: Your LinkedIn profile information used to personalize campaigns.

1.3 Campaign & Prospect Data

• Campaign configurations: Outreach sequences, messaging templates, scheduling preferences, and targeting criteria you create.
• Prospect data: Names, LinkedIn profile URLs, job titles, companies, and other publicly available LinkedIn data of individuals you target in campaigns.
• Engagement data: Connection acceptance rates, message response rates, and campaign performance metrics.

1.4 Usage & Technical Data

• Browser type, device information, IP address, and operating system.
• Pages visited, features used, timestamps, and session duration.
• Error logs and performance data for service improvement.

How We Use Your Information

We use collected information for the following purposes:

• Service delivery: To execute your LinkedIn outreach campaigns, send connection requests, and deliver messages on your behalf.
• AI-powered features: To qualify leads, generate personalized messages, and optimize campaign performance using SHREEOS Intelligence.
• Account management: To authenticate your identity, manage subscriptions, process payments, and provide customer support.
• Service improvement: To analyze usage patterns, diagnose technical issues, and develop new features.
• Communication: To send transactional emails, service updates, and (with your consent) marketing communications.
• Legal compliance: To comply with applicable laws, respond to legal requests, and enforce our terms.

LinkedIn Data & Cookies

3.1 Cookie Collection

Our Chrome extension captures LinkedIn session cookies from your authenticated browser session. These cookies are transmitted over encrypted channels (TLS) and stored in our database with AES-256 encryption at rest.

3.2 Credential Storage

If you provide LinkedIn credentials (email and password) for enhanced session management, they are encrypted using industry-standard encryption before storage. Credentials are used exclusively for re-authenticating LinkedIn sessions when cookies expire.

3.3 How LinkedIn Data Is Used

• Session cookies authenticate API requests to LinkedIn on your behalf.
• Proxy servers route LinkedIn requests to distribute activity naturally and adhere to rate limits.
• We do not sell, share, or transfer your LinkedIn credentials or cookies to any third party.
• All LinkedIn automation respects daily limits and mimics natural human behavior patterns.

3.4 Revoking Access

You may revoke LinkedIn access at any time by uninstalling the Chrome extension and deleting your stored credentials from your PhewDo dashboard. Upon revocation, we delete your LinkedIn cookies and credentials within 24 hours.

AI & Automated Processing

4.1 SHREEOS Intelligence

PhewDo uses an AI system branded as SHREEOS Intelligence for:

• Lead qualification: Analyzing prospect profiles to score and prioritize leads based on your ideal customer criteria.
• Message generation: Creating personalized outreach messages, follow-ups, and responses using AI language models.
• Campaign optimization: Recommending optimal sending times, sequence structures, and targeting adjustments.

4.2 Automated Decision-Making

AI-generated content is sent on your behalf through your LinkedIn account. While our AI aims for high-quality, relevant messaging, you are responsible for reviewing and approving message templates before campaign activation. PhewDo provides tools to preview all AI-generated content.

4.3 Data Used by AI

SHREEOS Intelligence processes prospect data (publicly available LinkedIn profile information), your campaign configurations, and historical engagement data. We do not use your data to train general-purpose AI models shared with other customers.

Data Storage & Security

5.1 Infrastructure

Your data is stored on Supabase, a secure, SOC 2-compliant database platform built on PostgreSQL. Supabase provides:

• Encryption at rest and in transit (TLS 1.2+).
• Row-level security ensuring data isolation between customers.
• Automatic backups and point-in-time recovery.

5.2 Security Measures

• All sensitive data (LinkedIn credentials, session cookies) is encrypted using AES-256 before storage.
• Access to production databases is restricted to authorized personnel only.
• We conduct regular security reviews and vulnerability assessments.
• API communications are secured with HTTPS/TLS encryption.

5.3 Data Processing Addendum

For a detailed description of our technical security controls, tenant isolation architecture, sub-processor obligations, breach response procedures, and your audit rights as a data controller, please refer to our Data Processing Addendum (DPA).

5.4 Data Location

PhewDo is operated from Dubai, UAE. Your data may be stored on servers located in regions where our infrastructure providers operate (including the United States and the European Union). By using our Service, you consent to the transfer of data to these regions, subject to appropriate safeguards.

Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Database hosting, authentication, and storage.
• Proxy providers: Residential and datacenter proxies for LinkedIn session routing (proxies receive only IP-level traffic; no personal data is shared with proxy providers).
• Payment processors: For processing subscription payments (we do not store full payment card details).
• Analytics tools: For understanding usage patterns and improving our service.
• AI model providers: For powering SHREEOS Intelligence features (prospect data is processed but not retained by model providers beyond the request lifecycle).

We require all third-party providers to maintain appropriate data protection standards. We do not sell your personal data to any third party.

Data Retention

• Account data: Retained for the duration of your active account plus 90 days after account deletion.
• LinkedIn credentials & cookies: Deleted within 24 hours of revocation or account deletion.
• Campaign data: Retained for 12 months after campaign completion, then automatically archived. Archived data is permanently deleted after an additional 12 months.
• Prospect data: Retained as long as your account is active. Deleted within 30 days of account deletion.
• Usage logs: Retained for 6 months for debugging and analytics, then aggregated and anonymized.

You may request early deletion of your data at any time by contacting us.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for specific purposes.
• Withdraw consent: Withdraw consent for data processing where consent is the legal basis.
• Restriction: Request restriction of processing under certain circumstances.

To exercise any of these rights, contact us at huh@phewdo.com. We will respond to your request within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

This Privacy Policy was last updated on April 1, 2026. We may update this policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date.