ExplodeWithAI – Privacy Policy

1. Who We Are

This LinkedIn automation application (“the App”) is operated by Xplode With AI Inc. (“ExplodeWithAI”, “we”, “us” or “our”), owned and administered by Murdad Esmaeeli

2. What the App Does

The App performs two tightly‑scoped functions only:

Function	LinkedIn permission (scope)
Create, edit and delete posts on: 1) Murdad Esmaeeli’s personal profile and 2) the Xplode With AI Company Page	`w_member_social`, `w_organization_social`
Retrieve post‑level engagement statistics (impressions, reactions, comments, shares, clicks)	`r_organization_social`

No other LinkedIn APIs, products or data types are used.

3. Data We Collect

Category	Examples	Purpose	Retention
LinkedIn OAuth tokens	Client ID, Client Secret, long‑lived refresh token, short‑lived access tokens	Authenticate requests to LinkedIn on your behalf	Refresh tokens: 12 months or until you revoke access. Access tokens: ≤ 30 minutes.
Account identifiers	URNs for the personal profile and Company Page	Needed to tell LinkedIn which account to post from / query	Until access is revoked.
Post content you supply	Text, image/video files, article URLs, captions	To publish posts you create through the App	Deleted immediately after the post is successfully uploaded.
Engagement metrics	Impression, click, reaction, comment and share counts	Display basic analytics inside the App	Stored in memory only; not persisted to any database.
Operational logs	Timestamps, success/error codes (no personal content)	Debugging, rate‑limit handling	30 days, then automatically purged.

We never read your LinkedIn connections, profile fields, inbox, Ads data, or any data belonging to other LinkedIn members.

4. How We Use the Data

To publish posts that you initiate.
To fetch first‑party engagement numbers for those posts and display them back to you.
To maintain and refresh OAuth tokens so the App continues working without requiring you to log in every 30 minutes.

We do not use the data for profiling, advertising, selling, or any secondary purpose.

5. Data Storage & Security

All tokens are stored in an encrypted secrets vault accessible only to the App’s runtime. Transport to and from LinkedIn uses TLS 1.2+. No persistent user database or cloud storage is used for content or metrics. Back‑ups encrypt data at rest and are retained for a maximum of 30 days.

6. Sharing of Data

We do not share, sell, rent, or disclose any personal or LinkedIn data to third parties, except:

to LinkedIn Corporation, solely to fulfil the API requests you trigger; or
where required by applicable law or valid legal process.

7. Your Choices & Control

Revoke access at any time: visit LinkedIn ▸ Settings & Privacy ▸ Data privacy ▸ Other applications ▸ Permitted services and remove “ExplodeWithAI”.
Deletion: upon revocation, all tokens are invalidated automatically and any residual logs are purged within 24 hours.
Access & correction: because we store only tokens and the posts you author directly, there is no additional personal data for you to access or correct.

8. Children’s Privacy

The App is intended for use by adults in a professional context and is not directed to children under 16. We do not knowingly collect data from children.

9. Changes to This Policy

Substantive changes will be posted here at least 7 days before they take effect and highlighted in the App interface. Continued use of the App after the effective date constitutes acceptance of the revised policy.

Xplode with AI — Privacy Policy