Privacy Policy

This Privacy Policy explains how ProPostly ("we," "us," or "our") collects, uses, stores, and shares your information when you use our Chrome browser extension and related website at propostly.com (collectively, the "Service"). By using the Service, you agree to this policy.

1. What Data We Collect

We collect the following information when you use ProPostly:

Information you provide

• Email address — Collected when you create an account or sign in. Used to identify your account and send important service emails (such as upgrade confirmations or limit warnings).

Information collected automatically

• LinkedIn profile ID — A unique identifier from your LinkedIn profile URL (e.g., the handle in linkedin.com/in/yourname). Collected to prevent account sharing and enforce per-account usage limits.
• Usage counts per feature — How many times you have used each feature (e.g., post generator, comment assistant) within your current billing period. Used to enforce free and pro plan quotas.
• Subscription status — Whether your account is on the Free plan or Pro plan. Used to unlock the correct features for your plan.
• Device fingerprint — A one-way SHA-256 hash derived from non-identifying browser characteristics (WebGL renderer, canvas rendering, screen resolution, timezone, and language). This hash is used only to recognise your device if you reinstall the extension, so your existing account and usage limits are restored automatically. The raw characteristics are never transmitted or stored — only the resulting hash. This hash cannot be used to track you across websites.

Payment information

• Payments are processed by Dodo Payments. When you upgrade to Pro, your payment is handled entirely by Dodo Payments. We never see, receive, or store your credit card number, bank details, or any other payment card information. We only receive a confirmation that your payment was successful.

What we do NOT collect

• Your LinkedIn or Reddit password or login credentials
• Your LinkedIn connections, messages, or feed content
• Your Reddit account name, private messages, karma, or vote history
• Your browsing history
• Any personal data from LinkedIn or Reddit beyond what is described above

2. How We Handle Your Data

We are committed to handling your data responsibly:

• Used only to provide the Service — Your data is used solely to operate ProPostly: managing your account, tracking usage limits, and generating AI content when you request it.
• Not sold to third parties — We do not sell, rent, or trade your personal information to anyone, ever.
• Not used for advertising — We do not use your data to show you targeted ads or share it with advertisers.
• Processed securely — All data is transmitted over encrypted connections (HTTPS/TLS) and stored with encryption at rest.
• Minimum data principle — We only collect what is strictly necessary to run the Service. We do not collect data speculatively.

3. Where Your Data Is Stored

Your data is stored and processed in the following locations:

• Supabase (database) — Your account data (email, LinkedIn profile ID, usage counts, subscription status) is stored in a Supabase database. Supabase encrypts data in transit and at rest and follows industry-standard security practices.
• Vercel (backend servers) — Our backend API runs on Vercel. When the extension makes a request (e.g., to generate a post), it is processed on Vercel servers before being returned to you.
• Chrome local storage (your device only) — Some settings and temporary session data (such as your login token) are stored locally in Chrome's storage on your own device. This data never leaves your device except to authenticate with our servers.

4. Who We Share Your Data With

We share data only with the service providers required to operate ProPostly. We share the minimum necessary data with each provider.

• Supabase — Receives and stores your account data (email, LinkedIn profile ID, usage counts, subscription status) as our database provider.
• Vercel — Hosts our backend API and processes requests to generate AI content on your behalf.
• OpenRouter / Anthropic — When you use a generation feature (e.g., write a LinkedIn post), the prompt text you submit is sent to OpenRouter or Anthropic's AI models to produce the output. We do not send your email, LinkedIn profile ID, or account data to these providers.
• Dodo Payments — Processes your payment when you upgrade to Pro. We share only what is necessary to complete the transaction. We never receive your full card details.

We do not share your data with anyone else. We never sell your data.

5. Your Rights

You have the following rights regarding your data:

• Access your data — You can request a copy of the data we hold about you at any time. Email us and we will respond within 30 days.
• Request data deletion — You can ask us to permanently delete your account and all associated data. We will complete deletion within 30 days of your request.
• Cancel your subscription anytime — You can cancel your Pro subscription at any time. You will continue to have Pro access until the end of your current billing period.
• Uninstall the extension — Uninstalling the Chrome extension immediately stops all data collection. Your account data remains in our database until you request deletion.
• Contact us anytime — For any privacy question or concern, email us at support@propostly.com.

If you are in the European Economic Area (EEA) or United Kingdom, you also have rights under the GDPR including correction of inaccurate data, restriction of processing, data portability, and the right to lodge a complaint with your local data protection authority.

6. Data Retention

• While your account is active — We keep your data for as long as you have an account with us and use the Service.
• Deletion on request — If you request deletion of your data, we will permanently delete your account and all associated personal information within 30 days.
• After inactivity — We may delete accounts that have been inactive for an extended period. We will notify you by email before doing so.

7. Children's Privacy

ProPostly is not directed to children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@propostly.com and we will delete that information promptly.

8. Cookies

• We do not use cookies. The ProPostly extension and website do not set or read browser cookies.
• Chrome local storage only. The extension uses Chrome's built-in local storage API to store settings and session tokens on your device. This data stays on your device and is not transmitted unless needed to authenticate with our servers.
• No tracking. We do not use any third-party tracking pixels, analytics cookies, or advertising cookies.

9. Changes to This Policy

• We may update this Privacy Policy from time to time to reflect changes in the Service or applicable law.
• When we make changes, we will update the "Last updated" date at the top of this page.
• For significant changes, we may also notify you by email or through the extension.
• Continued use of ProPostly after any changes constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you should stop using the Service.

10. Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or need to request data deletion, please reach out:

• Email: support@propostly.com
• Twitter/X: @Karthik23n
• Website: propostly.com

We aim to respond to all privacy requests within 30 days.

Chrome Extension Permissions

ProPostly requests access only to linkedin.com and reddit.com in order to display its AI assistant panel and send generation requests to our backend when you click a button. It does not run on any other website.

LinkedIn (linkedin.com)

• Reads your LinkedIn profile ID from the page URL (the text after linkedin.com/in/) to link usage to your account.
• Does not read your LinkedIn messages, connections, feed, or any content you have not explicitly pasted into the extension.

Reddit (reddit.com)

• Injects a "Draft AI Reply" button next to Reddit comment composer boxes. Clicking this button reads only the publicly visible comment text you are replying to and sends it to our backend to generate reply suggestions.
• Only accesses publicly visible comment text — the same text that any visitor to the page could read.
• Does not access your Reddit account, username, private messages, vote history, or any data not visible on the public page.
• Does not store any Reddit content except what you explicitly paste into the extension's text fields.

Other permissions

• storage — Stores your email, session token, and monthly usage counts locally in Chrome. No passwords or private data stored.
• activeTab / tabs — Detects the active LinkedIn or Reddit tab to read publicly visible content. Only activates when you click the extension icon.
• scripting — Required to inject the "Draft AI Reply" button into Reddit pages and read the LinkedIn profile URL from the page.
• sidePanel — Allows the extension to open as a side panel inside Chrome for a better in-page experience.