Last updated:  2025-10-15

​

This Privacy Policy explains how Holdflight AB (publ) (“we”, “us”, “our”) collects, uses, and protects information when you use our application (“App”) that integrates with the LinkedIn Community Management API to create and publish content to LinkedIn business pages and to display engagement analytics.

We are committed to protecting your data and complying with applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and LinkedIn Platform Policies.

​

1. Data Controller

Holdflight AB (publ)
Humlegårdsgatan 13
114 46 Stockholm, Sweden
Email: info@holdflight.se​

​

2. Who This Policy Applies To

Our app is designed exclusively for business users (B2B) who manage LinkedIn company pages. It is not intended for individual consumer use.

​

3. Information We Collect

We collect only the minimum data required to provide our services.

​

3.1 Data from LinkedIn (via API)

• LinkedIn Company Page ID

• Authentication tokens allowing posting to the LinkedIn page

• Post content you create or schedule

• Engagement data for posts (e.g. views, likes, comments, shares, impressions, clicks)

We do NOT collect personal profile data such as name, personal email, or personal LinkedIn information.

 

3.2 Data You Provide

• Content created within the app

• Account settings (e.g. organization name, preferences)

• Communication with us (support, feedback, etc.)
  ​

3.3 Automatically Collected Data (Google Analytics)

We use Google Analytics to collect usage and performance data, such as:

• App usage patterns

• Device and browser type

• IP address (anonymized if required by law)

• Session duration and pages viewed

This helps us improve functionality, stability, and user experience.

​

4. How We Use the Data

We process data to:

• Allow you to create, schedule, and publish posts to LinkedIn business pages

• Retrieve and display LinkedIn engagement metrics inside the app

• Maintain and secure your account access

• Provide customer support

• Analyze app performance (via Google Analytics)

• Improve and optimize our services and features

• Comply with legal obligations and LinkedIn API requirements

We never sell or use your data for unrelated purposes.

​

5. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

• Performance of Contract: To provide our services as agreed when you use our app.

• Legitimate Interest: To maintain and improve our platform, analyze usage, and ensure security.

• Consent: When required (e.g. for Google Analytics, or where you authorize LinkedIn access).

• Legal Obligation: To comply with applicable laws.
  ​

6. Data Storage and Security

• All data is stored in Firebase (Google Cloud) within the European Union.

• We use secure infrastructure, encryption in transit, and access controls.

• Only authorized personnel have access to your data.

• We regularly review our security practices.
  ​

7. Data Sharing and Third Parties

We do not sell or share data with unrelated third parties.

We only share data with:

​

​

​

​

​

​

​

​

 

​​​​

​

These third parties act as data processors under GDPR and are bound by data processing agreements.

​

8. International Transfers

All data is stored in the EU. If data is ever transferred outside the EU, we will ensure appropriate safeguards under GDPR (e.g. Standard Contractual Clauses).

​

9. Data Retention

We retain data only as long as necessary to provide the service.

• Account data, page IDs, and engagement data are stored until you delete your account or revoke access.

• After account deletion, data is permanently removed within a reasonable period unless required for legal obligations.
  ​

10. User Rights (GDPR)

You have the right to:

• Access your data

• Correct inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict processing

• Object to processing based on legitimate interest

• Data portability (receive your data in a structured format)

• Withdraw consent at any time (where applicable)

• File a complaint with a Data Protection Authority

To exercise any rights, contact us at info@holdflight.se

​

11. LinkedIn Permissions & Revoking Access

Our app uses LinkedIn Community Management API only after you explicitly grant permission.
You may revoke access at any time via your LinkedIn account settings.

If access is revoked:

• We will no longer be able to post or retrieve engagement data.

• Tokens associated with the page will be removed from our system.
  ​

12. Cookies and Analytics

We use Google Analytics to understand how users interact with our app.
Google Analytics may use cookies or similar technologies.

You may disable cookies or opt-out of analytics using your browser settings or through available Google opt-out tools.

We do not use cookies for advertising or tracking outside the scope of analytics and app functionality.

 

13. Security Measures

We use industry-standard practices to protect your data, including:

• Encryption (HTTPS, TLS)

• Secure authentication

• Role-based access control

• Regular backups and monitoring

• Limited access for authorized personnel only

While we take all reasonable steps, no system can be 100% secure.

 

14. Children’s Data

Our service is not intended for individuals under 18.
We do not knowingly collect data from minors.

​

​

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, legal requirements, or security practices.
If changes are significant, we will notify you via email or in-app notification.

The latest version will always be available at: [https://holdflight.se/privacy-marketing-planner]

​

16. Contact Us

If you have any questions or concerns about this Privacy Policy or data protection, please contact:

Holdflight AB (publ)
Email: info@holdflight.se
Address: Humlegårdsgatan 13, 114 46 Stockholm, Sweden

​

By using our app, you acknowledge that you have read and understood this Privacy Policy.