Privacy Policy

1. What this app is

LinkedIn Autopilot (“the Service”) helps you plan, write, and publish content to your own LinkedIn account, and learns from how that content performs. This policy describes what data we collect, why, and how you can access, export, or delete it.

2. Data we collect

• Account data: your email, name, and profile photo, from Supabase Auth and from LinkedIn’s OpenID Connect sign-in.
• LinkedIn connection: your LinkedIn access and refresh tokens, stored encrypted at rest and never exposed to the browser or to any third party.
• Profile data you provide: anything you import to build your Author Profile — a LinkedIn data-export ZIP, a profile PDF, pasted text, or onboarding interview answers.
• Generated content: posts, hooks, images, and carousels the Service creates for you, and the topics/signals used to generate them.
• Performance data: engagement metrics for posts you publish through the Service, used to improve future recommendations for your account only.

3. How we use it

Your data is used only to operate the Service for you: building your Author Profile, generating and scheduling posts, publishing to LinkedIn on your explicit approval (or automatically only if you turn on Autopilot’s auto-publish mode yourself), and measuring results to improve future suggestions. We do not sell your data, and we do not use your content or profile data to train models for other users.

Post drafting uses Google’s Gemini API. Content sent to Gemini is limited to what is needed to write and fact-check your posts (your profile summary, topic research, and draft text) and is subject to Google’s API data-handling terms.

4. LinkedIn data and API use

We connect to LinkedIn only through LinkedIn’s official APIs (“Sign In with LinkedIn using OpenID Connect” and “Share on LinkedIn”), with your explicit OAuth consent. We never scrape LinkedIn or automate browser sessions against it. You can revoke this connection at any time from Settings, or directly from your LinkedIn account’s Permitted Services list.

5. Data retention and deletion

We keep your data for as long as your account is active. You can export a full copy of your data, or permanently delete your account and everything associated with it — profile, pillars, posts, media, and your LinkedIn connection — at any time from Settings → Data & account. Deletion is immediate and cannot be undone.

6. Third-party processors

We use Supabase (database, authentication, and file storage) and Vercel (hosting) to run the Service, and Google Gemini to generate content. Each processes data only as needed to provide their respective service to us.

7. Contact

Questions about this policy or your data: [add your contact email here].