Privacy Policy

01Who we are

buyWords is an employee advocacy and content operations platform that helps organizations create, approve, publish, and measure professional content across authorized employee and company LinkedIn accounts. It is built and operated by the team at Belkins. This policy explains what we collect when you use the service, why we collect it, and the controls you have over it. We collect the least we can and still run the product well.

02What we collect

Three kinds of data: what you give us, what the product generates as you work, and a thin layer of technical data we need to keep it running.

• Account data: your email, name, team, role, and the workspace and profiles you manage. Sign-in is by magic link, so we never store a password.
• Content you create: the profiles, posts, drafts, calendar items, topic ideas, peer lists, and comments you build inside buyWords.
• LinkedIn data you connect: profile details, your published posts, and per-post engagement metrics for the accounts you authorize. See the LinkedIn section below.
• Usage and technical data: log and device data, IP address, and basic product analytics so we can debug, secure, and improve the service.
• Billing data: your plan, subscription status, and the limited records tied to payment. Card details are handled by our payment processor, not stored by us.

03How we use it

We use your data to provide the product you signed up for, and not for much else. Concretely:

• Running the features: profiles, the Writing Assistant, Topic Scout, the content calendar, the pipeline, per-post analytics, peer lists, and team advocacy.
• Authenticating you, scoping what you can see by role, and keeping accounts secure.
• Sending transactional email you would expect: magic links, invites, and notifications you opted into.
• Measuring content engagement and producing comparative performance reporting against the industry benchmarks you choose, so the analytics are worth reading.
• Diagnosing problems, preventing abuse, and improving the product over time.

We do not sell your data. We do not use your content to train models for anyone else. AI drafting runs your prompts and context through our model providers solely to generate output for you.

04LinkedIn data and Unipile

buyWords does not scrape LinkedIn, and we never store your LinkedIn password. We access LinkedIn only through authorized API methods. When you connect an account, you authorize access through Unipile, a third-party provider that brokers the connection on your behalf. We use that access only to read what you would expect a content operations tool to read: profile details, your published posts, and their engagement metrics.

We request only the minimum permissions needed to create, publish, and measure content for the accounts you authorize, and nothing more. buyWords does not automate engagement, connection requests, or other member activity on your behalf; any likes, comments, reshares, or connections are actions you take yourself on LinkedIn.

We retrieve and refresh this data so your dashboards, content analytics, and industry benchmarks stay current. You can disconnect a LinkedIn account at any time from your settings; once disconnected, we stop fetching new data for it, and you can request deletion of the LinkedIn data we have stored for that account at any time. Your use of LinkedIn remains governed by LinkedIn's own terms, which you are responsible for following.

05Who we share it with

We share data only with the service providers we need to run buyWords, each bound to process it on our behalf and nothing more. Today that includes:

• Supabase, for our database, authentication, and file storage.
• Vercel, for application hosting and delivery.
• Unipile, for the LinkedIn connection described above.
• Our AI model providers, for the drafting and planning features.
• Resend, for transactional email.
• Stripe, for payment processing.
• Sentry, for error monitoring.

We may also disclose data where the law requires it, or as part of a merger or acquisition, in which case we will give you notice. Otherwise we do not hand your data to third parties, and we never sell it to advertisers.

06Cookies

We use cookies and similar local storage for the things the product cannot work without: keeping you signed in, remembering your active team and profile across devices, and a small amount of product analytics. We do not run third-party advertising trackers. Your browser can block or clear cookies, though some features will stop working if you do.

07Data retention

We keep your data for as long as your account is active and you are using the service. When you delete content, we remove it; deleting a profile cascades to its posts and content. When you close your account, we delete or anonymize your personal data within a reasonable window, except where we are required to keep limited records for legal, tax, or security reasons. Backups roll off on their own schedule.

08Your rights

You have control over your data. Depending on where you live, that includes the right to:

• Access the personal data we hold about you.
• Correct it if it is wrong or out of date.
• Export the content you created in buyWords.
• Delete your account and the personal data tied to it.
• Object to or restrict certain processing.

Most of this you can do yourself from your settings. For anything you cannot, email us and we will help. We will not penalize you for exercising any of these rights.

09Security

We protect your data with role-based access controls, row-level security in the database, encrypted connections, and scoped access for everything our team and our providers touch. No system is perfectly secure, but we treat your data the way we treat our own, because some of it is.

10Changes and contact

We may update this policy as the product evolves. If a change is material, we will tell you before it takes effect. Questions, requests, or anything you want us to fix can go to privacy@buywords.io.