ShipMyPosts
Legal · updated September 1, 2026

Privacy Policy

This Privacy Policy explains what personal data ShipMyPosts ("we", "us") collects when you use the Service, why we collect it, who we share it with, and the rights you have. We process data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data we collect

  • Account data: name, email address, password (hashed), plan and billing status.
  • LinkedIn data: with your authorisation, your public profile (name, headline, about, picture), your recent posts, and an access token used only to publish posts you scheduled. We do not read your messages or connections.
  • Sources you provide: links to podcasts, videos and articles, and the transcripts and extracted text derived from them.
  • Interview answers: text you type and, if you use voice, audio recordings that are transcribed to text. Audio is used for transcription and is not kept longer than needed to produce the transcript.
  • Generated content: drafts, images, carousels and their edit history.
  • Usage and technical data: pages viewed, actions taken, device and browser information, IP address, and logs needed to run and secure the Service.
  • Payment data: handled by Stripe. We never see or store your full card number.

2. Why we process it

  • To provide the Service: analyse your sources, run the interview, generate and schedule posts, publish on LinkedIn on your behalf, deliver boosts, and show analytics.
  • To bill you and prevent fraud.
  • To send transactional emails (your posts are ready, a publish failed, billing notices).
  • To improve the Service, including the quality of generated content, using aggregated and, where possible, anonymised data.
  • To comply with legal obligations.

Legal bases: performance of our contract with you, our legitimate interests (security, improvement), your consent (LinkedIn authorisation, voice recording), and legal obligations.

3. AI processing

Your sources, interview answers and profile are sent to AI providers to generate content. We use Anthropic (text), Google (images) and OpenAI / AssemblyAI (speech-to-text). These providers process data under contractual terms that do not allow them to use your content to train their models. Generated content is produced from your material; we design the Service to avoid inventing facts, but you remain responsible for reviewing what you publish.

4. Who we share data with (sub-processors)

  • Vercel: hosting and file storage (images, carousels).
  • Neon: database.
  • Stripe: payments and subscriptions.
  • Anthropic, Google, OpenAI, AssemblyAI: AI generation and transcription.
  • Inngest: background job processing.
  • Resend: transactional email.
  • LinkedIn: publishing, via its official API.
  • Engagement delivery partner: delivery of boosts (real reactions). To deliver a boost we share the URL of the published post and your account email.
  • Slack: internal operational notifications (account events, billing events), limited to what is needed to run the Service.

We do not sell personal data.

5. Retention

Account and content data are kept while your account is active. When you delete your account, we delete your data within 30 days, except what we must keep for legal, accounting or security reasons (for example invoices). Voice recordings are deleted once transcribed. Backups are rotated within 30 days.

6. Your rights

Under the GDPR you can access, rectify, erase or export your data, restrict or object to processing, and withdraw consent at any time (for example by disconnecting LinkedIn in Settings). To exercise these rights, email contact@shipmyposts.com. You can also lodge a complaint with your supervisory authority (in France, the CNIL).

7. International transfers

Some providers process data outside the European Economic Area. Where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

8. Security

Data is encrypted in transit and at rest. Access is limited to what is needed to operate the Service. LinkedIn tokens are stored encrypted and used only for publishing. Report a security concern to contact@shipmyposts.com.

9. Cookies

We use strictly necessary cookies to keep you signed in and to secure the Service. We do not use advertising cookies. If we add analytics cookies, we will ask for your consent first.

10. Children

The Service is not intended for anyone under 18.

11. Changes

We may update this policy. Material changes are announced in the app or by email before they take effect.

12. Contact

Data controller: ShipMyPosts. Email: contact@shipmyposts.com.