Last updated: March 9, 2026
When you create an account, we collect your email address and password (stored as a bcrypt hash — we never see your plaintext password).
When you connect integrations, we store OAuth access tokens for GitHub, Notion, and Slack. We only access the specific data you authorize:
Your data is used exclusively to generate LinkedIn post drafts. Specifically:
We use the following third-party services:
Your data is stored on a Hetzner VPS in the EU. All connections use TLS encryption. Access tokens are stored encrypted at rest. We use industry-standard security practices including bcrypt password hashing and HMAC webhook verification.
Your data is retained as long as your account is active. You can request full account deletion by emailing [email protected]. Upon deletion, we remove all your personal data, integration tokens, drafts, and work events within 30 days.
We use a JWT token stored in your browser for authentication. We do not use tracking cookies, analytics cookies, or any third-party cookies.
You have the right to access, correct, or delete your personal data at any time. You can disconnect integrations from your dashboard, which immediately revokes our access. For any privacy-related requests, contact us at [email protected].
We may update this policy from time to time. We'll notify you of significant changes via email. Continued use of ShipPost after changes constitutes acceptance.