LinkedIn and email access

Outreach goes out from your own accounts, because that is what works. Prospects see your name, your email, and your LinkedIn profile. This page explains exactly what access Spencer asks for, how it is protected, and how to take it back.

Email

Connect the Gmail or Outlook account outreach should come from. This is a standard Google or Microsoft sign in; Starlight never sees your email password. The connection is used to send messages and to read replies to those messages. You can disconnect from Connectors at any time, or from your Google or Microsoft account.

Calendar

Connect Google Calendar or Outlook Calendar so booked meetings land where you will see them, and so you are never offered a time you are busy.

LinkedIn

LinkedIn has no equivalent sign in for a service like ours, so you share your LinkedIn login with Starlight the same way you would hand it to a consultant running your LinkedIn. You enter it once, in onboarding or later from Connectors. Spencer signs in for the first time with you on your kickoff call, from his own browser, and runs the outreach there.

• Only Spencer uses it. Nobody else at Starlight signs in to your account
• Your login is encrypted the moment you save it and is never shown back in the portal. Spencer reveals it only when he needs to sign in, and every reveal is written to an audit log
• Once he is signed in, the browser session is saved encrypted too, so he does not need to sign in again each time and LinkedIn does not see a new device every week
• Change or revoke access any time from Connectors. Revoking deletes the stored login and session right away. Changing your LinkedIn password has the same effect

Verification codes

The first time Spencer signs in from a new device, LinkedIn may email you a verification code. If the email comes to the inbox you connected, Spencer can read just that code from his side, so you usually do not have to do anything. It usually happens once.

Two factor authentication

Keep two factor on. You never need to turn it off for Spencer. Tell him how your codes arrive, in onboarding or from Connectors:

• Authenticator app: when you set it up in LinkedIn, scan the QR code with your own app as usual and also paste the setup key LinkedIn shows into Starlight. Your app and Starlight then make the same codes, so Spencer can sign in without asking you for one. Already set up? Copy the key from your password manager, or turn authenticator two factor off and straight back on in LinkedIn, which takes about a minute. The key is encrypted, never shown back, and Spencer only ever sees the current code, with every read logged
• Text message: LinkedIn texts codes that expire in minutes, so the first sign in happens live on your kickoff call and you read the code out. On the same call Spencer can help you switch to an authenticator app, so later sign ins never need you. If LinkedIn does text you later, Spencer emails you and a box appears in Connectors: type the code there and it goes straight to Spencer, once. The box closes after 10 minutes

There is also a notes field for anything Spencer should know, shown to him alongside your login.