1. Introduction
This Privacy Policy describes how Boosting Technologies ("we", "our", or "us") collects, uses, and protects information through the EVA Platform web application and the EVA Platform Helper browser extension (collectively, the "Service").
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address, name, and organization details necessary to provide the Service.
2.2 Browser Extension Data
The EVA Platform Helper extension collects the following data to enable LinkedIn integration features:
- LinkedIn session cookies (li_at, JSESSIONID): Required to enable automated content publishing on your behalf. Cookies are encrypted with AES-256-GCM before storage and are never shared with third parties.
- Browser User-Agent string: Used to maintain session compatibility when publishing content.
- IP-based geolocation (city, country, ISP): Detected via ipapi.co to configure regional proxy settings for content publishing. No precise GPS coordinates are collected unless you explicitly grant browser geolocation permission.
- LinkedIn profile location: Extracted from your public LinkedIn profile page to verify regional content settings.
- Sales Navigator access status: Detected automatically to enable advanced prospecting features. Only a boolean flag is stored.
All extension data is transmitted securely over HTTPS to our backend (hosted on Google Cloud Platform) and is associated with your authenticated EVA Platform account.
2.3 Usage Data
We collect anonymous usage analytics to improve our Service, including pages visited and features used within the platform.
3. How We Use Information
We use the collected information to:
- Provide and maintain the Service
- Enable content management and social media scheduling features
- Authenticate your sessions securely
- Improve and optimize the Service
- Communicate with you about the Service
4. Data Storage and Security
All data is stored securely using Google Cloud Platform infrastructure with industry-standard encryption. Session data is encrypted in transit and at rest. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction.
5. Data Sharing
We do not sell, trade, or transfer your personal data to third parties. Data is only shared with:
- Google Cloud Platform: Infrastructure and hosting provider (Firebase, Cloud Functions)
- LinkedIn API: To publish content on your behalf, using OAuth 2.0 tokens you explicitly authorize
- ipapi.co: IP geolocation service used by the extension to detect your approximate location (city/country level). Only your IP address is sent; no personal data is shared.
- OpenStreetMap Nominatim: Reverse geocoding service used only when you grant browser geolocation permission. Only coordinates are sent; no personal data is shared.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Session cookies are stored only for the duration needed to maintain your authenticated session. You may request deletion of your data at any time.
7. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Object to data processing
- Data portability
- Withdraw consent at any time
8. Browser Extension Permissions
The EVA Platform Helper extension requests the following permissions:
- Cookies: To read LinkedIn session cookies (li_at) required for automated content publishing. Only LinkedIn cookies are accessed.
- Storage: To temporarily cache LinkedIn session data locally until it is synced to the EVA Platform backend. Data is cleared after successful sync.
- Alarms: To schedule periodic location checks (every 4 hours) that detect if you have traveled, ensuring proxy configuration stays up to date.
Host Permissions
- linkedin.com: To read session cookies and detect Sales Navigator access.
- ipapi.co: To detect your approximate geographic location via IP for proxy configuration.
- evahub.ai: To communicate between the extension and the EVA Platform web application.
All permissions are used solely for the purposes described above. The extension does not access any other websites or data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Boosting Technologies
Email: privacy@boostingtech.io
Website: https://evahub.ai