Privacy policy.

1. Who we are and what this covers

Handshake and this website are operated by SRD MEDIA GROUP INC. (“we”, “us”, or “our”). This policy covers the website, the Handshake app (including development testing), its optional account and Pipedrive services, and correspondence you send to us. The app is in development and is not yet on the App Store. Feature availability depends on the build you use. We will update this policy when our practices change.

For privacy questions or requests, contact the Privacy Officer at the company address below.

2. Your local networking workspace

The app stores information you enter on your iPhone: your profile and contact card, sales focus, events and goals, people and selected photos, relationship context, conversation prompts, notes, needs, opportunities, next steps, follow-up dates, achievements and preferences. Fictional sample data is kept separately from your real entries.

These local features do not automatically send your workspace to SRD MEDIA GROUP INC. We cannot remotely read, restore or delete an independent local workspace. Talking points and message drafts are editable templates, not AI research. The app does not scrape LinkedIn, discover attendee lists, record conversations or scan your address book.

3. Photos, contact cards and sharing

Apple’s photo picker lets you select an image; the app saves a resized copy. A contact QR code directly contains the contact details you choose to include, so anyone who scans it can read them. Shared contact files can include a photo. These cards exclude private event notes and conversation context.

Saving a person to iPhone Contacts opens Apple’s editor for you to review and confirm. Contacts may then sync through the account configured on your device. Handshake does not read the whole address book, and later changes do not synchronize automatically between the apps.

CSV exports, contact files and follow-up drafts leave the app only when you choose a share destination. Recipients and other services control the resulting copies. Review content and recipients before sharing; collect and use other people’s information lawfully and with appropriate permission.

4. Backups, retention and deletion on your device

Manual backups contain your profile, photos, events, contacts, conversation history, follow-ups, scores and preferences. Real-workspace backups also include imported CRM contact references and can preserve account-scoped transfer history, reviewed draft snapshots and recovery receipts. A transfer snapshot may include wording you did not select for sending; treat the full backup as private. Credentials, editable CRM drafts and App Store entitlements are excluded.

Backups are readable files, not files separately password-protected by Handshake. Choose a private Files destination. If you choose iCloud Drive, Apple handles the transfer and storage. Check upload completion in Files; Handshake’s save receipt does not prove that upload has finished. There is no automatic cloud backup or continuous workspace sync.

Local information remains until you remove it through available controls or delete the app. A restore may retain an earlier workspace as a recovery copy. Device backups may include app data depending on your Apple settings. Delete unwanted backups and exports separately; deleting Handshake does not remove copies in Files, iCloud, Contacts, messages or another service.

5. Purchases

App Store subscriptions are not yet live. When available, Apple will process payments and the app will use verified on-device transaction information to determine Pro access. We do not receive payment-card details. Apple handles its payment records under its own policies. Deleting the app does not cancel a subscription.

6. Website and support information

This website has no account form, mailing-list form, advertising pixels or analytics scripts. Its assets and fonts are served without third-party embeds. Hosting and security services necessarily process technical requests such as IP addresses, requested URLs, browser information and request times to deliver pages and protect the service.

The public website is hosted by Cloudflare. Cloudflare operates a global network and information may be processed outside Canada. Its handling of service data is described in its privacy policy. We do not use this traffic information to advertise to you. This site does not set application cookies; hosting security features may use necessary cookies.

If you contact the company, we use your contact details, message and any attachments to respond, troubleshoot or address a privacy request. Our email provider is Apple iCloud Mail; provider processing may occur outside Canada. Avoid sending private contact lists, full workspace backups, passwords or verification codes. We retain correspondence only as needed to resolve the matter, manage related follow-up and satisfy legal obligations, then delete or de-identify it. Provider backup and security records follow the provider’s retention processes; deletion may not be immediate in those systems.

7. Optional Apple and LinkedIn accounts

Local event planning, briefings, notes and exports do not require a Handshake sign-in account. If you choose Continue with Apple or Continue with LinkedIn, the provider authenticates you and shares the information you authorize. We do not receive your provider password. Signing in does not upload or synchronize your networking workspace.

Our account service stores a provider identifier, a Handshake account identifier, your name and email when supplied, email-verification information, session records and relevant authentication timestamps. Apple may provide a private relay email address. LinkedIn may provide a profile-photo URL, which the service stores. Photo data is downloaded to your phone only when you select it for your local profile. You separately review which name, email or photo to copy into your profile and contact card.

Apple and LinkedIn accounts remain separate, even when they use the same email address. LinkedIn sign-in does not provide access to your connections, other members’ profiles or messages. We discard LinkedIn provider tokens after verifying your identity. We retain encrypted Apple authorization tokens to support account verification and revocation. Your Handshake session is kept in device-only Keychain and excluded from app exports and backups. The account service stores a hashed session credential; sessions expire after 30 days unless ended sooner.

