Short version: We do not sell your data. We do not store your LinkedIn post content or generated comments. When you click “Generate Comments,” the visible LinkedIn post text is temporarily processed only to generate comment suggestions and is then discarded. If you create a free account, we store your email and a hashed password to authenticate you. The only product analytics we collect are anonymous usage events through PostHog — we do not send LinkedIn post text, generated comments, or personal identifiers to PostHog.
CommentCraft is operated by Oktohut Solutions Private Limited, registered in India. If you have any privacy questions, contact us at [email protected].
| Data | Why we collect it | Stored? |
|---|---|---|
|
Email address |
To create and manage your free account, send email verification, deliver license keys after purchase, and for account-related communication. |
Yes — on our servers (Cloudflare Workers/KV). Payments are processed by Paddle, our
Merchant of Record, which also processes your email for purchases. |
|
Password (hashed) |
To authenticate your free account. We never store your password in plain text — only a salted cryptographic hash. |
Yes — on our servers (Cloudflare Workers/KV). |
|
Account usage
(monthly credits, trial
credits, verification
status) |
To enforce free-tier limits (30
generations/month) for registered users. |
Yes — tied to your account
on our servers. |
|
License key |
To validate Pro access and track credit or subscription usage. |
Yes — in our secure database
infrastructure (Cloudflare
KV). Also stored locally in the
extension if you activate a
key. |
|
Credit usage count |
To track remaining credits on your license or account. |
Yes — tied to your license
key or account.
|
|
Anonymous install ID
|
A random UUID created when you install the extension. Used for guest rate limiting (10 generations/month per install) and abuse prevention. Not linked to your LinkedIn account or your name. |
Sent to our API with generation requests. We store a one-way hash of this ID with your monthly guest usage count — not a named profile. |
|
IP address (hashed) |
Used only for guest rate limiting — a shared cap of 10 generations/month per network IP, in addition to the per-install cap. Prevents abuse via reinstalling the extension. |
We store a one-way hash of your IP with a monthly usage count. We do not store your raw IP address in our database. Cloudflare may see your IP when routing requests (see Cloudflare’s privacy policy). |
|
Auth session token |
To keep you signed in to your free account in the extension.
|
Yes — stored locally in the extension on your device.A matching session record is also kept on our servers until the token expires. |
|
Comment copy counts |
To show your personal stats (today, all-time, recent activity) inside the extension. |
Yes — stored locally on your
device only. Never sent to
our servers. |
|
Anonymous usage events |
To understand how the extension is used and improve the product. |
Yes — via PostHog. No personal identifiers, LinkedIn post text, or generated comment text are sent to PostHog. |
We want to be explicit about this:
When you click “Generate Comments,” the visible post text is processed by our service to generate suggestions. The post text is processed in memory and discarded — it is not written to our database.
We use the following services to operate CommentCraft:
| Service | Purpose | Privacy policy |
|---|---|---|
|
Cloudflare |
API hosting, account and license
storage |
|
|
Third-party AI provider
|
Processes post text to generate comment suggestions when you click Generate. We use a commercial AI language model API; the provider’s identity may change over time. |
Post text is sent to our AI provider under their terms and privacy policy. We do not name the provider publicly in the extension. |
|
PostHog |
Anonymous product analytics |
|
|
Resend |
Verification emails and license-key delivery emails |
|
|
Paddle |
Payment processing and order management. Paddle is our authorized reseller and
Merchant of Record. It processes your payment and shares your email and order details with
us so we can deliver your license key. |
CommentCraft uses PostHog to collect anonymous product analytics. This helps us understand which features are being used and where we can improve.
Anonymous usage analytics are collected via PostHog to improve the product. No personal data, LinkedIn post content, or generated comment text is sent to PostHog. The analytics ID is randomly generated at install time. It is anonymous, contains no LinkedIn account information, and is not intended to identify you.
PostHog receives:
comment_generated, popup_opened, or settings_opened.PostHog does not receive:
You can opt out of analytics in CommentCraft Settings by checking “Opt out of anonymous analytics”, or by disabling the extension, or by contacting us at [email protected]. PostHog’s privacy policy is available at posthog.com/privacy.
When you click “Generate Comments” on a LinkedIn post:
All payments are processed by Paddle, acting as our Merchant of Record. We never store or handle your full payment card details. Paddle collects payment information, processes the transaction, and shares your email and order details with us so we can create and deliver your license key. Paddle’s privacy notice is available at paddle.com/legal/privacy.
If you request deletion, email [email protected]. We will remove or anonymize your personal data within 30 days, unless we are required to retain limited information for legal, accounting, tax, dispute, or fraud-prevention purposes.
Depending on your location, you may have the right to:
To exercise any of these rights, email us at [email protected].
If we make material changes to this Privacy Policy, we will notify active users by email at least 14 days before the changes take effect, where practical.
Privacy questions or requests: https://commentcraft.co/support/.