Extrovert

The packaging settles it, which is the reference test this index applies. Unlimited generated comment drafts appear on every tier including the cheapest, the pricing page leads with the line that suggestions are included on all plans, and the value proposition is stated as time: what took ten hours now takes one. Remove the drafting and what remains is a filtered feed and a prospect list, which is not what the vendor sells or what the tiers meter. Contrast the vendor in this same category whose entry tier ships with no generated content at all and is sold as complete; here there is no such tier.

At the top of the band on an unconditional approval gate that is written into the product's own three step explanation rather than into a policy. The third step reads: review each suggestion, edit if needed, approve or skip, and nothing posts or sends without you. The engagement page repeats it. Unconditional rather than configurable is the stronger form and it is the reason this sits above the rest of its category.

Held off the top for the usual absences, no audit trail, no withholding guardrail, no risk based escalation, and for one gap specific to this product: paid tiers add commenting and messaging on a teammate's behalf, plus managed accounts, so the person approving and the person whose name appears are not always the same. The approval promise is written from the operator's side and does not address the account owner's.

Generation is the product and the system behind it is undisclosed. No model, provider, family or version is named anywhere across the pages read, no accuracy or quality measure accompanies the drafting, and no fallback is described for a draft that misreads a post.

What is published is configuration rather than disclosure: a writing style per seat, a personal context per seat, and draft customisation on paid tiers, all of which describe how the output is shaped without saying what shapes it.

Third party validation exists and vendor evidence does not. Profiles on two review platforms are linked from the pricing page with rating badges, a launch platform badge is displayed, and the claim that hundreds of teams use the product daily appears without attribution. Against that, the pricing page and the product page carry no named customer, no logo and no case study between them.

Four headline figures sit on the product page covering reply rates, reactivated stalled deals, connection acceptance and impressions, and all four are animated counters that did not resolve on retrieval, so the numbers themselves could not be read. That is recorded as a retrieval limit rather than an absence, and it also means no methodology, sample or period could be checked. A use cases page exists and was not read this pass.

The contrast inside the vendor's own material is what makes this conspicuous. Its consent record keeping for its own marketing list is unusually rigorous, storing the email address, the exact consent wording, the timestamp, the page and form placement, the referral and campaign, and stating that a new resource request will not be used to bypass a prior unsubscribe. For the messages its customers send, nothing.

No consent standard, no opt out mechanic, no suppression list, no regional filtering, and no reference to any electronic communications rule that might govern an unsolicited direct message. The vendor documents its own duty to its subscribers precisely and places none on the buyer messaging strangers.

Current at March 2026 and structurally complete on the surface: legal bases enumerated for European and British users, rights across sixteen named United States jurisdictions plus Canada, Australia, New Zealand and South Africa with the relevant regulators named, standard contractual clauses cited for transfers, and a stated retention ceiling of six months past account termination, which is an outer bound most of this index does not offer.

The browser extension section is the most detailed disclosure of its kind here, enumerating each permission with its purpose and publishing a list of what the extension does not collect. What holds it at this grade is a categories table that contradicts the document around it. It records biometric information and education records as collected and as disclosed to third parties, on a product that comments on posts.

It records geolocation as not collected while the body describes collecting precise device location, and commercial information as not collected while the body lists payment card numbers. No officer, no representative, no sub processor is named beyond service categories, and no processing agreement is mentioned.

No database is purchased, licensed or resold, and the targets are people the operator chose to track, which is the low exposure side of this axis. What sits against it is the depth of what is ingested about them. The published definition of profile data runs to full name, photograph, headline, positions and employers, email, phone, summary, detailed work history, education, skills and endorsements, certifications, languages, the list of connections, recommendations given and received, posts and articles, comments made, engagement received, group memberships, event attendance, companies followed, location, topics of interest, and information synced from external calendars and contact books.

The vendor adds candidly that this may include material revealing racial or ethnic origin, political opinions and religious or philosophical beliefs where visible on a profile. For the person in that record there is no notice, no lookup and no removal route, and the policy addresses the account holder throughout rather than the people being tracked.

At the bottom of the band, and the vendor is the source for every fact that puts it there. Its own privacy notice states that on connecting an account the extension reads all cookies from the professional network's domain, names the authentication and session cookies specifically, and transmits them to the vendor's servers to establish and maintain that session inside the platform.

It then describes retrieving the operator's profile by calling the network's internal interface with those cookies. That is server side operation on a borrowed session credential, which is the exposure this axis exists to measure, and features on the paid tiers depend on it: delayed posting, acting on a teammate's behalf and managed accounts. Three things keep it out of the lowest band and all three are real. No account rotation or multiplication is sold.

No evasion, undetectability or limit bypassing language appears anywhere. And every action is human approved, so volume is bounded by attention rather than by a scheduler. The published mechanics are also the fullest in this category by a distance, and the footer carries an explicit statement that the vendor is neither associated with nor endorsed by the network.

The tension to weigh: the vendor's own writing positions it as the option that avoids account risk entirely, and the architecture underneath is the same session custody that creates that risk elsewhere.

