LinkedIn app privacy policy

Effective October 27, 2026.

This policy covers the CODACON application registered on the LinkedIn Developer Platform (the "app"). It does not cover LinkedIn itself; LinkedIn's own privacy policy governs what LinkedIn does with your data.

The app is operated by CODACON, Montréal, Québec, Canada. Contact: hello@codacon.ai.

What the app does

The app publishes CODACON content, such as posts from the CODACON blog, to LinkedIn on behalf of a LinkedIn member who has signed in and granted permission. It is used by CODACON to share its own publications. It does not read your feed, your connections, or your messages, and it does not post anything you have not authorized.

Data the app accesses

When you sign in with LinkedIn and grant permission, the app receives only what the permissions you approve allow:

• Basic profile: your LinkedIn member identifier, name, and profile picture URL (openid, profile).
• Email address, if you grant the email permission.
• Permission to post on your behalf (w_member_social), used only to publish content you have chosen to share.
• An OAuth access token issued by LinkedIn, which lets the app act within those permissions until it expires or you revoke it.

The app does not request access to your connections, messages, job history, or any other LinkedIn data.

How the data is used

• To identify which LinkedIn account a post is published from.
• To publish posts you have authorized.

That is the only use. The app does not use LinkedIn data for advertising, profiling, analytics, or training AI models, and it does not sell, rent, or trade it.

Sharing

LinkedIn data is not shared with third parties, except:

• with LinkedIn, to perform the actions you authorized;
• where required by law.

Storage and retention

• Access tokens are kept in an encrypted secret store, readable only by the CODACON systems that publish posts. They are never written to logs or to this website.
• LinkedIn access tokens expire automatically (typically after 60 days). Expired or revoked tokens are deleted.
• Profile data is kept only as long as needed to publish posts, and is deleted when you revoke access or ask us to delete it.
• This website sets no cookies, runs no analytics, and does not receive any LinkedIn data.

Security

Access to the secret store is restricted to CODACON, protected by multi-factor authentication, and limited to the minimum permissions needed to publish. Data travels over encrypted connections (HTTPS).

Your choices and rights

• Revoke access at any time in LinkedIn: Settings & Privacy → Data privacy → Permitted services. Revoking access stops the app immediately.
• Access, correct, or delete the personal information we hold about you, or withdraw consent, by writing to hello@codacon.ai. We answer within 30 days.

CODACON handles personal information under Québec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). The person in charge of the protection of personal information is David Côté, founder, reachable at hello@codacon.ai. If you are not satisfied with our answer, you may file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

Changes

If this policy changes, the new version is published at this address with a new effective date. Material changes that affect how LinkedIn data is used will require your renewed consent.