Legal
Privacy Policy
Privacy at a Glance
- • We collect only the data necessary to provide our AI reply service
- • We do NOT sell your personal data to third parties
- • We do NOT store the content of your LinkedIn posts or comments
- • You can request deletion of your data at any time
1. Introduction
This Privacy Policy describes how Commy.io ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our Chrome extension, website, and related services (collectively, the "Service").
By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (if provided via OAuth)
- Profile picture URL (from Google/LinkedIn OAuth)
- OAuth tokens (encrypted and used only for authentication)
2.2 Personality Settings
To provide personalized AI replies, we store:
- Writing style preferences (tone, formality, humor levels)
- Writing samples and favorite phrases you provide
- Language and emoji preferences
- Comment intent settings
2.3 Usage Data
We automatically collect:
- Number of AI replies generated
- Timestamps of usage
- Feature usage patterns
- Error logs and crash reports
- Device type and browser information
- IP address (for security and rate limiting)
2.4 Payment Information
Payment information is processed securely by our payment processor. We receive:
- Transaction IDs and invoice numbers
- Subscription status and billing dates
- Country of purchase (for tax purposes)
We NEVER receive or store your credit card numbers, bank account details, or other sensitive payment credentials.
2.5 Information We Do NOT Collect
- The actual content of LinkedIn posts you view or comment on
- Your LinkedIn connections or network information
- Your LinkedIn messages or InMail
- Sensitive personal data (race, religion, health, political opinions)
- Credit card numbers or banking information
3. How We Use Your Information
We use collected information to:
- Provide the Service: Generate AI-powered LinkedIn reply suggestions tailored to your preferences
- Authenticate you: Verify your identity and maintain account security
- Process payments: Manage subscriptions and billing
- Enforce usage limits: Apply rate limits based on your subscription tier
- Improve the Service: Analyze usage patterns to enhance features and fix bugs
- Provide support: Respond to your inquiries and resolve issues
- Prevent abuse: Detect and prevent fraud, spam, and violations of our Terms
- Comply with law: Meet legal obligations and respond to lawful requests
4. AI Processing
Our Service uses artificial intelligence to generate reply suggestions. This involves automated processing of:
- The context of the LinkedIn post or comment you are replying to
- Your personality settings and preferences
Important Notes:
- AI-generated content is presented as suggestions only
- You always have full control over what content you post
- We do NOT use automated decision-making that produces legal or similarly significant effects on you
5. Data Sharing
5.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
5.2 Service Providers
We share data with trusted service providers who help us operate our Service, including providers for:
- Database and authentication services
- AI processing services
- Payment processing
- Cloud hosting and infrastructure
All service providers are bound by data protection agreements and are prohibited from using your data for any purpose other than providing services to us.
5.3 Legal Disclosures
We may disclose your information if required to:
- Comply with applicable laws, regulations, or legal processes
- Respond to lawful requests from public authorities
- Protect our rights, privacy, safety, or property
- Enforce our Terms of Service
5.4 Business Transfers
In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity.
6. Data Retention & Deletion
We retain your data only for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.
- Account data and personality settings are retained while your account is active
- Usage logs are retained for a limited period for analytics and debugging
- Payment records are retained as required by applicable tax and financial regulations
Your Right to Deletion
You may request deletion of your personal data at any time by contacting us at admin@commy.io. We will process your deletion request promptly.
7. Your Privacy Rights
You have the right to:
- Access your personal data
- Update or correct inaccurate data
- Delete your account and associated data
- Export your data
- Opt out of marketing communications
How to Exercise Your Rights
To exercise any of these rights, please email us at admin@commy.io. We will respond to your request as soon as reasonably practicable.
7.2 Marketing Communications
By creating an account, you consent to receive marketing emails including product updates, newsletters, promotional offers, and usage tips. You may opt out anytime by clicking the unsubscribe link in any email or contacting admin@commy.io.
8. Cookies & Analytics
8.1 Cookies We Use
- Essential Cookies: Required for authentication and security (session management)
- Functional Cookies: Remember your preferences and settings
8.2 Analytics
We use Google Analytics to understand how visitors interact with our website. This helps us improve the Service and user experience. You can opt out of Google Analytics by using browser settings or the Google Analytics Opt-out Browser Add-on.
8.3 What We Do NOT Use
- Third-party advertising or tracking cookies
- Social media tracking pixels
- Cross-site tracking
8.4 Managing Cookies
You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Service.
9. Data Security
We implement security measures to protect your data:
- Encryption in Transit: All data is transmitted via HTTPS
- Encryption at Rest: Sensitive data is encrypted in our databases
- Access Controls: Strict access controls to production systems
- Authentication: Secure OAuth-based authentication
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
10. Governing Law & Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the State of Israel, including the Privacy Protection Law, 5741-1981, without regard to its conflict of law principles.
ANY DISPUTE, CONTROVERSY, OR CLAIM ARISING OUT OF OR RELATING TO THIS PRIVACY POLICY OR THE PROCESSING OF YOUR PERSONAL DATA SHALL BE BROUGHT EXCLUSIVELY IN THE COMPETENT COURTS LOCATED IN TEL AVIV-YAFO, ISRAEL. YOU HEREBY IRREVOCABLY CONSENT TO THE EXCLUSIVE JURISDICTION AND VENUE OF SUCH COURTS.
11. Children's Privacy
Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at admin@commy.io.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Sending an email to your registered email address
- Displaying a prominent notice within the Service
- Updating the "Last Updated" date at the top of this policy
Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy questions, data requests, or concerns, please contact us:
© 2025 Commy.io. All rights reserved.