1. Data we collect
Account: email, name. Product: LinkedIn account handle, encrypted session token, your writing samples, engagement history. Ops: server logs, IP, browser info.
2. How we use it
To operate Yaro: connect to your LinkedIn, generate content in your voice, run scheduled actions, and show you results. We do not sell your data.
3. Storage & security
Sensitive fields (LinkedIn session tokens) are encrypted with AES-256-GCM. Row-level security enforces per-user isolation in our database. See Security.
4. Third parties
LinkupAPI (LinkedIn automation provider), Supabase (data), Cloudflare Workers (compute), Google/Anthropic (AI generation via Lovable AI Gateway). Each processes data strictly to deliver Yaro's features.
5. Your rights (GDPR & CCPA)
You can request access, correction, portability, or deletion of your data at any time by emailing privacy@podpilot.app. We honor "Do Not Sell / Do Not Share" requests (we don't sell).
6. Cookies
We use strictly necessary cookies for auth. No third-party ad trackers.
7. Retention
We retain your data while your account is active + 30 days after deletion for backup purposes. Audit logs are retained 12 months.
8. Contact
privacy@podpilot.app