Security

How we look after your data

Last updated 10 October 2026

Postaboo handles your personal LinkedIn analytics, so you should know exactly how it is protected. This page describes what we do today, in plain English. Where we have not built something yet, we would rather leave it off this page than promise it.

We collect as little as we can

Postaboo works from the analytics export you download from LinkedIn yourself. We store the figures from it, your email address, and your LinkedIn username, which identifies your account here. We do not store your name, your connections, your messages or the text of your posts unless you choose to paste some in. The full list is on the privacy page.

No access to your LinkedIn account

We have no connection to LinkedIn of any kind: no login, no API access, no browser extension, and no automated collection from LinkedIn's website. Everything we know about your account is what is in the file and text you give us. If Postaboo were ever compromised, your LinkedIn account itself would not be at risk.

Your upload is not kept

The spreadsheet is opened, the figures are read out of it, and the file is discarded when that request ends. It is never written to our storage. The same goes for the overview page you paste: we pick out the numbers and discard the rest of the text.

Signing in

• There are no passwords. To sign in, you ask for a link and we email it to you.
• Each link works once and expires after 30 minutes.
• We store only a scrambled form of each link, so a copy of our data could not be used to sign in as you.
• The number of links that can be requested is limited, to prevent abuse.
• The sign-in form gives the same answer for every address, so it cannot be used to check who has an account.

Who can see your report

Only you. A report can be opened by its owner once signed in, and by the browser you uploaded from until you close it, so your first report appears straight away. Each LinkedIn profile belongs to the first email address that uploads it, and the same export arriving under a different address is refused. Report pages are marked so that search engines do not list them.

Our own access

The people who run Postaboo can view reports when that is needed to fix a problem or improve the service. Access is limited to the operators of the service and is protected by a separate sign-in. We do not look at reports for any other reason.

Encryption

Everything between your browser and Postaboo travels over an encrypted connection (HTTPS). Our stored data is kept in a part of the server that cannot be reached from the web.

Where your data is stored

Postaboo's server, and everything we store about you, is in Australia. Some of the outside services listed below handle the small amount of information they receive in other countries, including the United States.

Artificial intelligence

Every number, chart and score is calculated by ordinary code. On premium reports only, an AI model (Claude, from Anthropic) writes the summary, weekly plan and post titles. It is sent your calculated figures, the words from your post addresses, and anything you chose to add. It is not sent your email address or the links to your posts. Free reports send nothing to an AI.

Other companies involved

We use a small number of outside services, and each receives only what it needs to do its job.

• Anthropic writes the commentary on premium reports, from the figures described above.
• Resend delivers our emails, so it handles your email address.
• Stripe takes payment for Premium and holds the card details.
• Google Analytics counts visits to our public pages. It is not loaded on your report, My reports or sign-in pages.
• Our hosting provider runs the server that stores the data, in Australia.

Payment information

Payments for Premium are handled by Stripe. You enter your card on Stripe's own page, so card details never pass through or rest on our server. We keep only Stripe's reference for your subscription and whether it is active. Cancelling and changing your card also happen on Stripe's pages.

Deleting your data

Sign in, open My reports and use "Delete my data". Your email address, every report and all your weekly check-ins are removed immediately. You can also ask us to do it by emailing team@postaboo.com.

If something goes wrong

If we learn that your data has been accessed by someone who should not have it, we will tell you by email as soon as we can, explain what happened and what we are doing about it.

Reporting a security problem

If you think you have found a weakness in Postaboo, please email team@postaboo.com with the details and give us a reasonable chance to fix it before making it public. We read every report and will reply. Please do not access, change or delete other people's data while investigating.

Questions

For anything about security or privacy, email team@postaboo.com. See also our privacy page and terms.