Privacy Policy

Last updated: October 25, 2026 · Unposted and Unposted for Agencies (formerly offered as Hotlisted) are operated by G2 Advisors ("we"); this policy covers both. The marketing site is unposted.ai and the app is app.unposted.ai.

What we collect

How we use it

To run the search or the firm account: drafting and analysis (career and candidate text is sent to Anthropic for processing; under our API terms it is not used to train their models), suggesting companies, finding contacts, and tracking what was sent. We do not sell your data.

Sending email and LinkedIn on your behalf

Outreach is sent from accounts you connect, under your name. You are the sender. Email is delivered through Nylas from the mailbox you connect. LinkedIn invitations, messages, and posts are delivered through Unipile from the LinkedIn account you connect, and only for actions you have confirmed or that your send settings allow. We do not send from a mailbox or a LinkedIn account you have not connected, except the candidate relay: a first-touch path that can send as "Your Name via Unposted" when you have approved that note and have not connected Gmail. Replies to relay mail go to the address on your account.

Review is the default. On a firm account, outreach mode is review unless you change it to auto. In review, a note stays a draft until you approve it. If you turn auto on, notes the product has already drafted can go out from your connected accounts inside the hours and daily caps you set, without a second click. You can switch back to review. On a candidate account, a multi-touch sequence across email, LinkedIn and phone, your choice of channels, follows the first note once a mailbox is connected, and it stops when someone replies. The first note to a person waits for you unless you set first-note sending to auto, which the product does not do until you have sent a first batch yourself. LinkedIn steps on a candidate account stay drafts until you confirm them. A reply, an unsubscribe, or a bounce stops the sequence. An out of office note pauses it, and it resumes. Addresses on the suppression list are not mailed again.

Nothing in the paragraph above is permission to contact someone who has opted out, your current employer, or a company you put on an off-limits list. Those blocks are enforced in the send path.

Connected mailboxes (Gmail & email)

If you connect your email account, through our email infrastructure provider, Nylas, you authorize Unposted to (a) send the outreach messages you explicitly approve, from your account, on your behalf, and (b) read message and thread metadata to detect replies so a sequence stops once someone responds. We access this data only to provide those features. We do not store your Google account tokens (Nylas holds the authorization; we store only a reference to it and your connected email address), we do not use your email data for advertising, we do not sell it, and we do not use it to develop, improve, or train AI/ML models. Unposted's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We retain data obtained through Google APIs only as long as needed to provide reply detection, and never longer than your account's retention period. Disconnect anytime in Settings. This immediately revokes our access and deletes the stored authorization; when you close your account, all associated data, including any Gmail-derived reply data, is deleted immediately.

Connected LinkedIn accounts

If you connect LinkedIn through Unipile, we act within the caps and the send mode above: invitations, messages, and posts you have allowed, and conversation state so we can see a reply. Disconnect anytime in Settings. LinkedIn's own terms restrict automation; you are responsible for the account you connect, as the Terms of Service say.

People you add as contacts

When you, or a recruiter on a firm account, add or discover a professional contact, we process their business contact information solely so you can reach them. Discovery uses Apollo. Anyone who asks not to be contacted is added to a suppression list the send path checks. Recipients can also write to eric.hawthorne@g2advisors.io.

Unposted for Agencies

Candidate information a recruiter uploads is processed for that account only. It is not shared with other customers and it is not sold. Name-blind profile checks run before a confidential pitch is drafted. The agency is the controller of the candidate and contact data it uploads; we process it to provide the account. A template data-processing addendum is at the DPA page. It is a template, not a signed agreement.

Quiet search and off-limits

Domains you mark as protected (your employer, excluded companies, an agency's clients) are enforced in the product so outreach to them is not generated. A block is only as good as the list and the match. Keep the list current.

Cookies and similar tracking

Two sites, two choices. Neither site uses advertising cookies.

Subprocessors

We share data with the vendors that run the service. Each is bound by its own data-protection terms. Hosting and the database are in the United States.

We do not share data with advertisers or data brokers.

Security

Data is encrypted in transit. Customer data is isolated per account at the database (row-level security). Access is limited to operating the service. What we do and do not certify is on the security page.

Retention

We keep account data while the account is active. After a subscription lapses, data stays for 90 days so you can export or resume, and then it is eligible for deletion. Closing an account (Settings → Data & privacy → Close account) stops scheduled sends, cancels any trial or subscription, and deletes the personal data we store. We keep billing identifiers required for tax, and suppression entries that record an opt-out, including the closed account's own email on that desk, so the opt-out is not lost. If you cannot sign in, a request to eric.hawthorne@g2advisors.io is completed within 48 hours for data we store. Copies held by a subprocessor (for example an error report or a paid invoice) follow that vendor's retention, which can outlive the account.

Your rights

Export or close the account from Settings → Data & privacy (candidate accounts and firm accounts). You can request access, correction, deletion, and a copy. We honor GDPR and CCPA requests. We do not sell personal information. Contact eric.hawthorne@g2advisors.io.

Not for children

The service is for working professionals and requires you to be at least 18.

Changes

If we make a material change, we will update the date above and email the account before it takes effect.

Contact

G2 Advisors · eric.hawthorne@g2advisors.io

Privacy Policy · Unposted