Privacy Policy

Personal Information

When you create an account or interact with our platform, we may collect the following personal information:

• Full name and display name
• Email address and contact information
• LinkedIn profile information (when connected via OAuth 2.0): name, profile photo, headline, and post activity — only with your explicit authorization
• LinkedIn engagement data (likes, comments, shares, impressions) for posts you publish through our platform — used to provide analytics and insights
• Billing and payment information (processed securely through third-party payment processors)
• Account credentials (passwords are encrypted and never stored in plain text)

Usage Data

We automatically collect certain information when you use our platform, including:

• Log data such as IP address, browser type, operating system, and referring URLs
• Pages visited, features used, and time spent on the platform
• AI generation requests, prompts, topics, and selected tone/style/industry settings you submit
• Number of hooks, posts, comments, and hashtags generated, saved, and exported
• Hook Scoring results and post analysis scores
• LinkedIn posts viewed, engagement metrics accessed, and content published through our platform
• Interaction patterns including clicks, scrolls, and navigation paths
• Device identifiers and screen resolution
• Session duration and frequency of visits

Cookies & Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activities. For detailed information on how we use cookies, please refer to Section 6: Cookies & Tracking Technologies.

AI-Generated Content

When you use our AI-powered tools, the prompts, inputs, and AI-generated outputs (including hooks, posts, comments, hashtags, and analyses) are processed to provide the service. This content is used solely to deliver your requested results and is not retained for model training purposes. You retain full ownership of all AI-generated content created through your account. Hook Scoring (1-100) results and post analysis scores are stored to track your content performance over time.

Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including cloud hosting, payment processing (Stripe), email delivery, analytics, and customer support. These providers are contractually obligated to use your data only as directed by us and in compliance with applicable privacy laws.

Legal Requirements

We may disclose your personal information if required to do so by law, in response to a valid legal request (such as a subpoena, court order, or government inquiry), or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information becomes subject to a different privacy policy.

With Your Consent

We may share your personal information with third parties when you have given us explicit consent to do so, such as when you choose to connect your LinkedIn account via OAuth 2.0 (which shares your name, profile photo, headline, and post activity with us) or share generated content on social media platforms.

Aggregated & De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for any purpose, including research, marketing, and analytics purposes.

Data Storage

Your data is stored on secure servers hosted by industry-leading cloud infrastructure providers. Our infrastructure is primarily hosted in the United States with data encryption at rest (AES-256) and in transit (TLS 1.3). Backups are encrypted and stored in geographically distributed locations to ensure data redundancy and disaster recovery. We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law. We comply with GDPR for European users and CCPA for California residents regardless of where our servers are located.

Data Retention

We apply the following retention periods:

• Account data: Retained for the duration of your account and for 30 days after deletion to allow recovery.
• Usage and analytics data: Anonymized after 24 months; raw data deleted after 36 months.
• AI generation history: Retained for 12 months after your last interaction, then permanently deleted.
• Payment records: Retained for 7 years as required by financial regulations.
• Support tickets: Retained for 24 months after resolution.

Security Measures

We implement a comprehensive security program that includes AES-256 encryption for data at rest, TLS 1.3 encryption for data in transit, regular security audits and penetration testing, role-based access controls (RBAC) for internal team members, two-factor authentication (2FA) support for user accounts, automated intrusion detection and prevention systems, and a comprehensive incident response plan. While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.