Use You → Account → Delete sign-in account to request deletion of the signed-in account. After required provider revocations succeed, this removes its active server record, sessions, connected Pipedrive credentials and server transfer history. If deletion cannot finish, the app reports an error and you can retry or contact us. Signing out only ends the current session. Account deletion does not erase local events, saved profile copies or exports, cancel an Apple subscription, or delete your Apple or LinkedIn account. You can also remove Handshake from your provider’s connected-app settings. Deleting one provider’s Handshake account does not delete a separate account made with the other provider.

8. Optional Pipedrive connection

Pipedrive requires a separate authorization from your signed-in Handshake account. Our service stores encrypted Pipedrive credentials and the connected workspace, company and user identifiers so it can perform your requested actions. The provider’s consent screen explains its permissions; Handshake uses a restricted set of contact, note and task operations.

For an import, your name search and the selected contact request pass through our service to Pipedrive. The preview can include name, company, role, email and phone when available. Only after you confirm do these details and a CRM reference become a local Handshake contact. Import does not copy CRM notes, deals, messages or custom fields.

For a handoff, you review a new or existing CRM contact and choose whether to include email and phone for a new contact, a conversation note, and a follow-up task with an optional date. Selected information passes through our service to Pipedrive. Private context, reasons to connect, points and unrelated conversations are not automatically sent. You can edit the wording before sending. Tasks do not send invitations or email. Pipedrive and your workspace permissions determine who can access records once saved there.

We process search terms, contact details, notes and task text in memory to service the request; our application database does not store these request or response bodies. To prevent duplicate sends and support recovery, it retains the account/workspace association, operation and contact identifiers, request fingerprints, result status and timestamps. Your phone separately retains transfer history, including reviewed draft snapshots. Imports and handoffs are copies, not continuous or two-way synchronization.

You → Pipedrive → Disconnect Pipedrive revokes this Handshake account’s CRM access across devices. Transfer history remains until account deletion so a reconnection does not resend completed work. A failed revocation may retain encrypted credentials until you retry or obtain support. Disconnecting or deleting the Handshake account does not remove records already stored in Pipedrive or local contacts you imported. Manage those copies in their respective apps.

9. Account hosting, retention and recovery

Render hosts our account and CRM service in Ohio, United States. Network and hosting providers process technical information needed to deliver and secure requests, such as IP addresses, request timing and connection details. Information processed outside Canada may be subject to the laws and lawful-access requirements of that country. See Render’s privacy policy, Apple’s privacy policy, LinkedIn’s privacy policy and Pipedrive’s privacy policy for their own handling.

We retain account identity and server transfer history while the account exists, until a successful deletion request. Sign-in attempts and delivery tickets are short-lived; expired sessions and attempts are removed during service cleanup. Hashed Apple notification receipts are kept for up to 30 days to avoid processing a notification twice. Encrypted authorization data may remain while a connection or required revocation is unfinished.

Our application logs use operational status and bounded error categories, without request bodies, account identity, provider credentials or callback URLs. The current Render dashboard log window is seven days. Provider security and infrastructure records are subject to the provider’s own retention processes; this is not a promise that every provider record is erased in seven days.

We make daily restricted database exports for recovery. Application-managed exports older than seven days are removed during hourly checks while the service is running, or after it restarts. These exports exclude active sessions and pending sign-in attempts but may temporarily retain deleted account information and encrypted authorization records. Render separately maintains encrypted disk snapshots under its own retention process. Deleting an active account does not immediately erase every backup or provider snapshot. Backup access is restricted to recovery and operations. Our application recovery exports require an operator review before account or CRM access can resume.

These server backups do not contain your complete networking workspace and cannot restore local-only events or notes. Keep your own current private app backup.

10. Security, disclosures and your choices

We use reasonable safeguards appropriate to the information handled. No storage or transmission method guarantees absolute security. Protect your device, Apple Account and exported files. We may disclose information we hold to service providers needed to operate the service, to comply with a legal requirement, or to protect rights and security. We do not sell your information or use networking records for advertising.

You may request access to, correction of, or deletion of personal information held by the company, withdraw consent where applicable, or raise a concern. We may need proportionate verification of your identity. Legal retention duties may limit deletion; we will explain applicable limitations. We cannot retrieve or erase files held solely on your device or copies independently held by recipients. You may also contact the Office of the Privacy Commissioner of Canada or another regulator with jurisdiction.

Handshake is intended for professional networking and is not directed at children. If you believe a child has sent us personal information, please contact the company so we can address it.

11. Contact and policy updates

Privacy Officer · SRD MEDIA GROUP INC.

Support and privacy email: support@withhandshake.app. You can also send requests to our company mailing address.

We will identify changes with an updated date on this page and provide additional notice when required. The public release policy will be checked against the features actually enabled at launch.