CHARIK STUDIO

Privacy policy

What data Charik Studio uses, why, with whom, for how long, and how to exercise your rights.

Who is responsible

Charik Studio is published by CHARIK, SAS au capital de 100 000 €, 10 rue de Penthièvre, 75008 Paris, SIREN 981 587 793 (RCS Paris), the controller of your data. Contact: [email protected].

The data we use

• Your LinkedIn identity: member identifier and name, received when you sign in with LinkedIn. No password is asked for or stored.
• Permission to publish: the LinkedIn access token of your profile (and of your company pages if you import them), encrypted (AES-256-GCM) and valid for about 60 days.
• Your content: post texts, first comments, images, documents, polls, links, scheduled times, and the status of each publication.
• Your RSS feeds: their addresses, your settings and the articles read (title, link, summary, date).
• Your devices, if you turn on notifications: the subscription address provided by your browser and its encryption keys.
• Clicks on your links, unless you turn counting off: the links of your published posts go through charik.studio, which only records the number of clicks per hour. So that the same person is not counted twice, a hashed fingerprint of their IP address and browser is kept in memory for one hour, never written down. No cookie.
• Your subscription, if you subscribe: your Stripe customer and subscription identifiers, the subscription’s state and renewal date. Your card number is entered at Stripe: Charik Studio never sees it.
• Connected assistants (such as ChatGPT): the application’s name and access tokens, stored as fingerprints (hashed).
• Technical data: session cookie, IP address and requested pages in the server logs, temporary anti-abuse counters.

Why

• To provide the service you ask for: save, schedule and publish your posts on LinkedIn, notify you, read your feeds, answer your assistant. Legal basis: performance of the contract (these terms).
• To protect the service and its users: security, abuse prevention, error diagnosis. Legal basis: our legitimate interest.

No advertising, no resale, no profiling, and your content is not used to train any artificial intelligence model.

With whom

• OVHcloud (OVH SAS, France) hosts the service and its data in Strasbourg, and the encrypted backup copy in Gravelines.
• Cloudflare protects and routes the site’s traffic.
• LinkedIn receives what you publish, at the time you chose.
• Stripe (Stripe Payments Europe, Ireland), if you subscribe, to bill you: it receives your LinkedIn name, the email, country and VAT number you enter when paying, and your Stripe customer identifier, never your card number through us. Its use of your data is governed by Stripe’s privacy policy.
• Browser notification services (Google, Apple, Mozilla, Microsoft) deliver your notifications, end-to-end encrypted: they cannot read them.
• OpenAI (ChatGPT), only if you connect Charik Studio to ChatGPT: the information ChatGPT requests on your behalf (your accounts, feeds, articles, posts) is sent to it, and its use within ChatGPT is governed by OpenAI’s privacy policy.
• The sites of your RSS feeds and of the links you add, which Charik Studio visits to read their content.

Some of these providers may process data outside the European Union; such transfers rely on the safeguards provided by the GDPR (standard contractual clauses or an adequacy decision).

For how long

• Your account and content: as long as your account exists. You can delete it at any time (Account › Delete my account): everything is erased from Charik Studio immediately; backup copies are destroyed at most 2 months later (14 days on the server, 2 months for the encrypted off-site copy), and are never restored except to recover from an incident.
• Billing: invoices and accounting records are kept for 10 years, as the law requires; deleting your Charik Studio account does not delete them at Stripe. Stripe identifiers are kept as long as your account exists.
• Short links: kept after your account is deleted, so that posts already on LinkedIn keep working; they are then attached to no one (only the destination address remains).
• Images and documents: erased as soon as the post is published, or after 24 hours if attached to no post, and never included in any backup.
• Sessions: 30 days, extended each time you use the app. LinkedIn tokens: about 60 days. Assistant tokens: 1 hour, renewable for 30 days.
• Logs: 14 days for access logs (IP address), 5 weeks for application logs. The journal of administration decisions about an account (for instance a suspension for abuse): 1 year.
• Backups: 14 days on the server, and an encrypted off-site copy destroyed at most 2 months after it was made.

Your rights

You can access, correct or erase your data, ask for a copy, object to or restrict processing, by writing to [email protected]. You can also revoke Charik Studio’s access at any time in LinkedIn’s privacy settings, and disconnect an assistant from Sources. If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.

Cookies

Charik Studio only uses cookies required for it to work (your session and the security of the LinkedIn sign-in), and your browser’s local storage for simple display preferences. No advertising or analytics cookies.

Security

Encrypted connections (HTTPS), encrypted or hashed tokens, each user’s data strictly separated, the service isolated from the other applications on its server (separate account, disk and network), daily backups. No system is infallible: if an incident affects your data, we will inform you as required by law.

Last updated: October 18, 2026.