PRIVACY POLICY

Last Updated: July 8, 2026

Brighter Days Advisory LLC doing business as Post Assembly ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

1. DATA COLLECTION

We collect the following information:

  • Account & LinkedIn Profile: Name, email address, profile picture, LinkedIn headline, vanity URL, and member ID, obtained via LinkedIn OAuth
  • Authentication Tokens: Encrypted LinkedIn OAuth access and refresh tokens, used to publish content on your behalf
  • User Content: Text, audio, and video files you upload to the Service
  • LinkedIn Engagement Data: Metrics on posts we publish for you (impressions, reactions, comments), fetched periodically
  • Usage & Device Data: Information about how you interact with the Service, including the IP address recorded at sign-up as proof of agreement acceptance
  • Attribution Data: Referral source and UTM parameters, captured via the first-party pa_attribution cookie

2. AI DISCLOSURE

We use third-party AI processors (Google Gemini and Anthropic Claude) to transform your content into social media posts and related content.

Important: We do not use your proprietary User Content to train global machine learning models. We do not permit our AI providers to use your content for model training purposes.

3. LEGAL BASIS FOR PROCESSING (GDPR/UK-GDPR)

We process your account and content data to perform our contract with you (Art. 6(1)(b)). We rely on legitimate interests (Art. 6(1)(f)) for product analytics and security. We rely on your consent (Art. 6(1)(a)) only for non-essential cookies/analytics, which you can withdraw at any time. We do not treat acceptance of these terms as GDPR consent.

4. LINKEDIN DATA ACCESS

With your authorization, we access your LinkedIn profile and, on an ongoing basis, retrieve engagement metrics for posts we publish for you. We may pull this data more than once (e.g., a periodic analytics refresh). You can revoke this access at any time by disconnecting LinkedIn in your account settings or via LinkedIn's app permissions.

5. TRACKING

We use cookies and tracking technologies (such as PostHog) to monitor service performance, analyze usage patterns, and improve user experience. You may withdraw cookie/analytics consent at any time via the cookie banner, and disconnect LinkedIn in your account settings.

When you create an account, we link your product-analytics activity — including pages you viewed on our marketing site before signing up — to your account, so we can understand which channels bring people to Post Assembly. This linkage follows from creating an account and is not conditional on your cookie-banner selection; if you choose “No Cookies,” we do not create this linkage and stop analytics capture entirely. You can disable all analytics cookies at any time via the cookie banner.

6. DATA HOSTING

We use Vercel for hosting and infrastructure services. Your data is stored on servers located in the United States.

7. DATA SECURITY

We implement industry-standard security measures to protect your data:

  • OAuth tokens are encrypted at rest
  • Sensitive data is transmitted over secure HTTPS connections
  • Access to user data is restricted to authorized personnel only

8. PAYMENT PROCESSING

Payment information is processed by Stripe, our third-party payment processor. We do not store or have access to your full credit card details.

9. SUB-PROCESSORS & DATA SHARING

We share data with the following sub-processors, each solely to provide the Service:

  • Google Gemini & Anthropic Claude: AI processing of your content
  • LinkedIn: publishing posts on your behalf
  • Stripe: payment processing
  • Vercel: hosting (United States)
  • Neon: database (United States)
  • Upstash: caching
  • Resend: transactional email
  • PostHog: product analytics
  • Slack: internal signup alerts

10. COMPLIANCE WITH API POLICIES

We comply with the LinkedIn Developer Agreement and applicable data protection requirements.

11. YOUR RIGHTS

Depending on your location, you may have the following rights:

All Users:

  • Access: Request a copy of your data at any time
  • Deletion: Request deletion of your account and associated data
  • Correction: Update inaccurate information via your dashboard

EU/EEA Users (GDPR):

  • Right to data portability
  • Right to restrict processing
  • Right to object to processing
  • Right to lodge a complaint with a supervisory authority

California Users (CCPA):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising privacy rights

Australia/New Zealand Users:

  • Rights under the Privacy Act 1988 (Australia) and Privacy Act 2020 (New Zealand)

To exercise any of these rights, contact us at: support@postassembly.com

12. DATA RETENTION AND DELETION

  • Active Accounts: We retain your data for as long as your account is active
  • Deletion Requests: You may delete uploaded media files via your dashboard at any time
  • Account Deletion: For full account deletion, contact support@postassembly.com. We will process your request within thirty (30) days and permanently delete all associated data
  • Backups: Deleted data may persist in encrypted backups for up to thirty (30) days before permanent removal

13. CHILDREN'S PRIVACY

This Service is not directed at individuals under eighteen (18) years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at support@postassembly.com.

14. DATA BREACH NOTIFICATION

In the event of a data breach that affects your personal information, we will notify you via email within seventy-two (72) hours of discovery and provide information about the nature of the breach and steps we are taking to address it.

15. INTERNATIONAL DATA TRANSFERS

If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

16. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes via email and dashboard notification at least thirty (30) days before the changes take effect. Your continued use after the effective date constitutes acceptance of the updated policy.

17. CONTACT US

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: support@postassembly.com


© 2026 Brighter Days Advisory LLC. All Rights Reserved.

© 2026 Brighter Days Advisory LLC. All Rights Reserved. Terms of Service | Privacy Policy