Privacy Policy

• Your email address, so you can sign in.
• When you connect LinkedIn: the access token LinkedIn issues to us and its expiry date, your LinkedIn member id (an opaque URN), your name, your profile photo URL and the email on your LinkedIn account.
• The posts, text and media you create or publish through Growy, and the LinkedIn post id of anything we published for you.
• The analytics LinkedIn reports for those posts — impressions, reactions, comments and reposts — and your follower count. We read these, show them to you, and store none of them; see “How long we keep it” below.

• openid, profile, email — to sign you in and to identify whose account this is. We read your name, profile photo and email address, and store those three things plus your member id. We do not read your headline, your work history, your connections, your feed or your messages.
• w_member_social — to publish a post you wrote in Growy to your own LinkedIn feed, only when you review it and press “Post to LinkedIn”. One post per action, with the text, the single image or video and the audience (anyone, or your connections only) that you chose. The same permission is used to delete a post — and only ever a post Growy itself published for you, at your request, from your library. We never publish or delete on a schedule or in the background, and we never touch a post Growy did not create.
• r_member_postAnalytics — to read the analytics LinkedIn reports for the posts you published through Growy: impressions, reactions, comments and reshares. The figures we show you are the figures LinkedIn returned; we do not derive, blend or estimate them.
• r_member_profileAnalytics — to read your follower count and the followers you gained, so you can see whether posting consistently is moving anything.

We can only show analytics for posts published through Growy. LinkedIn's API gives an app no way to list the posts a member published elsewhere, so posts you wrote in the LinkedIn app are invisible to us — we are not choosing to hide them. We never access another member's profile or any company page, we never use LinkedIn data to train machine-learning models, and we never combine your LinkedIn data with another user's.

• Social activity data — not stored at all. Impressions, reactions, comments, reposts and follower counts are requested from LinkedIn at the moment you open the Analytics page, rendered, and never written to our database. Close the page and nothing of them remains on our side. LinkedIn's API terms permit holding member social activity data for up to 48 hours; we hold it for none, so there is no archive here to breach, to export, or to ask us to erase. (A short in-memory buffer inside the server process stops a page refresh from spending your LinkedIn request allowance twice; it lives about ninety seconds, is never written to disk, and is gone when the process is.)
• Your connection — until you disconnect. The access token, its expiry, your member id, name, photo URL and email are kept while the connection exists and deleted when you disconnect. LinkedIn member tokens last 60 days and cannot be refreshed in the background, so an unused connection stops working on its own after 60 days.
• Your drafts — until you delete them. Posts and media you created in Growy are yours and stay in your library until you remove them or ask us to delete your account.

• In Growy, open Settings → Disconnect. This immediately deletes the access token, your member id, and the name, photo URL and email we read from LinkedIn. Because no analytics are stored in the first place, that one action really does leave nothing about your LinkedIn account on our side. It does not cancel the grant at LinkedIn's end — LinkedIn publishes no way for an app to revoke its own token — so the token we just deleted simply expires unused; see the next point to end the grant itself.
• You can also remove Growy at any time under LinkedIn → Settings → Data privacy → Permitted services. LinkedIn does not notify applications when you do this, so the token simply stops working and we delete the dead connection — but if you want it gone the same second, use Disconnect in Growy.
• Posts already published stay on your LinkedIn feed. Delete one from its page in your Growy library (“Delete from LinkedIn”), or in the LinkedIn app.
• To request full deletion of your Growy account and the drafts in it, email hello@growy.io from the address you signed up with, and we will delete it within 30 days — usually the same working day.