Privacy Policy

1. Who We Are

PostG8 ("we," "us," "our") is operated by Siddharth Sharma, with its principal place of business at DLF City, Gurugram, Haryana, India. This Privacy Policy describes how we collect, use, and share information when you use our LinkedIn content generation and engagement platform at postg8.com and app.postg8.com.

For privacy-related questions or data requests, contact us at support@postg8.com.

2. Data We Collect and Why

Account data

Your name and email address, collected when you sign up. Used to authenticate you, manage your account, and send you transactional emails.

LinkedIn connection data

OAuth access tokens required to publish content on your behalf and retrieve engagement data from your posts. For Pro subscribers, your LinkedIn account may be connected via Unipile (a third-party service) which enables persistent account access beyond LinkedIn's standard OAuth token expiry. We store OAuth credentials securely in our database via Supabase. We never store your LinkedIn password.

Business context

Company name, target customer description (ICP), offer details, tone preferences, and other business information you voluntarily provide. This data is used to personalise AI-generated content and is stored in our database for as long as your account is active.

Generated content

Post drafts, carousel content, series plans, and other content created using the Service. Stored to enable scheduling, editing, and historical access within your account.

Engagement and analytics data

When you sync a LinkedIn post, we retrieve comment and reaction data from that post via LinkedIn's API. For engagement queue features, we also obtain publicly accessible LinkedIn post content and professional profile information through Apify, a third-party data provider. This data is used to populate your engagement queue and to score individuals for buyer-fit against your ICP profile. It is associated with your account and is not accessible to other PostG8 users.

Usage data

Basic product analytics — pages visited, features used, session behaviour — collected via Microsoft Clarity and Vercel Analytics. This data is collected in aggregated and/or anonymised form and does not include the content of your posts or business context.

Payment data

Payment transactions are processed entirely by Dodo Payments (dodopayments.com). We do not collect, store, or have direct access to your payment card details. From Dodo Payments we receive only the data necessary to manage your subscription status: subscription ID, plan type, renewal dates, and payment status.

3. How We Use Your Data

• Authenticate you and manage your account and subscription.
• Generate AI content tailored to your business context using Google Vertex AI / Gemini.
• Publish posts and carousels to LinkedIn on your behalf via LinkedIn's UGC API.
• Score LinkedIn engagers for ICP fit against your business profile.
• Send transactional emails — account events, subscription confirmations, automation digests, and pause/alert notifications — via Resend.
• Analyse and improve the Service through aggregated, anonymised usage analytics.

We do not use your data for advertising, sell it to third parties, or use it to train shared AI models.

4. Third-Party Data Processors

We share your data with the following processors to provide the Service. Each processor is engaged under contractual obligations appropriate to the data shared.

We do not sell your personal data to any third party.

5. LinkedIn Data

By connecting your LinkedIn account, you authorise PostG8 to act on your behalf within the scope of the permissions you grant during the OAuth flow. We access LinkedIn via the official UGC API (and via Unipile for Pro subscribers). Engagement data retrieved from your posts is used solely for features within the Service and is not shared with or sold to any third party.

You can revoke PostG8's access to your LinkedIn account at any time from your LinkedIn account settings under "Permitted Services." For Unipile-connected accounts, you can also disconnect from within PostG8's account settings.

6. Legal Basis for Processing Public LinkedIn Data

PostG8 processes two categories of public LinkedIn data. This section explains the legal basis for each and the scope limits we apply.

Engagement signals on your own posts

When you sync a LinkedIn post, we collect the comments and reactions that other users have made on that post. Legal basis: Legitimate Interest. You have a professional basis to follow up with people who publicly engaged with your content. This is consistent with reasonable expectations for professional networking on a public platform.

Public LinkedIn posts and profiles obtained via Apify

We use Apify, a third-party data provider, to obtain publicly accessible LinkedIn post content and professional profile information. This data populates your comment queue (posts you may want to engage with to grow your audience) and your connection queue (profiles you may want to connect with). Legal basis: Legitimate Interest. The data is limited to publicly accessible professional profile information and post content, and is used solely to help you engage meaningfully within your professional network.

Scope limits

The following limits apply to both categories of data:

• We do not collect email addresses, phone numbers, or any data sourced from outside LinkedIn.
• Collected profiles and posts are stored only within your own account. There is no shared directory, cross-user search, or lookup tool — no user can view or access another user's engagement queue or the profiles within it.
• There is no function within PostG8 to export collected engagement data in bulk.
• Unactioned items in your engagement queue (comment queue and connection queue) are automatically deleted 30 days after collection.

If you are a LinkedIn user and want to request removal of your data from a PostG8 user's engagement queue, see the opt-out process in Section 8.

7. Data Retention

We retain your account data and business context for as long as your account is active. Generated content is retained to provide you with historical access within the Service.

Unactioned items in your engagement queue are automatically deleted 30 days after collection. You cannot export engagement queue data from PostG8.

If you delete your account, your personally identifiable data will be deleted from our systems within 30 days of your deletion request, except where we are required by law to retain it. Note that Dodo Payments retains transaction records independently; deletion of your PostG8 account does not affect records held by Dodo Payments.

8. Your Rights and Data Requests

You may contact us at support@postg8.com to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data (also available in account settings).
• Ask questions about how your data is used.

We will respond to data access, correction, and deletion requests within 30 calendar days of receipt.

We handle your data in accordance with the factual practices described in this policy. We do not make formal certification claims under GDPR, CCPA, or other specific data protection frameworks, but we will respond to data requests in good faith. If you have unresolved concerns, you may also have the right to lodge a complaint with a data protection authority in your jurisdiction.

Third-party opt-out

If you are a LinkedIn user whose public profile or post content appears in a PostG8 user's engagement queue — because you have publicly engaged with their content or your public profile matched their queue criteria — and you wish to have your data removed, email support@postg8.com with your LinkedIn profile URL. We will action the removal within 7 business days.

9. Cookies and Tracking

PostG8 uses essential session cookies for authentication, managed by Supabase. These are required for the Service to function and cannot be disabled without preventing you from logging in.

We also use Microsoft Clarity and Vercel Analytics, which may set cookies or use browser storage to collect anonymised usage data. You can disable third-party cookies in your browser settings; this will not affect your ability to use the core Service.

10. International Data Transfers

Your data is processed and stored on servers primarily in the United States (Supabase on AWS, Google Cloud for Vertex AI). If you are located in the EU, EEA, or UK, your data may be transferred to countries that do not have the same level of data protection as your jurisdiction. We rely on the data processing agreements with our sub-processors, which include standard contractual clauses or equivalent transfer mechanisms where required.

11. Children

PostG8 is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, contact us at support@postg8.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice within the Service before they take effect. The effective date at the top of this page reflects the most recent update.

13. Contact

Siddharth Sharma
DLF City, Gurugram, Haryana, India
support@postg8.com