Privacy Policy

1. Scope and responsible entity

This policy explains how Insynergy Inc. ("Insynergy," "we," "us," or "our") handles personal information through insynergy.io, our communications, and Insynergy Content Publisher, our internally controlled application for publishing approved content to LinkedIn.

Insynergy Inc. is located at 7F Nihonbashi Daiei Building, 1-2-6 Nihonbashi Muromachi, Chuo-ku, Tokyo 103-0022, Japan.

2. Information we collect

• Contact information: your name, email address, organization, and the content of a message you send to us.
• LinkedIn authorization data: the OAuth access token and application-specific member identifier provided when an authorized member connects a LinkedIn account.
• Publishing records: content submitted for human approval, approval metadata, publication identifiers, timestamps, content hashes, and operational status needed to prevent duplicate publication and maintain an audit trail.
• Post analytics: impressions, reach, reactions, comments, reposts, link clicks, or similar metrics only when the relevant official LinkedIn API access has been approved and enabled. Manually supplied metrics may also be recorded.
• Technical information: hosting and security providers may process IP address, browser, device, request, and diagnostic information necessary to deliver and protect the website.

We access LinkedIn data only through official APIs and permissions granted by the authorized member. We do not obtain LinkedIn data through scraping.

3. How we use information

• Respond to inquiries and provide requested information.
• Authenticate an authorized LinkedIn member and resolve the correct publishing identity.
• Validate, preview, and publish only the exact content that has passed the application's human-approval controls.
• Prevent duplicate posts, investigate failures, maintain security, and preserve an accountable publication record.
• Measure post performance when analytics access is authorized, and improve editorial policy through human-reviewed analysis.
• Comply with applicable law and platform requirements.

We do not sell personal information or LinkedIn data. We do not use it for third-party advertising, surveillance, or automated engagement. The application does not automatically comment, react, or repost.

4. Human authorization and consent

Connecting a LinkedIn account requires the member's affirmative authorization through LinkedIn's OAuth process. Publication is a separate action: content must be approved by a human and a production publication must be explicitly confirmed. Editorial optimization or analytics results do not authorize publication.

5. Sharing and service providers

We disclose information only as needed to operate the services, comply with law, protect rights and security, or follow your instructions. Relevant providers may include:

• LinkedIn, for member authorization, publication, and approved analytics functions.
• GitHub, for encrypted environment secrets, controlled workflow execution, source control, and publication audit records.
• Website hosting, infrastructure, email, and security providers that process information on our behalf.

These providers may process information in jurisdictions outside Japan. We use appropriate contractual, technical, and organizational safeguards as applicable.

6. Storage, retention, and deletion

OAuth access tokens are stored as encrypted environment secrets and are not written into publication records. Tokens are retained only while valid and necessary for the authorized integration, and are deleted when access is withdrawn, deletion is requested, or the application ceases operation. LinkedIn data is retained only for the period needed to provide the authorized service and meet applicable legal or security obligations.

Publication audit records may be retained to document human approval, prevent duplicate external actions, reconcile uncertain API results, and meet legitimate compliance needs. Where a record must be retained, we minimize the personal information it contains and restrict access.

7. Security

We use access controls, encrypted transport, protected secret storage, least-privilege workflow permissions, branch restrictions, validation gates, audit logging, and duplicate-publication controls. No method of transmission or storage is completely secure, but we maintain safeguards proportionate to the information processed.

8. Your choices and requests

Subject to applicable law, you may request access, correction, deletion, restriction, or information about our handling of your personal information. You may withdraw LinkedIn application access through your LinkedIn account settings. You may also ask us to delete the associated member identifier, OAuth token, and LinkedIn data under our control.

Send requests to hello@insynergy.io. We may need to verify your identity before completing a request.

9. Children's information

Our services are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from children through Insynergy Content Publisher.

10. Changes to this policy

We may update this policy when our services, platform permissions, or legal obligations change. The effective date above identifies the current version. Material changes will be presented through an appropriate notice before they take effect when required.