Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account with PostBuddy, we collect:

• LinkedIn Profile Data: Name, email address, profile picture, headline, and public profile information obtained through LinkedIn OAuth
• Authentication Data: LinkedIn access tokens (encrypted and securely stored)
• Contact Information: Email address for account communications

1.2 Content and Usage Data

• Generated Posts: LinkedIn posts you create using our AI service
• Article URLs: Web links you provide for content generation
• Usage Analytics: Number of posts generated, feature usage, and subscription tier
• Support Communications: Messages sent through our contact forms

1.3 Referral Program Data

• Referral Links: Unique referral codes and conversion tracking
• Referral Statistics: Number of successful referrals and bonus credits earned

1.4 Feedback and Survey Data

• NPS Surveys: Net Promoter Score ratings and feedback comments
• Feature Requests: Suggestions and feedback about our service

2. How We Use Your Information

2.1 Service Provision

• Generate AI-powered LinkedIn posts based on your input
• Manage your account and subscription
• Process payments and billing
• Provide customer support

2.2 Communication

• Send account-related notifications
• Deliver referral bonus notifications via email
• Respond to support inquiries
• Send important service updates

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

PostBuddy does not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Service Providers

We may share information with trusted service providers who help us operate our business:

• Cloud Infrastructure: AWS for hosting and data storage
• Payment Processing: Stripe for subscription billing
• AI Services: OpenAI for content generation (data is not used for training)
• Email Services: For transactional emails and notifications

4. Data Security

• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Multi-factor authentication and role-based access
• Infrastructure: SOC 2 Type II compliant cloud infrastructure
• Monitoring: 24/7 security monitoring and intrusion detection

5. LinkedIn Integration

• We use LinkedIn's OAuth 2.0 for secure authentication
• We only request permissions necessary for our service
• We do not read your existing LinkedIn posts or messages
• You can revoke access through LinkedIn's settings at any time

6. Your Rights

• Access: View and manage your data through your account dashboard
• Deletion: Delete individual posts or your entire account
• Portability: Export your data in standard formats
• GDPR Rights: EU residents have additional rights under GDPR
• CCPA Rights: California residents have rights under CCPA

7. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us: