Privacy policy
TwoCents helps you comment on LinkedIn posts in your own voice. This policy explains what the TwoCents Chrome extension and web app read, what we keep, why, and how you can delete it. If anything here is unclear, write to [CONTACT EMAIL].
What the extension reads
- It runs only on linkedin.com and on the TwoCents website. On LinkedIn it reads the feed data LinkedIn sends to your browser so it can tell which post is which.
- It only keeps a post when it has stayed on your screen for about a second and a half, and only while "Find posts for me" is switched on.
- For each kept post it records: the post's LinkedIn ID and text, the author's name, headline and profile link, how old the post is, its reaction and comment counts, and up to three comment previews shown under it. Ads and non-post modules are skipped.
- It does not read your messages, your connections, your password, your browser cookies, or any other website. It never clicks, scrolls, types or posts on LinkedIn.
What we store
| Data | Why |
|---|---|
| Your LinkedIn name, email and member ID (from Sign in with LinkedIn) | Your account, and posting as you |
| A LinkedIn access token, encrypted at rest (AES-256-GCM) | Posting the comments you approve |
| Comments you wrote yourself, a line about you, topics, phrases to avoid | Making drafts sound like you |
| Posts the extension kept (as described above) | Drafting a comment for them |
| Drafts, your edits, approvals, skips with reasons, and posted comments with times | Your queue and schedule, and learning from your edits |
| Posting times, time zone, daily limit | Scheduling |
| Plan and subscription status | Billing. Card details are handled by Dodo Payments; we never see your full card number. |
| Basic server logs (requests, errors) | Keeping the service running and secure |
We don't sell your data, use it for advertising, or share it with anyone except the processors below.
Who processes it
- Supabase: database and sign-in (data stored in India, Mumbai region).
- Vercel: hosting of the TwoCents web app and API.
- Anthropic (Claude API): to write drafts, we send the post's text and details plus your voice samples and recent comments. Anthropic processes this under its commercial terms.
- Dodo Payments: merchant of record for subscriptions; handles payment details, invoices and tax.
- LinkedIn: receives the comments you approve through its official API, and provides sign-in.
How long we keep it
We keep your data while your account is open. Drafts for posts older than two days expire automatically. When you delete your account, everything above is removed right away, except what our payment processor must keep for tax and accounting.
Deleting your data
Go to Settings, then Delete my account. This removes your account, voice, captured posts, drafts and LinkedIn connection from TwoCents. Comments that were already posted stay on LinkedIn; delete them there if you want them gone. Cancel any subscription first. You can also ask us to delete or export your data at [CONTACT EMAIL].
Your LinkedIn account
LinkedIn's User Agreement restricts extensions that read its site. Using TwoCents carries a risk that LinkedIn limits or restricts your account. You decide whether to accept that risk.
Security
Traffic is encrypted in transit (HTTPS). LinkedIn tokens are encrypted at rest. Each account can only read its own data, and every change goes through our server so the rules can't be bypassed.
Children
TwoCents is not meant for anyone under 18.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.
Contact
[BUSINESS NAME], [ADDRESS]. Email: [CONTACT EMAIL].