Privacy policy

Who this is for

Helio Posts is a business tool used by agencies and companies to draft, schedule and publish content to their own LinkedIn company pages, and to inform paid promotion of that content. We process business data on behalf of our customers, who are the controllers of their own brand and audience data.

What we process

• Account data: the name and email of people who log in, used to authenticate them and send operational notifications.
• Content you create: the notes, media and drafts submitted into a workspace, and the posts produced from them.
• LinkedIn organisation data: where you connect a LinkedIn company page, we process the page's post and performance data (impressions, clicks, reactions, comments, shares) so you can see how content performs. This is stored for up to one year, in line with LinkedIn's terms.
• Boost notes: when you flag a post for paid promotion, we store your note and the audience tags you add. We do not connect to your LinkedIn ad account.

Member data

If we display the names or profile details of LinkedIn members who interact with your posts, that information is cached only transiently (profile details for up to 24 hours, engagement activity for up to 48 hours) and is never used for advertising, sales prospecting, lead creation or audience targeting. This is both our policy and a requirement of LinkedIn's platform terms.

AI drafting

Drafts are generated using Anthropic's Claude models. The brand material and notes you provide are sent to that model to produce a draft. We do not use your content to train models.

Billing

Paid plans are billed through Stripe. Card details go straight to Stripe and never touch our servers; we hold only a reference to your Stripe customer and subscription so we know which plan is active. Invoices and receipts live in Stripe's billing portal, which you can open from your account page.

Who handles data for us

We do not sell your data. We keep the list of companies that handle data for us short, and we name every one of them here. Each is bound by a data processing agreement and we will update this list before adding to it.

• Hetzner Online GmbH (Germany): hosting, storage and backups. Our servers are in Hetzner's Helsinki data centre, inside the EU.
• Stripe: payments and invoicing.
• Brevo (Sendinblue SAS, France): delivery of the emails we send you, such as approval requests and account notices.
• Anthropic PBC (United States): the Claude models that write drafts, as described above.

LinkedIn receives data only at your direction, when you connect a company page or approve a post, and under LinkedIn's own terms. Nothing is published to LinkedIn without a named person at your organisation approving it first, unless someone there switches on Set up and forget, which lets Helio Posts approve its own drafts.

Cookies

We use one strictly necessary cookie to keep you signed in. There are no third-party analytics or advertising trackers on the app or on our website.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, or object to how we use it. Where data belongs to a customer's workspace we will refer the request to that customer, who is the controller. You can also complain to the Information Commissioner's Office (ico.org.uk).

Retention and deletion

We keep data for as long as your workspace is active, subject to the LinkedIn limits above. You can ask us to delete a workspace and its data at any time.

Contact

For any privacy question, or to exercise your rights over your data, contact hello@helioposts.com.