Security and privacy

You are trusting Postiv with your LinkedIn account and your content, so here is exactly how that works: what we can do on LinkedIn, how we protect your sign-in, where your data lives and how you stay in control. For the legal detail, read our privacy policy. For a one-page summary of LinkedIn safety, see postiv.ai/linkedin-safety.

How connecting LinkedIn works

Postiv connects through LinkedIn's official API, never by pretending to be you.

1. You click Connect in Postiv and are sent to linkedin.com. Postiv never shows its own LinkedIn login form.
2. You sign in on LinkedIn. Your password goes to LinkedIn only. Postiv never sees or stores it.
3. LinkedIn lists what Postiv is asking for. Nothing connects until you approve.

What Postiv can do on LinkedIn

• Publish and schedule the posts you approve.
• Post the comments and reactions you send from Postiv.
• Show analytics for your posts and profile.
• Manage company pages you are an admin of.
• Read your name, photo, headline and connection count.

What Postiv cannot do

• See or store your LinkedIn password.
• Read your private messages.
• See who you are connected with.
• Send connection requests or messages.
• Post anything you have not approved.

Posts go out only when you publish or schedule them. Drafts stay drafts until you decide. Features such as Comment Plug only act the way you set them up.

How your data is protected

• Sign-in tokens are encrypted. The access that LinkedIn gives Postiv is encrypted before it is stored.
• Your files are private. Images, PDFs and carousel exports sit in private storage and open through temporary links.
• Roles control access. Only owners and admins can manage billing and API keys. Approvers can require review before a post goes live. See Settings overview.
• Connected AI apps are limited. When you connect Claude or ChatGPT, you choose one workspace and either Read & write or Read only, and you can revoke it any time. See Connect Postiv to your AI tools.

Where your data is stored

Our primary application data is hosted in the EU, on AWS in Frankfurt, Germany. Our core providers, including the database, analytics, payments and support tools, also run in EU data centers. Where data has to leave the EU, for example to ask an AI provider to answer you, we rely on safeguards such as Standard Contractual Clauses, as described in the privacy policy.

How AI uses your content

When you ask Bob to write, rewrite or design something, Postiv sends the relevant text, files and context to AI providers such as OpenAI, Anthropic or Google. They process it through their standard API only. Your inputs and outputs are not used to train their models, under the providers' API terms. You always review what Bob writes before it is published.

How LinkedIn data is handled

• Postiv uses LinkedIn data only to run the publishing, analytics and engagement features you ask for.
• We do not sell LinkedIn data, and we do not use it for sales prospecting, recruiting or ad targeting.
• Comment text and details about other LinkedIn members are kept only briefly. The privacy policy lists the exact windows.

Stay in control

Disconnect LinkedIn

1. Open Settings, then LinkedIn Accounts.
2. Click Disconnect on your LinkedIn card, then confirm with Disconnect profile.

Postiv loses access to that profile straight away, and its queued posts stop. You can also remove Postiv from LinkedIn's "Permitted services" page. Existing content and analytics records stay in Postiv, and you can reconnect later.

Ask about your data

You can ask to see, correct, export or delete your personal information. The privacy policy explains how and who to contact.

Common questions

Can LinkedIn restrict my account for using Postiv?

LinkedIn restricts accounts that use tools that scrape or automate activity on its site. Postiv does neither. It connects through the API LinkedIn provides for approved apps, and acts only on what you ask it to do.

Will Postiv post without asking me?

No. A post goes out only when you publish it or schedule it.

Can my teammates see my LinkedIn password?

No. Nobody at Postiv, and nobody in your workspace, can see it. It is never shared with Postiv.

Is the API key safe to share?

No. Treat an API key like a password and keep it out of shared messages and screenshots. If it leaks, click Regenerate Key in Settings, then Integrations. See Integrations, API key and webhooks.

Still stuck?

Email carolina@postiv.ai with your question and, if it is about a specific account, the workspace name. For formal data requests, use the contact details in the privacy policy.