Privacy Policy

1. Who We Are

Orange Sky (“we”, “us”, “our”) operates the LinkedIn Automation service available at this website. We are based in India. For any privacy-related queries, contact us at rrzala@yellowsky.in.

2. What Data We Collect

Account data

• Name, email address, and password (hashed) when you register.
• Professional details you provide: profession, persona style, image style preferences, WhatsApp number, and approval email.

LinkedIn data

• When you connect your LinkedIn account via OAuth, we receive and store an encrypted access token, your LinkedIn user ID, and basic profile information (first name, last name).
• We never receive or store your LinkedIn password.
• We use the access token solely to publish posts on LinkedIn on your behalf after you approve each post.

Topics and content

• Topics you save or generate through the platform are stored in our database.
• AI-generated post content is created using OpenAI and stored for your review and approval.

Payment data

• Payments are processed by Razorpay. We do not store your card number or bank details. We only store order IDs, payment status, and the post package you purchased.

Usage data

• Standard server logs (IP address, browser type, pages visited) for security and debugging purposes.

3. How We Use Your Data

• To provide the LinkedIn Automation service — generating and publishing posts on your behalf.
• To send you post approval emails so you can review content before it goes live.
• To process payments and maintain subscription records.
• To improve the service and fix technical issues.
• To contact you about your account (via WhatsApp or email) as part of onboarding.

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services to operate the platform:

• LinkedIn — OAuth authentication and post publishing. Governed by LinkedIn’s Privacy Policy.
• OpenAI — AI-generated post content. Governed by OpenAI’s Privacy Policy.
• Razorpay — Payment processing. Governed by Razorpay’s Privacy Policy.
• Neon / PostgreSQL — Secure cloud database hosting.
• Vercel — Application hosting and infrastructure.
• n8n — Automation workflow for scheduling and publishing posts.

5. Data Security

• LinkedIn access tokens are encrypted using AES-256 before being stored in the database.
• Passwords are hashed and never stored in plain text.
• All data is transmitted over HTTPS.
• Access to the database is restricted and not publicly exposed.

6. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records).

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Disconnect your LinkedIn account at any time from the dashboard.
• Withdraw consent for us to post on LinkedIn by disconnecting your account.

To exercise any of these rights, email us at rrzala@yellowsky.in.

8. Cookies

We use minimal cookies — only short-lived session cookies during the LinkedIn OAuth flow (to verify state and prevent CSRF attacks). These are deleted immediately after the OAuth handshake completes. We do not use advertising or tracking cookies.

9. Children’s Privacy

Our service is intended for professionals aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by a notice on the platform. Continued use of the service after changes constitutes your acceptance of the updated policy.

11. Contact

For any questions or requests regarding your privacy, contact us at rrzala@yellowsky.in.