Your prospects, your messages, your accounts. Handled plainly.
Opusend works with your prospects, your messages and your LinkedIn and email accounts. Here is exactly where the data goes and what we do with it.
Your browser does the work. Your CRM has a backup.
Two ideas keep you in control.
The work happens in your browser
The extension reads LinkedIn, Sales Navigator and Gmail inside your own logged-in session, on your own machine. Two things run on our server instead: a Google account you connect with Connect Google, which sends the emails you approve and, if you turn Calendar on, books your meetings; and a mailbox you connect with a password, where our server logs in to that mail server to send your emails and, if you give its IMAP server, to check its inbox for replies and bounces from your leads.
Your CRM is your data
The prospects, messages and stages you save live in your workspace in our database, backed up every night and kept for 30 days, so your pipeline survives a lost device. We store it to run the product, never sell it, never share it between customers, and you can export or delete it whenever you like.
No certification we do not hold
We do not have a SOC 2 or ISO certification, and we will not claim one. What we can tell you is how the data flows and what we do with it, below.
Four plain protections.
No jargon, no badges.
Encrypted in transit
All traffic between the extension, your browser and our servers uses TLS. Nothing is sent in the clear.
Secrets kept locked
Account passwords are stored only as one-way hashes. A mailbox password is encrypted with AES-256-GCM, with its key kept outside the database. Every deploy proves last night's backup restores.
Scoped to your workspace
Each workspace's data is scoped to that workspace. We never show one customer's prospects to another.
You hold the keys to send
Nothing goes out until a person presses send or starts a campaign. Automation is opt-in and runs inside the limits you set.
Only on LinkedIn, Sales Navigator, Gmail and our own pages.
The extension never runs on any other site you visit.
LinkedIn and Sales Navigator
It reads the prospect details you choose to save, reads a conversation you open to detect replies, and runs the actions you start or schedule: connect, message and follow-up.
Google, when you connect it
We ask for permission to send, plus your email address, to send the emails you write and approve, and, if you turn Calendar on, for three Calendar permissions to offer free times, book your meetings and find meetings with your leads. Our server keeps the token encrypted with a key outside the database and revokes it at Google when you disconnect the account or close yours. We do not read or store your mailbox through the Gmail API.
What it reads in Gmail
In your browser, it reads the thread you open to recognize the prospect and detect a reply. If the sender is one of your leads, that conversation is added to the lead's history in your CRM; if not, nothing from it is kept. It also checks the senders of unread emails for replies from your leads, and drops every address that is not a lead's.
A mailbox connected with a password
Stored encrypted with AES-256-GCM, with the key kept in a separate file outside the database and its backups. Used only to log in to the mail server you named, to check it when you add it and then to send the emails you approve or schedule, within the daily limit. If you give its IMAP server, it also checks that inbox read-only for replies and bounces from your leads, keeping the first 8 KB of a reply and nothing else. The password is never shown back, never sent to your browser and never written to our logs. Removing the mailbox deletes it.
AI that writes the drafts
The prospect and company text, and the part of your own profile a message is written from, go through our server to Anthropic to generate your drafts and reply suggestions. That includes what you sell, your saved customer stories and materials, and your signature. It is never used to train models. Our use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.
Limits and opt-outs, built in.
Opusend is a CRM and a workflow that runs from your own accounts. Here is what that means in practice.
From your own accounts
LinkedIn steps run in your own browser, on your own login. Emails go from your own Gmail or a mailbox you connect. Opusend has no mailboxes or sending domains of its own to send your messages from.
One person, one message
Each message is written for one person, from what Opusend read about them, and goes to that person alone, in its own thread. No merge fields.
Daily limits with hard ceilings
25 invitations, 50 messages and 30 emails a day by default, under ceilings of 40, 70 and 30 that no setting can raise, inside your working hours, with a pause after every action.
Opt-outs honoured
A reply that clearly asks you to stop, in English, French, German, Dutch, Spanish or Italian, moves the lead to Blacklisted before any draft, and nothing else goes to them. People and companies on your blacklist, and the customers you list, are skipped everywhere.
No lists or data for sale
Opusend has no contact database and sells no data. A work email is looked up only for a lead you chose, when you press Find emails, and your CRM is never shared with another customer.
Your prospecting, your responsibility
You choose who to contact, and you follow the anti-spam and data protection rules of the countries they are in. Our Acceptable Use Policy rules out bulk unsolicited messages and purchased or harvested email lists.
You are the controller. We are your processor.
For the prospects you save, we process data only on your instructions.
Your rights
Access, correct, export or delete your data from the product at any time, or ask for full account deletion. We complete it within 30 days of a verified request.
International transfers
Some providers, Anthropic included, process data in the United States. Where the law requires it for EEA and UK personal data, each transfer is covered by the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, as our Subprocessors page lists provider by provider.
A Data Processing Agreement
Part of our Terms of Service, so it covers you from the day you sign up, with nothing to sign. It is on our legal pages, with the list of subprocessors.
Your accounts on other platforms
Automation on LinkedIn can conflict with its terms, and platforms may restrict accounts they believe are automated. Opusend builds in daily limits, paced sending and automatic stop signals to reduce that risk. It cannot remove it, and you stay responsible for your own accounts.