1. Introduction

LinkedSignal ("we", "our", or "us") operates the LinkedSignal platform (linkedsignal.ai). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using LinkedSignal, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address (via email signup or Google OAuth)
• Profile picture (if provided via Google OAuth)
• Professional information you provide during onboarding (role, industry, expertise, writing tone)

2.2 Content Data

When you use our AI features, we process:

• Topics and prompts you enter for content generation
• Generated posts, carousels, and comments
• Scheduled content and calendar data
• Saved ideas and bookmarks

2.3 Payment Information

Payment processing is handled by our payment partner Dodo Payments, acting as Merchant of Record. We do not store your full credit card numbers, bank account details, or UPI IDs. We receive and store:

• Subscription plan and status
• Payment transaction IDs
• Billing cycle dates

2.4 Usage Data

We automatically collect:

• IP address and approximate location (country-level)
• Browser type and device information
• Pages visited and features used
• Timestamps and session duration

3. How We Use Your Information

We use your information to:

• Provide the service — Generate AI content based on your profile and preferences
• Personalize your experience — Tailor content suggestions to your industry and role
• Process payments — Manage subscriptions and billing
• Improve our AI — Analyze usage patterns to improve content quality (aggregated, non-personally identifiable)
• Communicate with you — Send account notifications, feature updates, and support responses
• Prevent abuse — Enforce rate limits, detect fraud, and ensure service integrity

4. AI Content Generation

We use our proprietary AI engine to generate content. When you request AI-generated content:

• Your profile information and prompt are sent to our AI engine
• Generated content is cached temporarily (up to 24 hours) to reduce costs and improve response times
• We do not use your individual content to train or fine-tune AI models
• Our AI providers' data handling is governed by their respective privacy policies

5. Data Sharing

We do not sell your personal data. We share information only with:

• AI providers — For AI content generation (proprietary engine)
• Supabase — Database hosting and authentication
• Vercel — Application hosting and CDN
• Dodo Payments — Payment processing (Merchant of Record, worldwide)
• Analytics providers — Aggregated, anonymized usage data

We may also disclose information if required by law, court order, or to protect our rights and the safety of our users.

6. Data Security

We implement industry-standard security measures:

• All data transmitted via HTTPS/TLS encryption
• Row-Level Security (RLS) in our database ensures data isolation between users
• API keys and secrets stored in environment variables, never in code
• Webhook signature verification for payment events
• CSRF protection on all mutations
• Rate limiting to prevent abuse

7. Data Retention

• Account data — Retained while your account is active
• Generated content — Retained while your account is active; cache expires after 24 hours
• Payment records — Retained for 7 years for legal/tax compliance
• Usage logs — Retained for 90 days for analytics and debugging

Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate personal data
• Deletion — Request deletion of your account and data
• Portability — Export your data in a machine-readable format
• Restriction — Limit how we process your data
• Objection — Object to processing based on legitimate interests

To exercise these rights, contact us at help@linkedsignal.ai.

9. Cookies

We use essential cookies for:

• Authentication session management
• Theme preference (dark/light mode)

We do not use third-party tracking cookies. Analytics are collected server-side via Vercel Analytics without client-side cookies.

10. Children's Privacy

LinkedSignal is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us to have it removed.

11. International Data Transfers

Your data may be processed in countries outside your jurisdiction, including the United States (where our hosting providers operate). We ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or data requests, email us at help@linkedsignal.ai.