Privacy Policy

Postrion (postrion.io) helps you write, schedule and publish posts to your own LinkedIn profile. It is operated by Postrion (“we”, “us”). This policy explains what data we process, why, and the choices you have.

What we collect

• Sign-in data from LinkedIn: your name, email address, profile photo and LinkedIn member ID, provided when you sign in with LinkedIn.
• LinkedIn access tokens: the tokens that let us publish the posts you schedule. They are encrypted at rest.
• Content you create: drafts, scheduled and published posts, the topics and notes you send to the writing assistant and its output, and the profile details and sample posts you add under “About you”.
• Technical data: a session cookie that keeps you signed in, and server logs (such as IP address and request time) used for security and troubleshooting.

How we use it

• To sign you in and keep your account secure.
• To publish a post to your LinkedIn profile at the time you scheduled it.
• To generate drafts with the writing assistant.
• To email you about your account, for example when LinkedIn access needs to be renewed.
• To apply plan limits and prevent abuse.

We only publish posts you write or approve and schedule. We do not read your feed, messages, connections or other people's profiles, we never like, comment or message on your behalf, and we do not sell your data or use it for advertising.

LinkedIn

We access LinkedIn only through its official API, with the permissions you approve at sign-in: basic profile and email (openid, profile, email) and publishing to your profile (w_member_social). Your use of LinkedIn itself is governed by LinkedIn's User Agreement and Privacy Policy. Postrion is not affiliated with, endorsed or sponsored by LinkedIn.

AI processing

When you use the writing assistant, your request (topic, notes or text) and your “About you” details are sent to our AI provider, OpenAI, to generate drafts. OpenAI processes this data under its API terms and states that API data is not used to train its models by default. Always review AI drafts before publishing.

Service providers

• Railway — application hosting and database.
• OpenAI — AI draft generation.
• LinkedIn — sign-in and publishing.
• Cloudflare — domain name services.
• An email delivery provider — account notifications.
• Paddle — payments. Paddle is the Merchant of Record for our orders and processes your billing details under its own privacy policy; we never see your full card number.

We share data with these providers only as needed to run the service, and with authorities only when required by law.

Retention and deletion

We keep your data while your account is active. You can delete your account at any time under About you → Delete account. This immediately removes your profile, drafts, scheduled posts, AI history and stored LinkedIn access from our database. Copies may remain in encrypted backups and logs for a limited period before they are overwritten. Posts already published on LinkedIn stay there until you delete them on LinkedIn.

You can also revoke Postrion's access at any time in LinkedIn under Settings → Data privacy → Permitted services.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict its processing. To exercise these rights, contact us at support@postrion.io. You can also complain to your local data protection authority.

Security

Traffic is encrypted with HTTPS, LinkedIn tokens are encrypted with AES-256, and access to production systems is restricted. No system is perfectly secure, so please contact us if you notice anything unusual.

Cookies

We use only essential cookies: one to keep you signed in and one used briefly during sign-in. We do not use advertising or cross-site tracking cookies.

Children

Postrion is not intended for anyone under 16.

Changes and contact

If we change this policy we will update the date above and, for significant changes, notify you by email. Questions? Write to support@postrion.io.