LinkFlow
Privacy Policy
Last updated 12 November 2026. This policy covers the LinkFlow web app (linkflow.avijitbhuin.com) and the LinkFlow Connect browser extension.
The short version
- We use your data only to run the accounts you connect and the automations you set up.
- We never see your social media passwords. You type them only on the platform's own login page.
- We don't sell your data or use it for advertising.
- You can disconnect accounts, sign the extension out, or ask us to delete everything at any time.
1. Who we are
LinkFlow ("we", "us") provides a workspace for managing and automating your own social media accounts. For any privacy question, contact avijitbhuin21@gmail.com.
2. What we collect
Your LinkFlow account
Your name, email address, a salted password hash or your Google sign-in identity, your organisation and team memberships, and your settings.
Connected social accounts
When you connect LinkedIn, Facebook, Instagram, X, Reddit, WhatsApp or Gmail, we store the session or app credentials needed to act on that account. We also store the profile details, posts, messages, analytics and other content LinkFlow reads or creates while doing the work you ask for.
The LinkFlow Connect extension
- When you click Connect, the extension opens the platform's own login page. Once you're signed in, it reads the session cookies for that platform only and sends them, with your browser's user-agent, to your LinkFlow account.
- It stores a LinkFlow access token and your LinkFlow name and email in your browser's local extension storage, so it can show who you're signed in as.
- It does not read your browsing history, the content of the pages you visit, or cookies for any other site, and it never sees your passwords.
Usage and technical data
Logs of the actions LinkFlow takes on your behalf, error logs, IP address and approximate country (used to pick a matching network location for your accounts), and usage costs.
3. How we use it
- To provide the service: connecting your accounts, posting, replying, messaging, analytics and the automations you configure.
- To generate drafts and replies with AI models when you use those features.
- To keep the service secure, prevent abuse and fix problems.
- To bill usage and to contact you about your account.
We do not sell personal data, use it for advertising, or use it to decide creditworthiness.
4. Who we share it with
We share data only with the service providers we need to run LinkFlow. They process it on our behalf:
| Provider | Purpose |
|---|---|
| Railway | Application hosting and database |
| S3-compatible object storage | Encrypted file and media storage |
| AI model providers (via OpenRouter) | Generating drafts, replies and analysis. Only the content needed for the request is sent. |
| Brevo | Transactional email |
| Residential proxy provider | Routing your accounts' traffic through a stable network location in your country |
| "Sign in with Google", if you choose it |
The social platforms themselves receive the actions you ask LinkFlow to perform on your accounts. We may disclose data if required by law.
5. Security
All traffic uses HTTPS. Platform sessions and credentials are encrypted at rest. Passwords are stored only as salted hashes, and extension tokens only as one-way hashes. Access to production systems is restricted.
6. Retention and deletion
- Disconnect an account in LinkFlow and its stored session is deleted.
- Sign out in the extension and its token is deleted from your browser and revoked on our servers. Uninstalling the extension removes all of its local data.
- We keep account data while your LinkFlow account is active. Email us to delete your account and its data. Logs and backups expire on a rolling basis.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how it's processed. Email avijitbhuin21@gmail.com and we'll respond within 30 days.
8. Children
LinkFlow is not intended for anyone under 16, and we don't knowingly collect their data.
9. Changes
If we change this policy, we'll update the date above. For significant changes we'll also notify you in the app or by email.