Privacy Policy

Last Updated: September 22, 2026  ·  Version 1.1

Referna ("we", "us", or "our") operates the Referna platform, including the meeting preparation service and the Referral Circle application. This Privacy Policy explains how we collect, use, share, and protect your information when you use our services.

By using Referna, you agree to the practices described in this policy.

Referna is a product of InTouch123, Inc.

1. Information We Collect

1.1 Information You Provide

When you sign up or use the Service, we may collect:

• Your name and email address from your chosen sign-in provider, and your Google profile picture if available.
• Your mobile phone number (if provided for WhatsApp-based onboarding or communications).
• Professional information you submit during Referral Circle onboarding, including: LinkedIn URL, company name, website, professional title, role description, one-pagers, case studies, testimonials, and ideal customer profile (ICP) descriptions.
• Any other materials you share with us directly via email, WhatsApp, or through the application flow.

1.2 Information from Google APIs

Upon Google authentication, Referna accesses:

• Google Profile — your name, email address, and profile picture, used for account identity and attribution.
• Google Calendar (read-only) — your calendar events and attendee details, used to generate meeting preparation summaries.

We store your Google OAuth credentials to maintain access you have authorized. You can revoke access through your Google account settings.

1.3 Information from Microsoft APIs

If you choose Microsoft sign-in or connect an Outlook calendar, Referna accesses data under the permissions you grant:

• Microsoft identity — your account identifier, display name, and email address for sign-in, account linking, and communications.
• Full calendar access — event times, titles, attendee names and addresses, response status, and meeting details for availability, meeting qualification, and preparation.
• Limited calendar access — when you choose the availability-only connection, busy time blocks rather than event content. This mode is supported for work or school accounts, not personal Microsoft accounts.

We store Microsoft access and refresh credentials to maintain the connection you authorized. We do not request permission to send mail, edit calendar events, or access your files. The calendar permission requested depends on the connection mode you choose.

1.4 Information from Third-Party Sources

For meeting preparation features, we may look up publicly available professional information about your meeting attendees from LinkedIn and similar public sources, including job titles, company affiliations, and professional backgrounds.

1.5 Information Entered by Authorized Operators

For Referral Circle onboarding, an authorized Referna operator (including AI-assisted workflows operating on our behalf) may enter or pre-fill application data based on materials you provided. You will always review and approve this data before it is used or shared.

1.6 Automatically Collected Information

We collect standard technical data including your IP address, browser type, device type, and pages visited through server logs and analytics tools.

On your first eligible Referna public-page visit from a recognized search, campaign, or referral context, we may retain a minimized first-touch attribution label containing the Referna landing-page path and a broad source category, recognized search engine, or recognized campaign code. A temporary browser-session cookie carries that label until it is associated with your Referral Circle application or discarded under the safeguards described here. The cookie is removed without replacing application data when the application already has an attribution label or the authenticated identity is excluded from attribution. An OAuth callback is accepted only when its signed state is also bound to the browser that started sign-in; a missing or invalid binding clears the browser attribution label, and an anonymous label is also discarded when OAuth fails before Referna can establish the account identity. Once an identity is authenticated, an opaque account-binding token prevents another signed-in account from inheriting the label while association is pending or must be retried. We do not retain the referring URL, query string, search terms, email address, or arbitrary campaign values in that label.

1.7 Cookies, Pixels, and Advertising Technologies

We and our advertising partners use cookies and similar tracking technologies on our website. These currently include:

• Meta (Facebook) Pixel — records events such as page views and completed registrations, together with associated technical identifiers, and shares them with Meta Platforms, Inc.
• LinkedIn Insight Tag — records page views and conversion events, together with associated technical identifiers and, where LinkedIn is able to determine it, professional attributes such as job title, function, seniority, company, and industry. This data is shared with LinkedIn Corporation.

We use these technologies to measure the performance of our advertising, understand how visitors interact with our site, and show relevant Referna ads to people who have visited our website — a practice known as retargeting or remarketing — across Meta platforms such as Facebook and Instagram, and on LinkedIn. Meta and LinkedIn each act as an independent controller of the data they receive, under their own terms and privacy policies. We do not use data obtained from Google or Microsoft APIs, or data derived from Microsoft APIs, for advertising or marketing (see Section 3).

