Privacy Policy

Account data. Your name, email address, and profile photo, received when you sign up with email, Google, or LinkedIn.

LinkedIn connection. When you connect LinkedIn we receive your LinkedIn member ID and the access tokens needed to publish posts you approve. Tokens are stored encrypted at rest.

Public profile content. During onboarding and for your analytics we analyze your public LinkedIn posts (and, if you upload it, your LinkedIn data export) to learn your writing voice and show you what performs. The resulting voice profile and post history are stored with your account.

Content you create. Drafts, edits, scheduled posts, generated images, brain-dump notes, and the topics, feeds, creators, and communities you configure.

Billing data. Payments are processed by Stripe. We store your Stripe customer ID, subscription status, and billing address — never your card number.

Usage data. Feature usage counts (for plan credits), and standard technical logs (IP address, browser type, timestamps) used for security, rate limiting, and debugging.

We use your data to provide the Service: generating drafts in your voice, publishing posts to LinkedIn only when you approve or schedule them, showing you performance analytics, operating your subscription, and sending service emails such as trial reminders and payment notices (performance of contract, Art. 6(1)(b) UK GDPR). We use technical logs for security and abuse prevention (legitimate interests, Art. 6(1)(f)), and billing records to meet tax and accounting duties (legal obligation, Art. 6(1)(c)).

We do not sell your personal data, and we do not use your content to advertise to you or to train shared AI models.

We use a small number of processors, each receiving only what it needs: LinkedIn (sign-in and publishing); Stripe (payments); AI model providers — OpenAI and DeepSeek for text generation and Google (Gemini) for images — which receive the source material and voice profile needed to produce a draft or image; a public-profile data provider for onboarding and analytics collection; Twilio SendGrid (email); Cloudflare (content delivery and image storage); DigitalOcean (hosting); and privacy-focused site analytics (Plausible, Ahrefs Analytics — no cross-site tracking).

We are UK-based; some providers above process data in the United States or the EU. Where personal data leaves the UK/EEA we rely on adequacy decisions or standard contractual clauses to protect it.

We keep your data while your account is active. Deleting your account in Settings permanently removes your profile, voice data, drafts, connections, and tokens from our systems. Billing records are retained as required by law. Posts already published to LinkedIn remain on LinkedIn under your control.

We use first-party session cookies to keep you signed in and a CSRF cookie for security. No third-party advertising cookies.

LinkedIn tokens are encrypted at rest, traffic is encrypted in transit, and access to production systems is restricted and key-based. No system is perfectly secure — if a breach affects your personal data we will notify you and, where required, the ICO without undue delay.

Under the UK GDPR (and the EU GDPR where it applies) you can access, correct, export, restrict, object to the processing of, or delete your data — most of it directly in the app, or by emailing us. You also have the right to complain to the ICO (ico.org.uk) or your local supervisory authority. We respond to requests within one month.

The Service is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We will update this page when our practices change and adjust the date above; material changes will be announced in the app or by email. Data controller: Inhype Live Limited, United Kingdom (Company No. 13379772). Questions or requests: vadim@inhype.io.