Privacy Policy

Last updated: April 2026

1. Who we are

LazyPostin ("we", "us", "our") is a content creation tool that converts YouTube videos into LinkedIn content. This policy explains what data we collect, how we use it, and your rights.

For any privacy questions, email us at hello@lazypostin.com.

2. Data we collect

Account data (via Google Sign-In)

When you sign in with Google we receive your email address, display name, and profile picture. We store these to identify your account.

YouTube URLs

The YouTube video URLs you submit for processing are stored so we can display your project history.

LinkedIn access tokens

If you connect a LinkedIn account, we store your OAuth access token, encrypted at rest using AES-256-GCM, solely to publish scheduled posts on your behalf.

Billing data

Payments are processed by Lemon Squeezy. We do not store card numbers or bank details. We receive a customer ID and subscription status from Lemon Squeezy.

Analytics (optional, with your consent)

If you accept cookies, we use PostHog to collect anonymised product analytics (page views, feature usage). No personal data is shared with PostHog beyond a random user ID.

3. How we use your data

To create and manage your account
To process YouTube videos and generate content
To publish posts to LinkedIn on your behalf (only when you schedule them)
To send transactional emails (welcome, post published, low credits alerts)
To process payments and manage your subscription
To improve the product (with your consent via analytics)

We do not sell your data. We do not use your data for advertising.

4. Cookies

We use a session cookie (httpOnly, secure) to keep you signed in. If you accept analytics, PostHog sets a first-party cookie to track product usage. You can decline analytics cookies via the banner on your first visit, this does not affect core functionality.

5. Data retention

We retain your account and project data for as long as your account is active. If you delete your account, all personal data is permanently erased within 30 days. Anonymised analytics data may be retained longer for product improvement.

6. Your rights

Under GDPR and similar laws, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Withdraw consent for analytics at any time (clear localStorage key lp_cookie_consent)

To exercise any right, email hello@lazypostin.com.

7. Security

All data is transmitted over HTTPS. LinkedIn access tokens are encrypted at rest using AES-256-GCM before being stored in our database. We use secure, httpOnly session cookies. Despite these measures, no system is 100% secure, please contact us immediately at hello@lazypostin.com if you suspect a breach.

8. Changes to this policy

We may update this policy as the product evolves. Significant changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance of the updated policy.

We use cookies to understand how you use LazyPostin and improve the product. No data is sold to third parties. Learn more