Privacy Policy

This Privacy Policy describes how GrowLinkAI ("we", "us", or "our") collects, uses, and shares information when you use our website and services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account information

When you create an account, we collect your name, email address, and (for password-based sign-ups) a hashed password. If you sign in with Google or LinkedIn, we receive your name, email address, and profile photo from that provider.

LinkedIn data

The Service connects to LinkedIn through two separate authorizations. Each is optional, each asks for your consent on LinkedIn's own screen, and each can be disconnected independently from the Settings page.

Publishing. Lets us publish posts you create in the Service to your personal LinkedIn profile. Through it we receive and store your LinkedIn member ID, name, email address, headline, profile URL, and profile photo URL.

Analytics & Company Pages. Lets us read engagement on your posts, and publish to and report on the company Page you choose. Through it we access:

• Your basic LinkedIn profile, including your headline.
• Analytics for your own posts (such as impressions, reactions, comments, reposts, and video views), your follower count, and the number of first-degree connections you have. We read only the count, never the list of who your connections are.
• The list of company Pages you administer, so you can choose one. For the Page you choose, we publish posts you create for it and read its follower counts and growth, Page visits, and post statistics. We store that Page's name and logo for up to 30 days.
• Notifications LinkedIn sends us when people react to or comment on posts on your chosen company Page. We keep only the type of action and the post it relates to. We discard the other person's name, LinkedIn ID, and comment text before anything is saved.

We store an access token (and, when LinkedIn issues one, a refresh token) for each authorization, encrypted at rest. We use LinkedIn data only to provide features you use in the Service. We do not access your LinkedIn messages, we do not read or store your list of connections, and we do not access data outside the permissions you granted.

Disconnecting a LinkedIn authorization in Settings permanently deletes the tokens we hold for it, which ends our access. To also withdraw the permission on LinkedIn's side, remove GrowLinkAI from LinkedIn's permitted-services settings at linkedin.com/mypreferences/d/data-sharing-for-permitted-services.

Content you create

We store the posts you draft, schedule, or publish through the Service, along with associated metadata (status, scheduled time, publish history, revisions, and approvals), your chat conversations with the assistant, the images and videos you generate, and your profile and writing-voice preferences.

Documents, recordings, and writing samples

To prefill your profile, you may upload or paste a resume, bio, or similar document, or record a short voice description of yourself. We process it once to extract your professional details (such as your role, industry, skills, and experience) and then discard it. Neither the document, the recording, nor its text or transcript is stored. Only the extracted details you review and choose to save are kept, as part of your profile. If you paste sample posts so we can learn your writing style, we keep the resulting style description, not the samples. All of these steps are optional.

Team and agency workspaces

If you invite someone to your workspace, we store their email address to send and track the invitation. If an agency or team manages your LinkedIn profile or company Page in its workspace, the members of that workspace can see the drafts, posts, and analytics for the profiles and Pages they have access to.

Usage data

We keep monthly usage counters (such as chat messages, generated posts, scheduled posts, and image and video credits) to enforce subscription limits, and we record the cost of each AI request to operate the Service. We log standard request metadata (timestamps, IP addresses, user agents) for security and debugging.

Payment information

Subscription billing is processed by our payment provider (Stripe). We do not store full credit card numbers on our servers; Stripe holds those. We retain only the subscription status, plan, and billing history needed to manage your account.

2. How We Use Your Information

• To provide and maintain the Service
• To authenticate you and protect your account
• To generate AI-powered LinkedIn content, images, and video tailored to your profile and voice
• To publish content to your LinkedIn profile or chosen company Page when you request it, including at a time you schedule
• To show you analytics for your posts and your chosen company Page
• To enforce subscription limits and process payments
• To communicate service updates, security notices, and (with your consent) product news
• To detect and prevent fraud, abuse, and violations of our Terms of Service

3. Third-Party Services

We share data with the providers below only as needed to operate the Service. We do not permit our AI providers to use your data to train their models.

OpenAI

We send your chat messages, drafts you ask us to review, and profile context (including your LinkedIn headline) to OpenAI to generate responses. Documents and voice recordings you provide for profile prefill are also sent to OpenAI to be read or transcribed. When you run a Profile Audit, your LinkedIn profile photo is sent so the audit can give feedback on it. OpenAI may also be used as a fallback for image generation. OpenAI processes this data under its Privacy Policy and API data-handling terms.

