Portor Marketing HQ privacy policy

Purpose and responsibility

Portor Marketing HQ is an internal tool for preparing, approving, scheduling and publishing content to Portor Industry’s LinkedIn company Page. Access is restricted to authorized Portor personnel. It has no customer accounts. Edmond oversees privacy, access, retention and deletion. Contact edmond@portorindustry.com.

LinkedIn authorization and collection

The administrator connects through LinkedIn’s OAuth consent screen. The app processes authorization tokens, permissions, expiration information and Page authorization results. It publishes approved content and may retrieve Portor-authored company posts, identifiers, publication times and links for history and duplicate checks. Reads occur when testing the connection, synchronizing history or checking a post before publishing. Approved scheduled posts may run while the administrator is offline.

The app does not request commenter or reactor lists, commenting members’ profiles, connections or personal-profile publishing. It does not request member-level engagement analytics. Aggregate metrics entered manually by Portor personnel may be retained in the calendar.

Use and providers

LinkedIn API information is used only for Portor’s company-page publishing workflow. API-derived member personal data is not used for advertising targeting, sales prospecting, lead generation, CRM enrichment or recruiting. It is not sold or shared with other customers.

Railway hosts the app and storage. Any active connector, including Composio if used, processes the information necessary for its connection. Access is limited to authorized personnel and providers operating the app. Portor’s own drafts and assets may be processed by its content-generation providers; API-imported LinkedIn history is excluded from those prompts. Information handled by LinkedIn is also subject to LinkedIn’s privacy policy.

Security and cookies

Hosted access uses HTTPS and an administrator login. OAuth tokens are encrypted before being written to the database, with a key configured separately in host secrets. Hosted storage and backup protection require administrator verification. Sensitive pages instruct browsers not to cache them; application access logs omit query strings.

The essential session cookie maintains login and request protection for up to 12 hours. Login abuse controls keep bounded temporary counters without storing raw IP addresses in the application database. Infrastructure providers may maintain separate security and access logs.

Retention

API-imported Page history expires after 180 days. Cleanup runs at startup, hourly and before history is used. Startup and hourly checks include recognized application database backups. Independently authored Portor drafts and creative assets are retained for business needs. Tokens remain while needed for the authorized connection and are removed by disconnect or data removal.

Infrastructure snapshots, external logs and exports require separate controls under the applicable LinkedIn storage limits. The administrator must prevent a backup from restoring deleted or expired information.

Withdraw access and request deletion

Use Disconnect on the LinkedIn connection page to stop app access and remove the active token. You may also revoke the connection in LinkedIn’s permitted-services settings. To remove stored API information, use Privacy & data removal or email edmond@portorindustry.com.

The removal workflow pauses the integration, removes stored LinkedIn records and queued publishing, clears associated tracking and recognized backups, and records application completion separately from provider checks. It preserves original Portor drafts and assets and does not delete posts already on LinkedIn. Edmond handles administrator and LinkedIn requests under the applicable deadlines. A request remains incomplete until all relevant provider, backup and export checks finish. Deletion records contain timestamps and counts, without tokens or member information.

Changes and contact

Material changes will be reflected here and communicated before any required renewed authorization. Questions, access concerns and deletion requests: edmond@portorindustry.com. See the internal terms of use.