This policy explains how your personal data is processed when you use Agent from CylonCat ("Agent", "we"). It serves as our information notice under the EU and UK General Data Protection Regulation (GDPR / UK GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK).
1. Controller
Infolore Ltd, a company registered in England and Wales, company number 16769357. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: [email protected]
2. What we process
| Data | Examples | Source |
|---|---|---|
| Identity and contact | Name, email address, LinkedIn member ID and profile photo | LinkedIn, when you sign in |
| LinkedIn connection | Posting permission (access token) and its expiry | LinkedIn; stored encrypted |
| Content | Sample posts you paste, your voice profile, plan, drafts, approved posts, first comments, uploaded images | You |
| Approval link data | The approval or change note left by whoever opens the link | The person opening the link |
| LinkedIn results | Post and daily results from the analytics file you upload | You (Pro) |
| Membership and billing | Plan, subscription status, billing address, tax ID; we never hold card details | Via Stripe |
| Usage and security | Session records, IP address, browser details, timestamps, AI usage amounts | Automatically while you use the service |
| Correspondence | Emails you send us | You |
| Site form | Name, email address, the topic you pick and your note; deleted after 12 months | You (no account needed) |
Text you paste into the free AI Text Checker on this site is sent to our server to be scored; it is not stored or written to logs. The checker needs no account.
We don't ask for special category data (health, religion, political opinions, etc.). We recommend not including such data in your posts.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating your account and letting you sign in | Contract |
| Building your voice profile, generating plans and drafts, publishing approved posts to LinkedIn | Contract |
| Membership, payments and invoicing | Contract; legal obligation |
| Notification and weekly summary emails (can be turned off) | Contract; legitimate interests |
| Security, abuse prevention, debugging | Legitimate interests; legal obligation |
| Improving the service with anonymous statistics | Legitimate interests (anonymous data only) |
| Marketing emails | Consent (we don't send any today) |
4. AI processing
Drafts, voice profiles and comment replies are generated with Anthropic's Claude model. To do this, your sample posts, voice profile and relevant plan details are sent to Anthropic. Under its commercial API terms, Anthropic does not use this data to train its models.
We don't use the text of your posts to train models or improve the product either. If we ever want to, we will ask for your separate, explicit consent.
AI output can be wrong. No post is published without your approval, and you are responsible for what you publish.
5. Who we share data with
We don't sell your data. We share it only as needed with these providers:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, image generation | USA and global network |
| Anthropic PBC | Draft, voice profile and reply generation (Claude) | USA |
| LinkedIn (Microsoft) | Sign-in and publishing the posts you approve | USA / Ireland |
| Stripe, Inc. / Stripe Payments Europe | Payments and invoicing | USA / Ireland |
| Resend, Inc. | Sending notification emails | USA |
| Unsplash | Image suggestions (search keywords only) | USA |
We may disclose data to authorities where the law requires it.
6. International transfers
Some providers are outside the UK, the EEA and Turkey. Transfers rely on standard contractual clauses and equivalent safeguards.
7. How long we keep data
| Data | Period |
|---|---|
| Account and content data | While your account is open |
| After you ask to delete your account | The account closes immediately and publishing stops. Your personal data is permanently deleted after 30 days; you can change your mind within that time. |
| Backups | Deleted data drops out of backups within 30 days |
| Unverified sign-ups | 3 days |
| Invoices and payment records | For the statutory period |
| Trial record of a deleted account: a one-way hash of the email address and LinkedIn ID (your address can't be recovered from it) | Indefinitely; only to stop the same person starting a new trial by signing up again |
| Security and audit logs | Up to 2 years |
| Anonymous statistics | Indefinitely |
Anonymous statistics are numbers that can't be linked to you: post counts, feature usage, AI usage amounts, score distributions. Post text is not anonymous data and is not kept for this purpose.
8. Cookies
The app (ajan.cyloncat.com) uses only a strictly necessary cookie that keeps you signed in. This website (cyloncat.com) uses no cookies, ads or trackers. If we add visitor analytics, we'll choose a cookieless method and list it here.
9. Your rights
You can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent where processing relies on it. You can also complain to a supervisory authority (the ICO in the UK, your local authority in the EU, the KVKK Authority in Turkey).
You can delete your account under Setup → Account in the app. To get a copy of your data, or for any other request, write to [email protected] from your account's email address; once we've verified it's you, we reply within 30 days.
Data copy requests. The file we send (JSON) contains the data you entered, set up and published: your account details, the settings you chose (posts per week, your custom days, language), the sample posts you pasted and the text of your posts published on LinkedIn. Content the service generates is not included: drafts and their versions, the AI-extracted voice profile, monthly plan suggestions, scores and analytics.
10. Security
Connections are encrypted (HTTPS). LinkedIn access tokens are stored encrypted. Each account's data is kept separate; no account can see another's. Post content isn't visible in the admin panel. Your card details never reach us.
11. Children
The service is not intended for anyone under 18.
12. Changes
We may update this policy. We'll email registered users about significant changes before they take effect.