You can control or opt out of this activity through your Meta ad preferences, your LinkedIn advertising settings, your browser's cookie settings, or industry opt-out tools such as the Digital Advertising Alliance and Your Online Choices (EU).

2. How We Use Your Information

We use the information we collect to:

1. Authenticate you and maintain your account session.
2. Read connected Google or Microsoft calendars, according to the permissions you grant, to identify meetings, calculate availability, and generate preparation summaries.
3. Research publicly available attendee information and generate meeting briefings.
4. Build and manage your Referral Circle application, including AI-assisted drafting and pre-fill workflows.
5. Match you with appropriate referral circles based on your professional profile.
6. Communicate with you via email and WhatsApp regarding your application, onboarding, and service updates.
7. Operate, maintain, and improve the Service.
8. Comply with legal obligations.

3. Google API Services — Limited Use Disclosure

Referna's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google user data only to provide and improve user-facing features of the Referna Service.
• We do not use Google data for advertising purposes.
• We do not allow humans to read your Google data unless you have given us explicit permission, it is necessary for security purposes, or we are required to do so by law.
• We do not transfer Google user data to third parties except: (a) as necessary to provide the Service, subject to confidentiality obligations; (b) as required by law; or (c) in connection with a business transfer as described in Section 4.

3.1 Microsoft API Data

We use Microsoft API data only to provide the sign-in and calendar features you choose. We do not use Microsoft API data, or data derived from it (including aggregated or anonymized data), for advertising, targeting, or other marketing. We do not sell, license, or resell Microsoft API data.

For full calendar connections, meeting titles and attendee details may be processed by our AI-assisted meeting qualification and preparation services to produce user-facing briefings. We share this data with service providers only as needed to operate those features, under contractual protections; we do not give those providers independent rights to use it for advertising.

4. Data Sharing and Disclosure

4.1 Within Referral Circles

If you are accepted into a Referral Circle, your professional profile — including name, title, company, website, LinkedIn URL, and professional summary — will be visible to other members of your circle. This sharing is core to the Service and is the primary purpose of Referral Circle membership.

You will review and approve your profile before it is shared with any circle members.

4.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating the Service (e.g., cloud hosting, email delivery, AI-assisted meeting processing, analytics). These providers are bound by confidentiality obligations and may not use your data for any other purpose.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or government request.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to equivalent privacy protections.

4.5 No Sale of Data

We do not sell your personal information or Google or Microsoft API data to any third party.

5. Communications

5.1 Email

We send meeting preparation summaries, application status updates, onboarding guidance, and service notifications to your registered email address.

5.2 WhatsApp

Where you have provided a mobile number and engaged with us via WhatsApp, we may send onboarding messages, application updates, and follow-ups through that channel.

You may opt out of non-essential communications at any time by contacting support@referna.com.

6. Data Storage and Security

Your data is stored using:

• Encrypted transmission (HTTPS/TLS).
• Secure database storage with access controls.
• OAuth token protection for Google and Microsoft credentials.

No method of data transmission or storage is 100% secure. We take reasonable precautions but cannot guarantee absolute security.

7. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide the Service. Disconnecting a calendar removes its stored connection credentials, but does not delete previously generated briefings or your Referna account. To delete your account and associated data, contact support@referna.com. We will complete deletion within 30 days of your request, subject to any legal retention obligations. Contact us if you stop using the Service and want stored Microsoft data removed.

Upon deletion:

• Your Google OAuth token will be revoked; stored Microsoft credentials will be deleted. You can also revoke Referna's Microsoft grant in your Microsoft account.
• Your application and profile data will be removed from active systems.
• Cached or backup copies will be purged on a rolling basis shortly thereafter.

8. Your Rights and Choices

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and data (see Section 7).
• Revoke Google access — through your Google Account permissions settings at any time.
• Revoke Microsoft access — through your personal Microsoft account permissions or your organization's My Apps portal, where available. You may also disconnect a calendar in Referna settings.
• Withdraw WhatsApp consent — by notifying us at support@referna.com.
• Advertising choices — opt out of ad targeting and retargeting through your Meta ad preferences or the opt-out tools described in Section 1.7.

To exercise any of these rights, contact support@referna.com.

9. Children's Privacy

Referna is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or website notice before the changes take effect. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

For questions, data requests, or privacy concerns:

support@referna.com

InTouch123, Inc.
131 Continental Drive, Suite 305
Newark, DE 19713
United States