Privacy Policy

Last updated: June 2, 2026 · Applies to the CommentCraft Chrome extension and website

Short version: We don’t sell your data. We don’t read your LinkedIn content. The only analytics we collect are anonymous usage counts via PostHog — no personal data, no post content, ever.

1. Who we are

CommentCraft is operated by [Your Company Name], registered in India. If you have any privacy questions, contact us at privacy@commentcraft.io.

2. What data we collect

Data Why Stored?
Email address
To deliver your license key after purchase, and for account-related communication
Yes, via LemonSqueezy (our payment processor)
License key
To validate your access and track credit usage
Yes, in our secure database (Cloudflare KV)
Credit usage count
To track remaining credits on your license
Yes, anonymously tied to your license key
Anonymous usage events
To understand how the extension is used and improve it
Yes, via PostHog — no personal identifiers attached

3. What we never collect

We want to be explicit about this:

  • We never read, store, or transmit the content of LinkedIn posts you view
  • We never access your LinkedIn account, credentials, or profile
  • We never store the comments you generate or choose to post
  • We never track which LinkedIn users or posts you interact with
  • We never sell your data to third parties

4. Anonymous analytics (PostHog)

CommentCraft uses PostHog to collect anonymous product analytics. This helps us understand which features are being used and where we can improve.

Anonymous usage analytics are collected via PostHog to improve the product. No personal data or LinkedIn content is ever sent. The analytics ID is randomly generated at install time — it is completely anonymous, contains no LinkedIn account information, and cannot be used to identify you.

Specifically, PostHog receives:

  • A randomly generated anonymous ID (not linked to your name, email, or LinkedIn account)
  • Event names such as “comment_generated” or “extension_opened”
  • No post text, no comment text, no personal identifiers

This data is GDPR-compliant. You can opt out of analytics by disabling the extension or contacting us. PostHog’s privacy policy is available at posthog.com/privacy.

5. How the extension works (Data flow)

When you click “Generate Comments” on a LinkedIn post:

  • The visible post text is sent to our API (hosted on Cloudflare Workers) over HTTPS
  • Our API sends the post text to an AI model to generate comment suggestions
  • The suggestions are returned to your browser and displayed in the extension popup
  • The post text is not stored by our API — it is processed in memory and discarded

6. Payment data

All payments are processed by LemonSqueezy, our Merchant of Record. We do not store or handle your credit card details. LemonSqueezy’s privacy policy applies to payment data: lemonsqueezy.com/privacy.

7. Data retention

License key records are retained for as long as your license is active plus 12 months, to support account recovery. If you request deletion, we will remove your email association within 30 days. Anonymous analytics data is retained by PostHog per their standard retention policy.

8. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict certain processing
  • Request data portability

To exercise any of these rights, email us at privacy@commentcraft.io.

9. Changes to this policy

If we make material changes to this policy, we will notify active users by email at least 14 days before changes take effect.

10. Contact

Privacy questions or requests: privacy@commentcraft.io