Legal information

Privacy Policy

What data we process, why, for how long, and how you take it back.

Last updated: 5 August 2026

Data controller

The data controller is Composeur, a company incorporated under the laws of Madagascar, Bureau N°01, 1st floor, Immeuble Jacaranda, Analamanga, 101 Antananarivo Renivohitra C.U., Madagascar. The servers holding your data are located in the European Union. The team running the service is based in Madagascar and accesses the data from there. Madagascar is not covered by an adequacy decision of the European Commission: this access is necessary for the performance of the contract between us, within the meaning of article 49.1.b of the GDPR, and is limited to what running the service requires. Any question about this document: [email protected].

What the extension reads

The extension is only active on linkedin.com. It reads the post you point at when you click "Analyse": its text, the name and profile link of its author, its technical identifier, its public reaction, comment and repost counters, and its displayed age. It reads neither your private messages, nor your contacts, nor any post you did not point at. No reading happens in the background.

Data we process

We process the following categories, and nothing else.

—AccountEmail address and hashed password. Kept as long as the account exists.

—AnalysesThe analysed text and the techniques spotted. Kept twelve months, then deleted.

—DraftsYour texts and their versions. Kept until you delete them.

—Personal styleThe sample of your own posts that you paste in yourself. It is kept as-is on your account and sent to the model with every generation, to give it your voice. It is erased as soon as you clear the field.

—BillingPayment history, kept ten years under accounting obligations.

Third-party data in analyses

When a post is analysed, public data about its author, who is not necessarily a Composeur user, is kept alongside the analysis: public identity (name, profile link, post identifier), the public content of the post, public engagement counters and the publication date. This data comes exclusively from what is publicly accessible on LinkedIn, and its collection is triggered by the user, never in the background. It is processed on the basis of legitimate interest: making possible the reading of the post the user asked for. It follows the same retention as analyses: twelve months, then automatic deletion. If you are the author of an analysed post and want your data erased, write to [email protected]: every analysis covering your posts will be deleted, across all accounts, within thirty days. You also have a right to object under article 21 of the GDPR.

What we do not do

Your texts are never used to train a model, ours or anyone else's. Your personal style is used for your own generations only. We neither sell nor rent any data to third parties for advertising purposes.

Cookies and trackers

Strictly necessary cookies do not require your consent. Audience measurement only starts once you agree in the banner at the bottom of the page: until you accept, no third-party script is loaded and no request goes out.

—SessionKeeps you signed in from one page to the next. Expires when you sign out.

—CSRF protectionPrevents another site from triggering an action in your name.

—Language preferenceRemembers whether you read the site in French or English. Kept one year.

—Audience measurementGoogle Analytics, on public pages only and only if you accept it. It measures pages viewed and where visits come from, with the IP address anonymised. Your account pages are never measured. Refusing takes nothing away from the service.

Processors and transfers

The service relies on the following providers, and on no others.

—HostingHostinger International Ltd. (Cyprus), servers located in the European Union.

—Audience measurementGoogle Ireland Limited, and Google LLC (United States) for hosting the measurements. Receives nothing until you accept the banner. The transfer outside the EU rests on the European Commission’s standard contractual clauses.

—PaymentPolar Software Inc. (United States), merchant of record: receives your email and billing details, never the content of your posts.

—Language modelsOpenRouter, Inc. (United States) routes requests to the model provider. The text to analyse or to write passes through it. No data is retained there for training.

—Transactional emailMaileroo receives your email address and the content of the message sent (reminder, receipt, password reset).

—Error trackingSentry (Functional Software, Inc., United States), on its European infrastructure: receives the technical trace of a failure (the page, the browser, the call stack). Neither the content of your posts nor your address. No session is recorded or replayed.

Your rights

You have a right of access, rectification, erasure, portability and objection. Export and deletion are available directly from your account, without going through us. For anything else, write to [email protected]: answer within thirty days. If you live in the European Union, you may also lodge a complaint with the supervisory authority of your country, in France the CNIL.

A question about this document

Write to [email protected]. We reply within five business days.