We built Postalyst for creators who value their privacy. This policy explains exactly what we collect, why we collect it, and how you can control it — including data from LinkedIn and X.
This Privacy Policy describes how Postalyst ("we", "us", "our") collects, uses, and protects your information when you use our AI-powered LinkedIn and X growth platform. By using the Service, you agree to the practices described here.
Words with capitalized initial letters have meanings defined below and apply equally in singular and plural forms.
| Term | Definition |
|---|---|
| Account | A unique account created to access Postalyst or parts of it. |
| Company | Postalyst, operated from Tamil Nadu, India. |
| Service | The Postalyst platform at postalyst.com and app.postalyst.com. |
| Personal Data | Any information relating to an identified or identifiable individual. |
| Usage Data | Data collected automatically from your use of the Service. |
| Connected Account | A third-party platform (LinkedIn, X/Twitter) you authorize Postalyst to access via OAuth 2.0. |
| You | The individual or legal entity accessing or using the Service. |
When you create an account or use our Service, we may collect:
Collected automatically when you use the Service, including IP address, browser type and version, pages visited, time and date of visits, time spent on pages, and device identifiers.
We use Session Cookies and Persistent Cookies for:
Postalyst connects to LinkedIn and X on your behalf via OAuth 2.0. This is the most important section for platform users — here is exactly what we access, why, and how it is stored.
| Data / Permission | Why We Access It | Stored? |
|---|---|---|
Name, photo, headline, profile URL profile | Personalize your dashboard and AI-generated content | Cached briefly |
Primary email address email | Authentication and account management | Yes, securely |
| Create/modify/delete posts on your behalf | Schedule and publish content you create in Postalyst | Token only |
| 1st-degree connection count | Display network size in growth metrics | Aggregated |
| Retrieve org posts, comments, reactions & engagement | Show analytics for content published on your LinkedIn Page | Aggregated |
| Create/modify/delete org posts, comments, reactions | Schedule and publish content to your LinkedIn Page | Token only |
| Org page reporting — followers, visitors, analytics | Display audience growth and engagement analytics for your Page | Aggregated |
| Manage org pages & reporting | Admin access to manage your connected LinkedIn Page settings | Token only |
| Data / Permission | Why We Access It | Stored? |
|---|---|---|
| Name, username, profile photo | Personalize your Postalyst dashboard | Cached briefly |
| Publish tweets / threads on your behalf | Schedule and publish content you create in Postalyst | Token only |
| Post engagement metrics (likes, reposts, impressions) | Show post performance analytics in your dashboard | Aggregated |
| Follower count | Display audience growth trends | Aggregated |
We do not use your data for advertising, third-party marketing, or profiling unrelated to the Service.
We do not sell your personal data. We may share it only in these limited situations:
| Data Category | Retention Period |
|---|---|
| Account information | Duration of account + up to 24 months after closure |
| LinkedIn / X OAuth tokens | Until you disconnect or revoke access |
| Post analytics data | Duration of account (deleted on account closure) |
| Usage / analytics data | Up to 24 months from collection |
| Support correspondence | Up to 24 months from ticket closure |
| Server logs | Up to 24 months for security purposes |
When retention periods expire, data is securely deleted or anonymized. Residual copies in encrypted backups are purged on our routine backup cycle.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email connect@postalyst.com. We will respond within 30 days.
No method of internet transmission or electronic storage is 100% secure. While we strive to protect your data using commercially reasonable means, we cannot guarantee absolute security.
Postalyst is not directed at anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at connect@postalyst.com and we will promptly delete it.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you by email or a prominent notice in the Service before changes take effect.
We're a solo-founder company and take every privacy inquiry personally.
Reach out directly — you'll hear back from the founder.