Privacy Policy

1. Data controller

Craft Software Consulting LLC, Sharjah Media City, Sharjah, United Arab Emirates (license 2322252.01), is the controller of the data collected on TrustImpression.

Contact: contact@craftsoftwareconsulting.com

Business license: view license 2322252.01 (PDF)

2. What we collect

Through Sign In with LinkedIn using OpenID Connect, when you connect your account: your LinkedIn member identifier, your name, your profile picture, your profile headline and your email address.

Through LinkedIn's Community Management API, once that feature is active: performance metrics for your own posts only. Impressions, reactions, comments, reposts, link clicks, saves, sends, followers gained, profile views generated and video views.

We also collect the technical data the service needs to run: server logs, and view counts for your public page.

We never collect or ask for your LinkedIn password. Access is read only: we cannot post, edit or delete anything on your account. We can only reach data belonging to the account that authorized us, never a third party's profile. We do not collect the text of your posts.

3. Purpose and legal basis

We process your LinkedIn data in order to display your performance metrics on the public profile you choose to publish on TrustImpression. The legal basis is your explicit consent, given through LinkedIn's own authorization screen, which you can withdraw at any time.

The figures shown come straight from LinkedIn. TrustImpression does not alter them. LinkedIn is not associated with TrustImpression and has neither verified nor endorsed its content.

4. Recipients and processors

Your data is accessible to Craft Software Consulting and to the following processors acting on our behalf: Vercel for application hosting, Neon for the database, and OVH for email. Our domain name is registered with OVH, which involves no processing of your personal data.

Your data is never sold, rented or handed to third parties for commercial purposes.

5. International transfers

Vercel and Neon are established in the United States, so your data may be processed there. Those transfers are covered by appropriate safeguards, namely standard contractual clauses and the processing commitments of each provider.

Email handled by OVH stays within the European Union.

6. Security

OAuth access tokens are encrypted at rest with AES-256, stored server side only, and never exposed to the browser. All data travels over HTTPS.

7. Retention

Two rules apply, because two different kinds of data are involved.

What you give us directly, and what identifies your account: your LinkedIn member identifier, your name, your email address, your public address and the headline you write. Kept for as long as your account is active.

The performance figures read from LinkedIn, once that feature is active: kept under LinkedIn's own limits, which are shorter than ours and which we follow. Post activity is not held beyond 48 hours, profile data not beyond 24 hours. Your page reads those figures again rather than serving an archive, which is also why the service offers no long term history of them.

If you disconnect your LinkedIn account or delete your TrustImpression profile, your access tokens are destroyed immediately and the associated data is removed from our live systems at once. Backup copies are rotated out within 30 days.

8. Withdrawing LinkedIn access

You can withdraw your authorization at any time, in one of two ways.

From TrustImpression: Disconnect LinkedIn, in your account settings.

From LinkedIn: Settings and Privacy, then Data privacy, then Other applications, then Permitted services, and remove TrustImpression.

Either way, we stop fetching new data immediately, your stored tokens are destroyed, and your public page stops displaying metrics.

9. Your rights

Under the GDPR you may access your data, correct it, erase it, restrict its processing, receive it in a portable format, and object to its processing. To exercise those rights, write to contact@craftsoftwareconsulting.com. We answer within one month.

You may also lodge a complaint with your data protection authority, for instance the CNIL in France.

10. Cookies

TrustImpression uses one strictly necessary session cookie to keep you signed in. It is not used for tracking or advertising. If we add audience measurement tools later, we will update this policy and collect your prior consent where that is required.

11. Updates

This policy may change. The version in force is the one dated at the top of this page.