Google Cloud (Vertex AI)

When you generate an image or video, we send a description of the scene to Google's Vertex AI to produce it. We configure video generation not to depict people. Every video frame carries Google's SynthID watermark, which identifies it as AI-generated.

NewsAPI.ai

When you ask the assistant what is happening in your industry, or open the Industry News page, we fetch recent news articles so that any source you or the assistant cite is a real, published article rather than an invented one. We send only a broad industry category, such as “marketing” or “financial services”. We do not send your name, your profile, your drafts, your chat messages, or anything else that identifies you or your account, and the articles we retrieve are shared across everyone in the same industry rather than fetched for you individually. We keep each article's headline, link, publication name, date, and a short extract for up to seven days; we do not store the full text of anyone else's article. On the Industry News page, we use your profile on our own servers only to put the most relevant articles first; it is not sent to NewsAPI.ai.

LinkedIn

We use LinkedIn's APIs to sign you in, publish posts, and provide analytics as described in Section 1. Your use of LinkedIn is also subject to LinkedIn's Privacy Policy.

Stripe

Stripe processes subscription payments. Stripe's handling of your payment information is governed by its own privacy policy.

Hosting and infrastructure

• Vercel hosts the Service.
• Supabase provides our database and private file storage for images and videos.
• Resend delivers our emails (for example, verification codes, invitations, and notifications).
• Sentry receives error reports so we can fix problems. We remove credentials and tokens from these reports before they are sent.
• Upstash stores short-lived counters keyed to your account ID to protect the Service from abuse.
• Google Analytics measures how the Service is used, and only if you accept analytics cookies (see Section 7).

These providers process data on our behalf under their respective data processing agreements.

4. Data Sharing

We do not sell your personal data. We share data only:

• With the service providers listed above, strictly as needed to operate the Service
• With members of a workspace you belong to, as described in Section 1
• To comply with applicable law, legal process, or enforceable governmental request
• To protect the rights, property, or safety of GrowLinkAI, our users, or others
• In connection with a merger, acquisition, or sale of assets, with notice to you

5. Data Retention and Deletion

LinkedIn data

We keep data retrieved from LinkedIn only as long as LinkedIn's terms permit, and remove it automatically:

• Engagement figures for your personal posts: deleted within 24 hours of being retrieved.
• Engagement and reporting figures for your company Page: deleted within one year.
• Your company Page's name and logo: deleted within 30 days.

We keep your own LinkedIn profile details (such as your name and headline) until you disconnect that LinkedIn authorization in Settings or delete your account. Posts you wrote in the Service are your content and are kept with the rest of your account.

News articles

Cached news articles are removed seven days after publication. They are not linked to your account, so they are unaffected by deleting it.

Your account

We retain the rest of your data for as long as your account is active. You can delete your account from the Settings page. This immediately deletes your profile, your posts, your LinkedIn connections and tokens, and any workspace you own, including its chat history and other contents. Content in a workspace you do not own (such as chat conversations on a profile you helped manage, or a log of posts you deleted there) belongs to that workspace and remains with it. We keep billing records where required for legal, tax, or fraud-prevention purposes (typically up to 7 years).

Images and videos you generated are not yet removed from file storage automatically when you delete your account. They are private and unreachable once your account is gone. To have them permanently erased, email privacy@growlinkai.com and we will delete them within 30 days.

You can request export or deletion of your data at any time by emailing privacy@growlinkai.com.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

EU/EEA users: the legal bases on which we rely are contract performance (to deliver the Service), legitimate interests (security, fraud prevention), legal obligation, and consent (where required, including for analytics cookies).

California users: under the CCPA/CPRA, you have the right to know what personal information we collect, request deletion, and opt out of any "sale" of personal information. We do not sell personal information.

7. Cookies

We use essential cookies for sign-in, security, remembering which profile or company Page you are working on, and remembering your cookie choices. With your consent, we also use Google Analytics cookies to understand how the Service is used. Analytics cookies are not set unless you accept them, and you can change your choice at any time. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for details.

8. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encryption of LinkedIn and sign-in tokens at rest, private file storage served only to signed-in users, hashed passwords, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your data may be processed in countries other than your country of residence, including the United States. Where required by law, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the Service. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact Us

Questions about this policy or your data?

GrowLinkAI
Email (general/support): support@growlinkai.com
Email (privacy): privacy@growlinkai.com