1. Overview & Commitment
This Privacy Policy describes how mylink ("we", "our", or "us") operates the LinkedIn Content Operating System web application, APIs, and associated services (collectively, the "Service").
We believe content creators, founders, and marketing teams should have powerful scheduling tools without sacrificing account safety. We pledge total transparency: we do not sell your personal data, we do not train external public AI foundation models on your private drafts, and we never share your audience information with data brokers.
2. Official LinkedIn API & Zero Unauthorized Scrapers
- No Headless Automation: We never inject scripts into your browser session or simulate robotic clicks.
- Explicit Permissions: We only request standard scopes (
w_member_social,openid,profile,email) that you explicitly approve. - Official Webhook Updates: Post publishing notifications and delivery receipts are exchanged via official HTTPS REST webhooks.
3. Information We Collect
We only gather information necessary to provide, optimize, and bill for our content creation platform:
| Category | Examples | Purpose |
|---|---|---|
| Account Credentials | Email address, workspace name, avatar | Identity management & workspace setup |
| LinkedIn OAuth Tokens | Encrypted OAuth refresh & access tokens | Scheduled dispatching on your behalf |
| Content & Drafts | Post copies, media attachments, schedule times | Queue orchestration & live preview rendering |
| Billing Information | Subscription tier, customer token (Stripe) | Payment processing (we never see card numbers) |
4. How We Use Your Data
We process your data strictly to execute the core features you request:
5. Encryption & Security Standards
Security is foundational to our architecture. We employ bank-grade protective controls:
Enforced TLS 1.3 encryption across all client-to-server and server-to-API communication channels.
AES-256-GCM symmetric encryption for all API tokens, client secrets, and sensitive tokens.
6. Third-Party Sub-processors
We contract with trusted infrastructure providers who meet ISO 27001 or SOC 2 compliance:
- LinkedIn Corporation: OAuth provider and publishing platform endpoint.
- Google Cloud / Firebase: Authentication infrastructure, secure identity tokens, and database hosting.
- Stripe / Payment Gateway: PCI-DSS Level 1 certified billing and subscription processing.
- Vercel: Edge CDN routing and serverless function compute.
7. Data Retention & Deletion Rights
We store your drafts and queue items as long as your workspace remains active. If you choose to delete your account or unlink your LinkedIn profile:
Upon clicking "Disconnect Account" or requesting workspace deletion, your encrypted OAuth tokens are immediately destroyed, and scheduled jobs are cancelled. Archived post copies are purged within 30 days.
8. GDPR, CCPA & Global Privacy Rights
Regardless of your country of residence, you have full authority over your data:
9. Contact & Data Protection Officer
If you have questions about this policy, or wish to exercise your data rights, please reach out directly to our Data Protection Lead: