Privacy Policy
Placeholders in [brackets] must be filled in before Greenlabel is offered to anyone else. This page is a starting point written in plain language, not legal advice; have it reviewed by a lawyer.
Who we are
Greenlabel is run by [OPERATOR LEGAL NAME], [REGISTERED ADDRESS] ("we", "us"). Contact us about privacy at [PRIVACY CONTACT EMAIL].
What we collect and why
- Account details: your email address and name, so you can sign in with a one-time code and we can email you about your posts.
- Your LinkedIn connection: when you connect LinkedIn, we store your LinkedIn member ID, name, profile photo link and an access token. We use them only to show your profile in the app and to publish posts you have approved, at the time you chose.
- Your content: the posts, topics, images, hashtags, writing profile and settings you create or that we draft for you, and the history of edits.
- Usage of AI features: which AI requests were made and their size, to keep costs within limits. We don't use your content to train AI models.
- Technical data: the IP address used to request a sign-in code (to prevent abuse), and server logs.
Who processes your data for us
- Laravel Cloud (hosting, database and file storage in the EU, Frankfurt; file storage provided by Cloudflare R2).
- Anthropic (Claude AI): the text needed to research topics and draft or edit your posts is sent to Anthropic's API.
- Resend (email delivery): your email address and the content of emails we send you.
- LinkedIn: the posts you approve, published through LinkedIn's API on your behalf.
- Unsplash (stock photos): search words only, no personal data.
We don't sell your data or use it for advertising. [ADD ANY OTHER PROCESSORS, e.g. error monitoring.]
Legal basis
We process your data to provide the service you signed up for (contract), and to keep it secure and within cost limits (legitimate interests). Connecting LinkedIn is based on your consent, which you can withdraw at any time by disconnecting it in Settings.
How long we keep it
We keep your account and content until you delete your account. Sign-in codes expire after 10 minutes. When you disconnect LinkedIn, we delete the access token and your LinkedIn name and photo link. When you delete your account, we delete your workspace, posts, images, LinkedIn connection and settings straight away; backups are overwritten within [BACKUP RETENTION, e.g. 30 days].
Cookies
We only use cookies that are needed for the app to work: a session cookie, a "remember me" cookie so you stay signed in, and a security token that protects forms. We don't use analytics or advertising cookies, so there is no cookie banner.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the Nigeria Data Protection Act), you can ask to access, correct, export or delete your data, or object to how we use it. You can delete your account yourself in Settings, or email [PRIVACY CONTACT EMAIL]. You can also complain to your data protection authority.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it applies.