Privacy Policy

1. Overview

Hektera ("we", "us", or "our") operates a LinkedIn automation service that publishes content to company LinkedIn pages on behalf of our clients. This Privacy Policy describes how we collect, use, and protect information when you use our service.

2. LinkedIn API Integration

Our service integrates with the LinkedIn Marketing Developer Platform using the following OAuth 2.0 scopes:

• w_organization_social — Used exclusively to create and publish posts to your organization's LinkedIn company page.
• r_organization_social — Used to read existing posts and engagement data from your LinkedIn company page.

What we do with this access: We use these permissions solely to publish AI-generated content to your organization's LinkedIn company page as instructed by you. We do not collect, store, or share any LinkedIn user data, personal profile data, connections, or private messages.

What we do not do: We do not access personal LinkedIn profiles, connection lists, messages, or any data unrelated to your organization's company page. We do not sell, rent, or share LinkedIn data with third parties.

Token storage: LinkedIn OAuth access tokens are stored securely in an encrypted credential store. Tokens are used exclusively for automated posting on your behalf and are never exposed to third parties.

3. Information We Collect

We collect only the information necessary to operate our service:

• Business contact information (name, business email address)
• LinkedIn company page identifier (organization ID/URN)
• OAuth 2.0 access and refresh tokens for your LinkedIn company page
• Approved post content and scheduling preferences
• Telegram chat ID for approval notifications (if applicable)

4. How We Use Your Information

• To publish approved content to your LinkedIn company page
• To send you approval notifications via Telegram
• To monitor token expiry and notify you before re-authentication is needed
• To provide customer support

5. Data Sharing

We do not sell, trade, or otherwise transfer your information to outside parties. We do not share your LinkedIn credentials or data with any third party. The only external services we use are:

• LinkedIn API — to publish content to your company page
• Anthropic Claude API — to generate post content (article summaries are sent; no personal data is included)
• Telegram Bot API — to send approval notifications

6. Data Retention

We retain your data only for as long as necessary to provide the service. You may request deletion of your data at any time by contacting us at info@hektera.com. Upon request, all stored credentials and associated data will be deleted within 30 days.

7. Security

We implement industry-standard security practices to protect your data, including encrypted credential storage, secure API communication over HTTPS, and access controls limiting who can view or modify your credentials.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Revoke LinkedIn API access at any time via your LinkedIn account settings

9. Contact

For privacy-related questions or data deletion requests, contact us at: