Privacy and analytics notice

What we collect

Tropis first-party analytics do not use a visitor-recognition analytics cookie, advertising identifier, or persistent ID. We process only the following event-level information:

• Visit time, page path, referring source category, and campaign tags
• Page views, active time, scroll milestones, CTA clicks, and form start, validation, and success states
• Browser, operating-system and device categories, Core Web Vitals, and normalized error types
• A country code derived from the IP address at request time, plus bot or security-scanner classification

We do not store full IP addresses, precise location, email addresses, or form contents in the analytics system.

After optional consent, Google Analytics may process the page path, language, non-identifying campaign categories, and page, CTA, form, and lead-generation events. We do not send Google email addresses, form values, lead IDs, recipient-level campaign tokens, or complete query strings. Advertising storage, advertising user data, and advertising personalization remain disabled.

When allowed, Google Analytics may use _ga-family first-party cookies and a pseudonymous browser identifier for up to 180 days. Google may transiently process an IP address and process device, browser, and approximate-location information to produce statistics, including in countries where Google operates. See Google’s Analytics data safeguards.

Country-code lookup uses DB-IP Country Lite data (CC BY 4.0).

Email and enquiries

Landing-page links in emails from Tropis may include campaign tags so we can measure aggregate visits and conversions. We do not put a recipient’s email address or name in those links, and we do not use email-open pixels or individual session replay.

When you arrive through a Tropis campaign link, a signed campaign value may be passed briefly in the URL fragment without identifying the recipient. Fragments are not sent in server requests, referrers, or proxy logs and are removed from the address bar as soon as the landing page reads them. The value is valid for no more than 30 minutes, contains no email address, name, or recipient ID, and is not stored as an analytics cookie. We do not process it when GPC, DNT, or an analytics opt-out is active.

When analytics is allowed and collection starts, or when you open the buyer-scan form, Tropis may use an HttpOnly security cookie for the browser session to reject forged cross-site submissions. It is not used for behavioral measurement or returning-visitor recognition and expires with the browser session. We do not issue it for analytics when GPC, DNT, or an analytics opt-out is active.

If you submit a work email for a buyer scan or enquiry, it is handled separately from analytics to deliver and respond to the service you requested. You may ask us to delete it.

LinkedIn Connector

Tropis LinkedIn Connector runs when you start a connection from the Tropis sender-account screen. It shows the name, profile image and profile URL of the LinkedIn account signed in to Chrome so you can verify the account. The name and image are processed only in your browser. The extension does not read message content or browsing history.

After you select Connect this account to Tropis and grant the requested permission, the extension sends the current LinkedIn session authentication information, member ID and profile URL for same-account verification, and browser User-Agent to Tropis over HTTPS. Tropis checks the account and relays the authentication information needed for the connection to Unipile in France. Raw session authentication information is not saved in extension storage or Tropis databases or logs. Temporary confirmation state is discarded when the request or extension process ends.

Optional automatic connection maintenance runs only when you enable it separately. While Chrome can run, it checks connection status and, when reauthentication is needed, verifies that the current LinkedIn account matches the existing connection before sending session authentication information again. A logout, different account or additional verification requirement pauses automatic recovery. This feature cannot run while your computer or Chrome is off.

For automatic connection maintenance, Chrome local storage holds only the sender-account ID, a restricted Tropis status endpoint, an expiring and rotating device token, and bounded retry state. It does not store LinkedIn session authentication information, the displayed name or image, or message content. Turning off automatic connection maintenance in Tropis revokes device authorization; the extension removes its local registration when it detects the revocation.

Unipile processes this information to maintain the account connection, report its status and provide user-requested messaging features. Separately from the extension, the Tropis service retains message content and sending/receiving status needed for Inbox and follow-up management, connected account identity and status, and security/support audit records in the relevant workspace. For Unipile data handling and subprocessors, see its Privacy Policy.

Disconnect the account in Tropis sender settings to delete its Unipile connection and stop new synchronization or sending through that connection. Removing the Chrome extension alone does not disconnect an account already connected to Tropis. Existing business and audit records are not automatically deleted by disconnection; you can request deletion using the contact below. You can also end the relevant session in LinkedIn session settings.

Personal data handled by the connector is used only to provide or improve this account-connection feature. It is not sold or used for personalized advertising or creditworthiness. Transfers are limited to necessary service delivery through Unipile, security or legal obligations. Human access is limited to specific user consent for support, security investigations or legal obligations. This use and transfer adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Retention

The signed email campaign attribution value becomes invalid after no more than 30 minutes. Individual analytics events are kept for up to 30 days, then deleted or reduced to daily anonymous statistics. Anonymous aggregates are kept for up to 25 months to compare service trends. Enquiry information is kept only as long as needed to handle the request and maintain necessary business records, then deleted or anonymized.

Consented Google Analytics event and user data are configured for a maximum retention period of 14 months. You can withdraw consent below at any time.

Opt out of analytics

You can turn off first-party aggregate analytics at any time below. Tropis also honors a browser Global Privacy Control (GPC) or Do Not Track (DNT) signal as an analytics opt-out.

Optional Google Analytics

Google Analytics is not loaded until you allow it below. Declining does not change access to the site or buyer-scan form.

Contact and your choices

For access, correction, deletion, or questions about this notice, email support@tropis.ai.