Privacy Policy
This Privacy Policy explains how MVP Foundry SLU (“MVP Foundry,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you use Cassian, our AI content assistant for LinkedIn, together with our apps, websites, and related services (the “Service”). MVP Foundry SLU is the data controller responsible for your personal data.
Pleta de Soldeu, Edifici 11, 2N, 2A
AD100 Soldeu, Andorra
Contact: [email protected]
1. Scope
This policy applies to everyone who uses Cassian. It describes the data we process when you create an account, connect your LinkedIn account, and use Cassian to analyze, draft, schedule, publish, and report on your LinkedIn content.
2. Information we collect
Information you provide
- Account information — your name, email address, and authentication credentials.
- Content you create — instructions, prompts, drafts, notes, and preferences you enter into Cassian.
- Support & communications — messages you send us and their contents.
Information we receive from LinkedIn
When you choose to connect your LinkedIn account, you authorize LinkedIn to share certain data with us through LinkedIn’s official APIs. Depending on the permissions (scopes) you grant, this may include:
| Data | Source / scope | Why we process it |
|---|---|---|
| Name, profile photo, locale, LinkedIn member identifier | Sign In with LinkedIn using OpenID Connect (openid, profile) | Authenticate you and personalize the Service |
| Email address, if requested and returned | OpenID Connect (email) | Identify your account and contact you |
| Public profile and post content you ask us to analyze | LinkedIn profile/post URLs you provide, public pages, or approved LinkedIn APIs | Analyze your voice and what performs, and generate drafts |
| Posts and media we publish on your behalf | LinkedIn Posts API and asset upload endpoints (w_member_social) | Publish content you review and approve |
| Engagement and performance metrics for your content | Public post metrics or approved LinkedIn analytics/community APIs | Report how your content performed |
We only request the LinkedIn permissions needed for the features you use, and we access LinkedIn data only to provide those features to you.
Information we collect automatically
- Usage & device data — app version, device/OS type, log data, and interactions with the Service, used for reliability, security, and improvement.
- Cookies & local storage — see our Cookie Policy.
3. How we use your information
- Provide, operate, secure, and improve the Service.
- Analyze your LinkedIn profile and posts to learn your voice and content strategy.
- Generate drafts, suggestions, schedules, and performance reports at your request.
- Publish content to LinkedIn only after you review and approve it (or according to a schedule you set).
- Communicate with you about your account, security, and support requests.
- Comply with legal obligations and enforce our Terms of Service.
4. Legal bases
Where Andorran Qualified Law 29/2021 on the protection of personal data and the EU GDPR apply, we rely on: performance of a contract (to provide the Service you request), your consent (for connecting LinkedIn and for optional analytics cookies, which you may withdraw at any time), legitimate interests (to secure and improve the Service), and legal obligation.
5. LinkedIn Platform data — specific commitments
Our use of information received from LinkedIn APIs complies with the LinkedIn API Terms of Use and applicable LinkedIn policies. In particular:
- We use LinkedIn data only to provide and improve features you have requested within Cassian.
- We do not sell, rent, or license LinkedIn data, and we do not use it for advertising or to build independent profiles of you or others.
- We do not use LinkedIn member data to train third-party or general-purpose AI models. Content is sent to our AI processors only to perform the specific task you asked for, under contractual confidentiality and no-training terms.
- We publish to LinkedIn only content that you have created, reviewed, or explicitly approved.
- If you disconnect LinkedIn or delete your account, we stop accessing LinkedIn data and delete cached LinkedIn data as described in Data & Deletion.
For a concise reviewer-facing summary of LinkedIn permissions and data handling, see LinkedIn Data Use.
6. How we share information
We do not sell your personal data. We share it only with:
- Service providers (subprocessors) who host our infrastructure, provide AI/model processing, and help us operate the Service, under agreements that require confidentiality and appropriate safeguards.
- LinkedIn, when you direct us to publish content or take actions on your connected account.
- Authorities, when required by law or to protect rights, safety, and security.
- Successors, in connection with a merger, acquisition, or asset sale, subject to this policy.
7. International transfers
We are based in Andorra, which is recognized by the European Commission as providing an adequate level of data protection. Where data is processed outside your country, we use appropriate safeguards (such as adequacy decisions or standard contractual clauses).
8. Data retention
We keep personal data for as long as your account is active or as needed to provide the Service, and then delete or anonymize it, unless a longer period is required by law. See Data & Deletion for details and timelines.
9. Your rights
Subject to applicable law, you may access, correct, export, restrict, object to, or delete your personal data, and withdraw consent at any time. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with the Andorran Data Protection Agency (APDA) or your local supervisory authority.
10. Security
We use technical and organizational measures — including encryption in transit, access controls, and least-privilege token handling — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.
11. Children
Cassian is not directed to children. You must be at least 18 years old (and old enough to hold a LinkedIn account under LinkedIn’s terms) to use the Service.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new “last updated” date and, where appropriate, notify you.
13. Contact
Questions or requests: [email protected], or write to MVP Foundry SLU at the address above. See the Contact page for more options.