Privacy Policy

Your privacy matters to us. This policy explains what data we collect, how we use it, and the choices you have.

1. Data We Collect

Account data: Name, email address, and password when you register.

LinkedIn data: When you connect your LinkedIn account, we store your LinkedIn profile ID, name, profile photo, and an access token used to publish posts on your behalf.

Content data: Posts you create, draft, or schedule through the platform.

Usage data: Pages visited, features used, and session timestamps — used to improve the product.

2. How We Use Your Data

We use your data to: provide and improve the Service; authenticate your identity; publish posts to LinkedIn on your behalf; send product updates and support emails; and comply with legal obligations.

We do not sell your data to third parties. Ever.

3. Data Storage & Security

Your data is stored on Supabase infrastructure with AES-256 encryption at rest and TLS in transit. LinkedIn access tokens are stored encrypted and never exposed in plain text.

4. Third-Party Services

We use the following third-party services: Supabase (database & auth), OpenAI (AI content generation), Stripe (payments), and Vercel (hosting). Each has their own privacy policy.

5. Your Rights

Under GDPR and similar regulations, you have the right to: access your data, correct inaccurate data, delete your account and all associated data, export your data, and object to certain processing. Exercise these rights from your account settings or by contacting us.

6. Cookies

We use essential cookies for authentication and session management, and optional analytics cookies. See our Cookie Policy for full details.

7. Data Retention

We retain your account data for as long as your account is active. Upon deletion, all personal data is permanently removed within 30 days, except where retention is required by law.

8. Contact

Data privacy questions? Email privacy@hashtaghero.io or see our GDPR page.