01 Who we are

TechPolaris (القطب التقني) is a platform engineering company based in Al-Khobar and Dammam, Kingdom of Saudi Arabia, operating techpolaris.net. This Policy applies to the TechPolaris LinkedIn Integration Application (the "Application"), a tool we use to manage LinkedIn Pages on behalf of organizations that authorize it.

The legal entity [LEGAL ENTITY NAME] is the data controller responsible for the information described below. Where we process information on behalf of a client organization, that organization is the controller and TechPolaris acts as its processor under a written agreement. By authorizing the Application, the authorizing member and the organization they represent agree to the practices described in this Policy.

02 What the Application does

The Application is a business-to-business tool. It lets TechPolaris and authorized clients manage their own LinkedIn organization (Company) and brand (Showcase) Pages — publishing and scheduling content, moderating and responding to engagement, and reviewing performance analytics. It is not a consumer product and is not directed to the general public.

Access is granted only through LinkedIn's 3-legged OAuth 2.0 flow. A LinkedIn member who holds the required administrative role on a Page must explicitly authorize the Application before it can access any data for that Page. We never receive or store LinkedIn passwords; authentication remains entirely with LinkedIn.

03 Information we collect

We collect only the categories of data needed to operate the features an organization has enabled. The table below maps each category to why we process it.

04 How we use information

We use the information described above only to provide the Page-management service, specifically to:

• Publish, schedule, edit, and remove content on authorized Pages.
• Moderate and respond to comments, reactions, and engagement on those Pages.
• Produce analytics and performance reports for the managing organization.
• Deliver notifications about relevant Page activity.
• Operate, secure, audit, and troubleshoot the Application.
• Meet legal, regulatory, and contractual obligations.

05 What we do not do

• We do not sell, rent, or trade LinkedIn data.
• We do not use LinkedIn data to train machine-learning or artificial-intelligence models.
• We do not build any standalone database or profile of LinkedIn members beyond what is needed to operate the authorized features.
• We do not combine LinkedIn data with outside sources to re-identify or profile individuals.
• We do not use LinkedIn data for advertising to individuals outside the managing organization's own permitted activity.

06 Legal basis for processing

Under the Saudi Personal Data Protection Law (PDPL), we process personal data on the basis of the authorizing member's consent, given through LinkedIn's OAuth flow, and to perform the agreement with the managing organization. A member may withdraw consent at any time by revoking the Application's access (see Section 12).

07 How we share information

We share LinkedIn data only in these limited situations:

• With the managing organization or client on whose behalf we act.
• With infrastructure providers that host and secure our systems (including cloud hosting on Google Cloud Platform), under confidentiality and data-protection obligations.
• With LinkedIn and Microsoft as necessary to operate the integration.
• Where required by law or a competent authority.

We do not otherwise disclose LinkedIn data to any third party.

08 Cookies and tracking technologies

The Application accesses LinkedIn data through server-to-server API calls and does not place advertising or tracking cookies on end users. Any cookies used by the techpolaris.net website itself are governed by our website privacy and cookie notice.

09 Data storage and security

LinkedIn data is processed through TechPolaris's controlled API gateway and stored on access-restricted systems hosted on Google Cloud Platform. Our safeguards include encryption in transit and at rest, signed and verified gateway requests, role-based access control, network segmentation, audit logging, and least-privilege access. Non-essential personnel do not have access to production systems that hold LinkedIn data.

10 Data retention

We keep LinkedIn data only as long as needed to provide the service, or as required by law. When an organization ends its engagement, or when a member revokes the Application's access, we delete or de-identify the associated LinkedIn data within [30 / 60] days, except where retention is legally required. Analytics may be retained in aggregated, non-identifying form.

11 International data transfers

LinkedIn and Microsoft operate infrastructure outside the Kingdom of Saudi Arabia, and our hosting may involve processing in other jurisdictions. Where personal data is transferred across borders, we rely on safeguards consistent with the Saudi PDPL and applicable cross-border transfer regulations.

12 Your rights and choices

You can revoke the Application's access at any time from LinkedIn under Settings & Privacy → Data Privacy → Other applications → Permitted services. Revocation stops further collection and triggers deletion as described in Section 10.

Under the Saudi PDPL, you may request access to, correction of, or deletion of your personal data, and object to certain processing, subject to legal limits. To exercise these rights, contact us using the details in Section 17.

13 Members who are not direct users

Managing a Page involves public engagement, so the Application may process information about LinkedIn members who interact with managed Pages — for example, people who comment on, react to, or follow a Page — even though they are not themselves users of the Application. We process this information only to operate the moderation and analytics features, and it receives the same protections described here. These members may exercise their rights through LinkedIn or by contacting us.

14 Children's privacy

The Application is intended for business use by authorized organization administrators and is not directed to individuals under 18. We do not knowingly collect personal data from minors. If we learn that we have collected such data, we will delete it.

15 Governing terms

Our use of LinkedIn's APIs is governed by the LinkedIn API Terms of Use and applicable Microsoft terms. Where those terms impose stricter obligations than this Policy, those terms apply.

16 Changes to this Policy

We may update this Policy from time to time. Updates take effect when posted here, with a revised effective date; we communicate material changes to managing organizations.

17 Contact us

Questions or privacy requests may be sent to privacy@techpolaris.net, or by post to TechPolaris, [STREET ADDRESS], Al-Khobar, Kingdom of Saudi Arabia.