PostAviary

Privacy Policy

Last updated 17 July 2026

This policy explains what data PostAviary (a product of Grandfield Media, India) collects, why, and how it's handled — including, specifically, what we access on your LinkedIn account.

1. What we collect

  • Account data: your email address, used for login and product communication.
  • Sample posts you upload, used only to learn your writing style and generate new posts for you.
  • LinkedIn connection data: your profile identifier and OAuth tokens, obtained when you connect your account.
  • Usage data: pages visited and product events (e.g. a post was published), collected via PostHog with session replay inputs masked.

2. What we access on LinkedIn, exactly

PostAviary requests publish permission only, on your personal profile. We do not read your feed, connections, messages, or any content beyond what's required to publish the posts you've approved. We never scrape your feed or anyone else's.

LinkedIn OAuth tokens are encrypted at rest. If a token expires or is revoked, the affected channel is automatically paused and we email you to reconnect — nothing publishes with a dead or invalid connection. Tokens are permanently deleted the moment you disconnect a channel or close your account.

3. Who processes your data

  • Supabase — database, authentication, and storage.
  • Vercel — application hosting.
  • Resend — transactional email (account and product notifications).
  • PostHog — product analytics; session replay with all inputs masked.
  • LinkedIn API— publishing posts you've approved, under the permission scope described above.
  • Anthropic — generates post drafts from your writing samples. Your samples and custom text are sent as data, never as instructions to the model.

4. Data retention and deletion

We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us — connected-account tokens are deleted immediately on disconnect regardless.

5. Cookies

We use PostHog for essential product analytics, which sets cookies to distinguish visitors. Session replay is enabled with all form inputs masked.

6. Children's privacy

PostAviary is a business tool and is not directed at, or knowingly used by, children.

7. Your rights

You can access, correct, or delete your data, and disconnect any connected account, at any time. Contact us to exercise any of these rights.

8. Contact

Privacy questions: support@postaviary.com.