This policy explains what Dexet collects, why, who we share it with, and the choices you have. It covers two groups of people: students and others who use Dexet, and professionals whose public professional information appears in Dexet.
1. Who we are
DEXET LLC (“Dexet”, “we”, “us”) runs joindexet.com, the Dexet web app and the Dexet browser extension. Dexet helps students find professionals to reach out to, see what they have in common, and write and send one-to-one emails from their own mailbox. Questions about this policy go to our contact form.
2. Information you give us
Account. Your email address and password (stored hashed by our authentication provider), or, if you sign in with Google, your name, email address and profile picture from your Google account.
Profile. What you choose to tell us: school, graduation year, major, clubs, interests, sports and similar background, plus your recruiting goals (target firms, roles, locations, timeline).
Résumé. If you upload one, we store the file and extract your experience, education, skills and interests from it to fill in your profile.
Your outreach. The campaigns you build, the people you add to them, the emails you draft and send (recipient, subject, body), and their status.
Billing. If you subscribe, Stripe collects your payment details. We never see or store your card number; we keep your plan, subscription status and Stripe customer ID.
3. Your mailbox and calendar
Connecting a mailbox is optional. You can use Dexet to find people without doing it.
Browser extension. Mail you send through Dexet goes out from your own mailbox. In Outlook on the web, the extension uses the session you are already signed into to send the drafts you approve. In Gmail, it opens each approved draft in a compose window and you press Send yourself. In both, it tells Dexet which email account the tab is signed into, so your approved mail only goes out from the one mailbox your Dexet account is tied to. In Outlook on the web it also:
checks your most recent inbox messages every few minutes to spot replies and bounces to outreach you sent. A reply to your Dexet outreach is saved with that outreach. Other messages are checked and not kept;
when you open a message from a person (not a newsletter or automated sender), sends that conversation to Dexet so it can show who owes the next reply and suggest a response. This is processed by our AI provider to produce the suggestion and is not stored.
Direct connection. If you connect Gmail or Outlook directly, we store the access tokens encrypted and use them to send the mail you approve, to see replies and bounces to that outreach, and to add meetings you schedule to your calendar.
We read mail only for the features described here. We do not scan your inbox for advertising, and we do not sell mailbox content.
4. Information collected automatically
We use the cookies our authentication provider needs to keep you signed in, plus a short-lived cookie that protects the mailbox-connection step. We do not use advertising cookies or third-party analytics trackers. Our hosting providers keep standard server logs (such as IP address, browser type and request time) for security and debugging. We also record the searches you run and their cost so we can enforce plan limits.
5. Information about professionals
Dexet shows its users information about professionals, mostly people working in finance. If you are one of them, this section is about you.
What we hold. Professional information: name, current and past employers, title and role, location, schools, degrees, graduation year, activities, and a work email address. A work email address may be inferred from your employer’s address format and checked with an email-verification service. It is not necessarily one you published.
Where it comes from. Publicly available web pages (found through search engines and web-search providers), company websites and published bios, public school directories, and email headers our users receive in the normal course of their correspondence.
What we don’t hold. We do not collect sensitive information such as health, financial, criminal or disciplinary records. We do not collect data from LinkedIn.
Who sees it. Only signed-in Dexet users. There is no public profile page and no bulk export. Users contact professionals one at a time, from their own mailbox.
Your choices. Write to us through our contact form and we will stop showing your information to users and add your address to our do-not-contact list. That list is checked before every email sent through Dexet, so no Dexet user can send to you again. You can also ask us what we hold about you.
6. How we use information
To run Dexet: search, match you with people you share a background with, draft emails, send the ones you approve, and track replies.
To enforce plan limits, prevent abuse, and keep mail deliverable (for example, not sending to addresses that bounce or asked not to be contacted).
To bill you and to talk to you about your account.
To fix and improve Dexet.
7. AI processing
Some features send data to AI model providers (currently Anthropic) to produce a result for you. Examples are extracting your résumé, drafting an email, briefing you before a call, or suggesting a reply to a thread. The providers process this data to return the result. Under our agreements with them, they do not use it to train their models.
8. Google user data
Dexet’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google Sign-In gives us your name, email address and profile picture. We use them only to create and identify your account.
Gmail and Google Calendar, if you connect them, are used only to send the mail you approve, to recognise replies and bounces to that mail, and to add meetings you schedule.
We do not use Google user data for advertising. We do not sell it. We do not use it to train general-purpose AI or machine-learning models.
We transfer Google user data to others only to provide the features above (for example, to an AI provider to draft a reply you asked for), when the law requires it, or as part of a merger or acquisition, with notice to you.
People at Dexet do not read your Google data unless you ask us to (for support), it is needed for security or to investigate abuse, or the law requires it.
You can remove Dexet’s access at any time from your Google Account’s security settings.
9. Who we share information with
We do not sell your personal information, and we do not share it with advertisers. We share it only with service providers that help us run Dexet, and only as needed for what they do:
Supabase: database, authentication and file storage.
Vercel and Railway: hosting and background jobs.
Stripe: payments.
Anthropic: AI processing, as described above.
Google and Microsoft: sign-in, and your mailbox and calendar if you connect them.
Serper and Exa: web search, used to find public professional information.
ZeroBounce: checking whether an email address can receive mail.
We may also disclose information if the law requires it, to protect the rights and safety of Dexet, our users or others, or as part of a merger or sale of the business.
10. How long we keep it
We keep your account information while your account is open. You can delete your account from Settings. That removes your profile, goals, campaigns, drafts and connected-mailbox tokens. Some records may remain after that: the résumé file you uploaded, billing records Stripe must keep, and the do-not-contact list (kept so that a request not to be contacted is honoured). Ask through our contact form and we will delete anything that is not legally required.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to opt out of certain uses of it. Use our contact form to make a request. We will not treat you differently for making one. We may need to confirm your identity before we act on a request.
12. Security
Data is encrypted in transit. Mailbox tokens are also encrypted at rest with AES-256-GCM. Access to your data is limited to your account by row-level security in our database. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.
13. Age limit
Dexet is for people 18 and older. We do not knowingly collect information from anyone younger. If you believe we have, tell us through our contact form and we will delete it.
14. Changes and contact
If we change this policy, we will update the date at the top. If a change is significant, we will also tell account holders by email or in the app. Questions or requests: our contact form. See also our Terms of Service.