Security

What LiConditor can and cannot do with your LinkedIn account

Everything on this page is something you can check yourself: on LinkedIn's consent screen, in your LinkedIn settings or inside the app.

The permissions we ask for

This is the full list. You will see the same permissions on LinkedIn's own consent screen before you approve anything.

When you sign in with LinkedIn

openidprofileemail

Confirms who you are: your name, profile photo and email address.

When you connect LinkedIn for publishing

w_member_social

Lets LiConditor create posts on your behalf. LinkedIn's wording for this permission also covers comments and reactions; LiConditor only publishes the posts you schedule or publish yourself.

When you connect analytics (optional)

r_member_postAnalytics

Lets LiConditor read the statistics of your posts, such as impressions, reactions and comments.

What LiConditor never does

  • Ask for your LinkedIn password
  • Use a browser extension or your session cookies
  • Automate likes, comments, connection requests or messages
  • Read your inbox or your connections
  • Scrape profiles or collect leads from people who engage with your posts
  • Publish anything you have not scheduled or published yourself

Where your data lives

  • The database, sign-in and file storage run on Supabase in the European Union (Ireland).
  • Connections to LiConditor and to our providers are encrypted in transit, and our database provider encrypts stored data at rest.
  • Every table has row-level security, so the database itself limits each request to your own data and your workspace's.

Sign-in and LinkedIn tokens

  • You sign in with LinkedIn or a one-time email link. LiConditor never has a password of yours to lose.
  • The access tokens LinkedIn issues are stored under your account and used on our server to publish and to read statistics.
  • Other members of your workspace cannot read your tokens.

Roles and approvals

  • Workspaces have four roles: owner, admin, editor and viewer.
  • A draft can be sent for approval, and the reviewer approves it, rejects it or asks for changes, with a note.
  • Each decision is stored with who made it and when.

Activity record

  • Actions such as creating a draft, deciding an approval, publishing a post or changing a member's role are recorded.
  • The record is written by our server. Users cannot add to it or edit it.

AI and your content

  • AI features send the text you give them to OpenAI, and only when you use them.
  • We do not use your content to train AI models.

Your data, your controls

Export

Download a copy of your data as a JSON file from the Compliance page in the app.

Delete

Delete your account yourself from the same page. Deletion is permanent.

Disconnect

Remove the LinkedIn connection in the app, or revoke it in your LinkedIn settings under Permitted services.

The Privacy Policy lists everything we store and who processes it.

What we do not have yet

LiConditor is a young product in beta. We do not have a SOC 2 or ISO 27001 certification, and there is no single sign-on. LiConditor also depends on LinkedIn's API, which LinkedIn can change or withdraw. If your client needs a security questionnaire answered, send it to us.

Report a problem

Found a vulnerability or something that looks wrong? Tell us through the contact page and we will look into it. Please do not test against other people's accounts or data.

Security | LiConditor