Postelix is a brand and service of Unfair Advantage Ltd. These terms identify the company behind the product and the address we use for legal notices.
1. Who we are
Postelix is a brand and service of Unfair Advantage Ltd, a company in Cyprus with its business address at Meleti 2C, 8570 Pegeyia, Cyprus. In this policy, "Postelix", "we", "us", and "our" refer to Unfair Advantage Ltd and the Postelix product.
Postelix provides LinkedIn writing, content, comment, lead signal, and workflow tools through our website, web app, browser extension, and related services. This Privacy Policy explains how we collect, use, store, and protect personal data when you use Postelix.
2. Scope of this policy
This policy applies to the Postelix website, dashboard, onboarding flow, browser extension, payment flows, support interactions, and any related Postelix services. It does not apply to third-party websites or platforms that we do not control, including LinkedIn, Google, Stripe, or AI providers.
3. Data we collect
We collect only the data needed to provide, secure, support, and improve Postelix. Depending on how you use the service, this may include:
- Account data: name, email address, authentication method, account identifiers, plan, credits, and basic profile settings.
- Onboarding and voice profile data: your positioning, offer, ideal customer profile, tone, writing preferences, saved examples, and other information you provide so Postelix can write in your style.
- LinkedIn and source content: posts, comments, profile snippets, lead notes, source documents, and other content you choose to import, save, analyse, or use as context.
- Generated content: drafts, comments, post ideas, messages, prompts, edits, and feedback created or saved in Postelix.
- Usage and product data: pages visited, actions taken, features used, generation counts, error logs, device information, browser type, approximate location, and company-level network information inferred from IP address.
- Billing data: plan, payment status, invoices, billing address, and subscription events. Full card details are processed by Stripe and are not stored by Postelix.
- Support data: messages you send to us, attachments, troubleshooting information, and records of our responses.
4. LinkedIn data and the people you contact
Postelix helps you find and reach relevant people on LinkedIn. To do this, we process two kinds of LinkedIn data: content connected to your own account (your posts, profile, inbox, and material you save or import), and publicly available professional information about the people you may want to contact ("prospects").
Postelix does not need your LinkedIn password. Messages, connection requests, and comments are sent through your own connected LinkedIn account via our integration provider, and only after you have reviewed and approved them. We do not post or send on your behalf without your action.
Prospect data. So that you can identify and reach relevant B2B prospects, we collect and process limited professional information about those people from publicly available LinkedIn profiles and activity, and from third-party enrichment providers. This typically includes name, headline or role, company, public profile URL, public posts, comments and reactions, approximate location, and a business email address where available. We do not collect special-category data, and Postelix is intended for business (B2B) outreach, not for contacting consumers.
Our role. Where we source, enrich, and score publicly available professional profiles to surface relevant prospects, Unfair Advantage Ltd acts as a controller for that activity. When we generate and send messages on your instruction through your connected account, we act as a processor on your behalf, and you are the controller of your own outreach. The legal basis for processing prospect data is our and our customers' legitimate interest in business development (Article 6(1)(f) GDPR), balanced against the rights of the individuals concerned.
Transparency and objection. If you are someone a Postelix customer has contacted or may contact, you have the right to object to this processing and to ask us to stop processing your data and remove you from outreach. You can remove yourself at any time using our do-not-contact form at postelix.com/opt-out, or contact us at help@postelix.com, and we will add you to our do-not-contact records so no Postelix customer can message or invite you. See section 14 for the full list of your rights.
5. Google account data
If you sign in with Google, we receive basic account information such as your email address, name, profile image, and Google account identifier. We use this information to authenticate you, secure your account, and provide the service.
We do not receive or store your Google password. We do not access Gmail, Google Drive, Google Calendar, or other Google content unless a future feature asks for your explicit permission and clearly explains the access requested.
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. How we use data
We use personal data to:
- create and manage your account;
- provide the dashboard, extension, onboarding, post generation, comment generation, lead signals, and source library features;
- personalise outputs to your voice, offer, audience, and preferences;
- process subscriptions, trials, credits, invoices, and billing events;
- provide customer support and troubleshoot issues;
- detect abuse, fraud, security incidents, and violations of our Terms;
- measure feature performance and improve the product;
- send service emails, product updates, billing notices, and important legal notices.
7. AI processing, lead sourcing, and third-party services
To source leads, generate drafts, analyse context, send and sync messages, process payments, host the product, and understand product usage, we use trusted third-party service providers. Our principal sub-processors are:
- Supabase for authentication, database, storage, and backend infrastructure.