The training question is unanswered in every direction. Nothing states whether the operator's approved drafts, their configured writing style, or the profile and post content of the people they track are used to train or improve any model, and no tenant boundary is described.

The one clause that touches it runs the other way: the policy reserves the use of personal information for the vendor's own business purposes including internal research for technological development and demonstration, and states that this is not considered a sale. On a product whose core asset is a corpus of approved messages written in identified people's voices, aimed at identified recipients, the silence is the finding.

Nothing impersonates a person. The account is the operator's own, the name is real, there is no persona and no synthetic voice, and a human reads and approves every item before it appears. What is manufactured is attention. A comment's entire communicative value is that someone read the post and had a thought about it, and here the thought is generated and the reading is a review conducted in batches; the vendor's own framing is staying personally in touch with hundreds of people in about fifteen minutes a day.

The comment is also published under the operator's real name on the recipient's own post where their whole network reads it, which is the most public surface any generated content in this index reaches. A top tier feature described as reaching silent prospects is named without explanation. Article 50 of the European artificial intelligence regulation goes unmentioned.

Integration appears once, as a tier bullet reading application programming interface integrations on the middle and top plans, with no named system, no object mapping, no authentication model and no developer documentation behind it. A knowledge centre runs on its own subdomain and a browser extension is published on the official store.

No system of record connector is named anywhere on the pages read, which matters because the product generates engagement history and prospect warmth signals that have no described route into a pipeline. A third party directory records the product as having no interface at all, which conflicts with the vendor's own tier bullet and is worth resolving before relying on either.

At the bottom of the band on a plainly stated posture with no options in it, which is the established reason for this grade rather than the one below: servers are stated to be located in the United States, with a clear warning that customers accessing from elsewhere have their information transferred there. The transfer mechanism is named alongside, being the European Commission's standard contractual clauses, with the text offered on request.

Held down because there is no region choice, no cloud provider named, no sub processor list beyond service categories, and no European option for a product whose customers are transmitting professional network session credentials across the Atlantic.

The platform receives and stores the authentication and session cookies for its users' professional network accounts, holds them server side to maintain those sessions, and can act on a teammate's account. That is the most sensitive access any product in this category requests.

Against it, no certification of any kind is claimed, no auditor, report, audit period, trust page, status page, penetration test or vulnerability disclosure route was located, and the security section of the privacy notice is a single boilerplate paragraph asserting appropriate and reasonable measures before disclaiming any guarantee. Graded on the precedent already set in this category for a vendor holding live authenticated sessions with no documented control set.

Credit where it is due and it does not move the grade: the extension's own data handling is documented in unusual detail, and the vendor states that the password is never stored locally and that authentication runs on a signed token.

Three tiers priced per seat at 29, 49 and 75 dollars a month billed annually, with a stated 25 percent annual saving against monthly, and a full comparison matrix that renders every gate with its actual number rather than a tick. Prospect ceilings of 250, 500 and 1,000. Campaigns and lists capped on the entry tier and unlimited above it. Writing styles and personal contexts at one, two and unlimited per seat. Direct message suggestions absent, capped at fifteen a day, then unlimited.

Topic monitoring at three then ten. A ten day trial with no card on every tier and self serve registration throughout. Around it, a published agency programme at a stated twenty percent lifetime discount, and volume pricing above ten seats routed to a conversation. No quote only ceiling stands between the ordinary buyer and a purchase. The one unpriced item is a done for you service sold separately, which does not decide the software bill.

Governing terms are published and the retention position is better than most: the notice states that no purpose within it requires keeping personal information longer than six months past termination of the account, which is a stated outer bound where this index usually finds silence. Account deletion is available on request with the usual carve outs for fraud, legal claims and backup archives, and a right to obtain a copy of the information previously shared is enumerated.

What is absent is a product level export. No mechanism is named anywhere for taking out the prospect lists, campaign configuration, writing styles, engagement history or the warmth signals that accumulate, which are the assets a departing customer would actually want, and a data subject right is not the same thing as a working export.

No electronic mail is sent, so most of this axis is inapplicable and the grade records what is knowable with that context. The one volume control published is a ceiling of fifteen direct message suggestions per seat per day on the middle tier, and the observation worth carrying is what happens to it: the top tier removes the ceiling entirely. The only published limit on messaging volume is therefore a commercial gate rather than a protective one, and it is lifted by paying more.

Comment drafts are unlimited on every tier with no stated posting cap at all, and delayed posting appears as a top tier convenience rather than as a described pacing discipline. No rate, threshold, monitoring or degradation response is published anywhere.

At the top of the band, and the sizing statement is genuine rather than rhetorical: the tier ladder is denominated in prospects tracked, at 250, 500 and 1,000, so a buyer can locate themselves on it by the size of the list they intend to nurture. An agency track is published with its own page and its own discount, and a done for you service is offered separately. What is missing is any statement of who the buyer is.

No headcount band, no role definition, no vertical, no geography and no ceiling appears on the pages read, and no company address or country of establishment is published anywhere on the site, which is an unusual omission for a vendor selling into European jurisdictions. Use case and agency pages exist and were not read this pass.