Privacy Policy
What we collect, how we use it, who we share it with, and your rights.
Overview. This Privacy Policy explains what personal data LiHelper ("we", "us") collects when you use the LiHelper web app and the LiHelper Connector browser extension (the "Service"), how we use it, who we share it with, and your rights. It forms part of our Terms of Service. By using the Service you agree to this policy. Last updated: .
1. Data we collect
Account data: your name, email, and a password stored only as an Argon2 hash — or the basic profile returned by LinkedIn OAuth. LinkedIn connection: if you connect LinkedIn, we store the OAuth access token from LinkedIn's login (for posting and profile data); in-session features such as the Easy Apply form-fill assist and the analytics sync run inside your own logged-in session through the browser extension (see the LiHelper Connector page for what it reads and what runs where), and we never ask for or store your LinkedIn password or session cookie. Content: the posts, drafts, resumes, cover letters, and settings you create. Usage data: feature usage, AI usage counters (posts and images generated), and app logs. Billing data: handled by Paddle (see below) — we do not receive or store your full card number.
2. How we use your data
We use your data to provide and operate the Service: generating and scheduling content, building resumes, assisting with job applications, running any automation you enable, showing analytics, providing support, securing accounts, and managing your subscription. Your data is scoped to your account; we do not use it to build cross-account advertising profiles, and we do not use your private content to train our own models.
3. Legal bases (where GDPR/UK GDPR applies)
We process your data to perform our contract with you (providing the Service and billing), on the basis of your consent (for connecting LinkedIn and enabling automation, which you can withdraw), for our legitimate interests (securing and improving the Service), and to comply with legal obligations. Where we rely on consent, you may withdraw it at any time.
4. Payments (Paddle, Merchant of Record)
Subscriptions are processed by Paddle.com, which acts as the Merchant of Record and independent controller of your payment data. Paddle collects and processes your payment details and billing information to take payment, issue invoices, and handle tax; we receive only limited information such as your plan, subscription status, and country. Paddle's use of your data is governed by Paddle's own privacy policy.
5. How we protect your data
Sensitive credentials — your LinkedIn OAuth token — are encrypted at rest using Fernet. Passwords are hashed with Argon2 and never stored in plain text. Traffic is served over HTTPS, and access to production data is restricted. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.
6. Service providers and sub-processors
To run the Service we share the minimum necessary data with providers acting on our behalf: AI runs through OpenRouter, and models currently include DeepSeek, OpenAI and Google models, to generate and analyze text and images; Paddle for payments; our hosting and database infrastructure (including Vercel, Oracle Cloud, Koyeb, and Supabase); a resume-analysis and file-scanning service (a private Hugging Face Space); a stock-image provider (Pexels); and an email provider for transactional email. LinkedIn processes the actions you take on its platform. Each provider handles data under its own terms.
7. AI processing of your content
When you generate or analyze content, the relevant text (for example post text or resume text) is sent to the AI provider so it can produce output, and is processed under that provider's terms. Please do not submit information you are not comfortable sharing with a third-party AI provider.
8. Sharing and disclosure
We do not sell your personal data. We share it only with the service providers above to operate the Service, where you direct us to (for example, publishing to LinkedIn), to comply with law or lawful requests, or to protect our rights, users, and the Service. If we are ever involved in a merger or acquisition, we will handle your data consistently with this policy.
9. International transfers
We and our providers may process your data in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
10. Retention and deletion
We keep your data while your account is active and as needed to provide the Service. You can disconnect LinkedIn to remove the stored token, and delete content within the app. When you close your account we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (for example billing records held by Paddle for tax and accounting).
11. Your rights
Depending on where you live, you may have the right to access, correct, export, delete, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. You can exercise most of these from within the app or by emailing support@lihelper.com. You also have the right to complain to your local data-protection authority.
12. Children
The Service is not directed to children and is intended only for users aged 18 and over. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.
13. Changes and contact
We may update this policy from time to time and will update the date above when we do. For privacy questions or to exercise your rights, contact us at support@lihelper.com.