- Unipile for connecting your LinkedIn account and sending and syncing the messages and invitations you authorise.
- Apify, including HarvestAPI actors, for collecting publicly available LinkedIn profile and activity data used for lead sourcing and enrichment.
- BetterContact for on-demand business email enrichment when an authorised user requests an address.
- Resend for account, verification, billing, build-status, and other transactional service emails.
- AgentMail for the dedicated event-partnership inbox used to communicate with event organisers and process their replies.
- Anthropic and OpenAI (and similar AI providers we may use as alternates) for draft generation, content analysis, and related AI tasks.
- Stripe for checkout, subscription billing, invoices, and payment processing.
- PostHog, Snitcher, and Vercel for product analytics, company-level website visitor identification, deployment, logs, and performance monitoring.
We can provide an up-to-date list of sub-processors on request, and business customers can request a Data Processing Agreement covering them. When we send content to an AI provider, we send the minimum context reasonably needed for the requested output. We do not sell your personal data. We do not permit service providers to use your data for their own marketing.
8. Cookies, local storage, and analytics
We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, support attribution or referrals, protect the service, understand how the product is used, and identify the company network associated with a website visit. Company-network identification is session-only and does not persist an identifier across browser sessions. Where consent is required, other persistent analytics and marketing storage is enabled only after you make the relevant choice. You can control cookies through our cookie settings and your browser settings, but blocking some cookies may affect product functionality.
9. Legal bases for processing
Where the GDPR or similar laws apply, we process personal data on the following legal bases:
- Contract: to provide Postelix and manage your account or subscription.
- Legitimate interests: to improve the product, prevent abuse, secure the service, and communicate with users.
- Legitimate interests (prospect data): to source, enrich, and score publicly available professional profiles so our customers can identify and reach relevant B2B prospects. We balance this against the rights of the individuals concerned and honour the right to object (see sections 4 and 14).
- Consent: where we ask for optional permissions, marketing consent, or access to specific integrations.
- Legal obligation: to comply with tax, accounting, consumer protection, and legal requirements.
10. Sharing and disclosure
We share personal data only when necessary for the purposes described in this policy. This may include sharing with service providers, payment processors, professional advisers, authorities where legally required, or a successor if Postelix or Unfair Advantage Ltd is involved in a merger, acquisition, financing, restructuring, or sale of assets.
We do not sell your personal data.
11. International transfers
Unfair Advantage Ltd is based in Cyprus. Some of our service providers may process data in the European Economic Area, the United Kingdom, the United States, or other countries where they operate. Where required, we rely on appropriate safeguards such as contractual commitments and standard contractual clauses.
12. Retention and deletion
We keep personal data for as long as needed to provide Postelix, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. You may request deletion of your account and personal data by contacting us.
Audience Engine trials: if a card-gated Audience Engine trial closes without converting to a paid plan, we permanently erase the trial workspace and its login account 30 days after the trial closes. This includes the saved market preview and account content. We retain only the minimum non-content receipts needed for billing and tax obligations, legal compliance, fraud and repeat-trial prevention, and do-not-contact enforcement.
Prospect signals that are surfaced to a customer but not acted on are automatically removed after a limited period. If a person objects to outreach or asks to be removed, we delete their prospect record from active sourcing and retain only the minimum information needed to keep them on our do-not-contact records.
Some information may be retained for a limited period in backups, logs, billing records, fraud prevention records, or where retention is required by law.
13. Security
We use technical and organisational measures designed to protect your data, including access controls, authentication, encryption in transit where supported, database permissions, monitoring, and least-privilege practices. No online service can guarantee perfect security, so you should use a strong password and protect your account credentials.
14. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export your personal data. You may also have the right to withdraw consent and lodge a complaint with a data protection authority.
To exercise these rights, contact us at help@postelix.com. We may need to verify your identity before responding.
If you are not a Postelix user but believe a Postelix customer has used the service to process your data or contact you, you can exercise the same rights, including objecting to processing and asking to be removed from outreach, at postelix.com/opt-out or at the same address. We will action removal, add you to our do-not-contact records, and respond within 30 days.
15. Children's privacy
Postelix is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us so we can take appropriate action.
16. Changes to this policy
We may update this Privacy Policy as Postelix evolves or as legal requirements change. The "Last updated" date shows when this policy was most recently revised. If changes are material, we will take reasonable steps to notify users.
17. Contact
For privacy questions or requests, contact: