Privacy Policy

Last updated: December 19, 2024

Introduction

Qopylot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our LinkedIn post scheduling and AI-powered content creation service.

By using Qopylot, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Full name
  • Password (encrypted)
  • Timezone and language preferences

OAuth Authentication Data

If you sign up or log in using Google or LinkedIn, we receive:

  • Your profile information (name, email)
  • OAuth provider identifier
  • Access tokens (stored securely for service functionality)

LinkedIn Integration Data

When you connect your LinkedIn account, we collect:

  • LinkedIn profile ID and name
  • LinkedIn email address
  • OAuth access tokens (for publishing posts on your behalf)

Content Data

We store the content you create:

  • Post content, titles, and scheduling information
  • Media files (images, videos, documents) - up to 100MB per file
  • Post analytics (impressions, likes, comments, shares from LinkedIn)

AI Assistant Data

To personalize AI-generated content, you may provide:

  • Target audience information (industry, company size, hierarchy level)
  • Professional identity (expertise, journey story, differentiator)
  • Writing preferences (tone, core values, content language)

Payment Information

For subscription management, we use Stripe. We store:

  • Stripe customer ID and subscription ID
  • Subscription status and billing dates
  • We do NOT store your credit card numbers - all payment data is processed securely by Stripe

How We Use Your Information

We use the collected information for:

  • Providing and maintaining the service
  • Publishing posts to LinkedIn on your behalf at scheduled times
  • Generating AI-powered content based on your preferences
  • Processing payments and managing subscriptions
  • Sending service-related emails (verification, password reset, notifications)
  • Improving our service and user experience

Third-Party Services

We share data with the following third-party services:

LinkedIn

Used for authentication and publishing posts. Your content is shared with LinkedIn when you publish or schedule posts.

Google

Used for authentication (optional). We receive your basic profile information when you sign in with Google.

OpenAI

Powers our AI content generation features. Your AI assistant configuration and content topics are sent to OpenAI to generate personalized posts.

Stripe

Processes all payment transactions. Your payment information is handled directly by Stripe and never stored on our servers.

Cloud Storage (OVH Cloud)

Your media files are stored on secure servers hosted by OVH Cloud in Europe.

Data Storage and Security

  • All data is stored on secure servers hosted by OVH Cloud
  • Passwords are encrypted using BCrypt hashing
  • All communications are encrypted using HTTPS/TLS
  • JWT tokens expire after 24 hours
  • Password reset tokens expire after 1 hour

Cookies and Local Storage

Qopylot uses browser localStorage to store your authentication token (JWT). We do not use traditional tracking cookies. Your token is:

  • Stored locally in your browser
  • Used only for maintaining your session
  • Automatically cleared when you log out

Your Rights

You have the right to:

  • Access your personal data through your account settings
  • Update or correct your information at any time
  • Delete your account and all associated data
  • Disconnect your LinkedIn account
  • Manage your notification preferences
  • Export your data upon request

Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • All personal data is permanently deleted
  • All posts and media files are removed
  • LinkedIn connections are disconnected
  • Subscription is cancelled

Some anonymized analytics data may be retained for service improvement purposes.

International Data Transfers

Your data may be transferred to and processed by third-party services located in the United States (LinkedIn, Google, OpenAI, Stripe). These transfers are necessary for providing the service and are conducted in compliance with applicable data protection laws.

Children's Privacy

Qopylot is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@qopylot.com