This policy explains what information Advocado ("Advocado", "we", "us", or "our") collects when you use our website and platform, why we collect it, who we share it with, and the choices you have. We keep it in plain language because trust is the whole point.
1. Who we are
Advocado is an employee advocacy platform that helps teams discover relevant content, draft posts, and share them on social networks such as LinkedIn. When we talk about "the Service" we mean the Advocado website at advocado.it, the application at app.advocado.it, and everything connected to them. For any privacy question, the fastest route is pit@advocado.it.
2. Information we collect
We only collect what we need to run the Service. That falls into a few groups.
Information you give us
- Account and profile. Your name, work email, job title, the organization you belong to, your role, and your password. Passwords are used to sign you in and are stored to operate your account.
- Waitlist and onboarding. If you join the waitlist or complete the onboarding form, we collect your name, work email, phone number with country code, company, website, a short description of your business, your ideal customer, your target keywords, your call to action, team size, and optional files such as your company logo and pitch deck.
- Content you create. The posts, drafts, edits, images, templates, brand voice notes, and scheduling details you produce or upload inside the Service.
- Support and communications. Anything you send us by email or through the product.
Information we collect automatically
- Session and device data. Basic technical information needed to keep you signed in and to keep the Service secure, such as your session cookie, browser type, and IP address in server logs.
- Product usage. Which posts you approve, publish, or discard, and performance signals for content you publish, so we can show your analytics and improve suggestions.
Content from public sources
To build your viral feed, the Service reads publicly available content from platforms such as Hacker News, Reddit, YouTube, X (Twitter), LinkedIn, Instagram, GitHub, and public web search, matched to the keywords your organization chooses. This is public content used to suggest ideas; it is not private data about you.
Cookies and analytics
We use a small number of strictly necessary cookies to sign you in and protect against abuse. Because these are essential to the Service working, they cannot be switched off from within the product.
We also use two analytics tools to understand how the Service is used and where it is confusing: Google Analytics, which counts page views and general usage, and Microsoft Clarity, which records anonymized session replays and heatmaps of how people move through the pages. Both set their own cookies. Clarity's replays can include content shown on screen while you use the Service. Neither is used for advertising, and we do not sell cookie data. You can opt out of both with any standard browser tracking protection or ad blocker, and of Google Analytics specifically with Google's browser add-on.
3. How we use your information
- To create and operate your account and your organization's workspace.
- To generate content suggestions, drafts, and images tailored to your brand.
- To publish and schedule posts to the social accounts you connect.
- To show analytics on how your content performs.
- To send account and service messages, such as sign in notifications and, when an administrator adds you, your login details.
- To keep the Service secure, prevent abuse, debug problems, and meet legal obligations.
We do not sell your personal information, and we do not use it for third party advertising.
4. AI processing
Advocado uses artificial intelligence to draft posts, generate images, score content relevance, and make suggestions. To do this, the relevant text and instructions are sent to our AI provider, Anthropic, which operates the Claude models. Anthropic processes this content to return a result to you. We choose providers that do not train their foundation models on business customer data submitted through their API. We do not use your content to train our own models.
5. LinkedIn connection
Connecting LinkedIn is optional and always your choice. When you connect it, we use LinkedIn's official authorization flow and store only what is needed to act on your behalf: a secure access token, your LinkedIn name, and your profile picture, shown so you can confirm the right account is linked. We use this to publish or schedule the posts you approve. We may also retrieve public engagement figures, such as reactions, comments, reposts, and follower counts, for the analytics you see. We never post without your action, we never read your private messages, and you can disconnect LinkedIn at any time from Settings, which removes the stored token.
6. Who we share your information with
We share information only with service providers who help us run the platform, and only to the extent they need it. These providers are bound to protect your data and to use it only for the services they provide to us.
| Provider | Purpose |
|---|---|
| Anthropic | AI generation of text, images, and content scoring (Claude) |
| Publishing posts and reading public engagement, when you connect it | |
| Resend | Sending transactional email, such as sign in and account notices |
| RapidAPI (LinkedIn data provider) | Public post engagement and follower metrics for analytics |
| Google Analytics | Page view and usage measurement for the website and app |
| Microsoft Clarity | Anonymized session replays and heatmaps, to find where the product is confusing |
| Hosting infrastructure | Running our application servers and database on a secured, dedicated server |
We may also disclose information if required by law, to protect the rights and safety of our users or the public, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you.
7. How long we keep your information
We keep your information for as long as your account is active and as needed to provide the Service. If you close your account, we delete or anonymize your personal information within a reasonable period, unless we are required to keep it to meet a legal, tax, or security obligation. Waitlist entries are kept until we no longer need them to evaluate access.
8. How we protect your information
We host the Service on a secured, dedicated server, encrypt traffic in transit with HTTPS, restrict access to authorized personnel, keep regular database backups, and store third party secrets outside our code. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your personal information.
- Object to or restrict certain processing.
- Receive a copy of your information in a portable format.
- Withdraw consent, such as by disconnecting LinkedIn, at any time.
To exercise any of these, email pit@advocado.it. We will respond within the time required by applicable law. You also have the right to complain to your local data protection authority.
10. International transfers
Some of our providers may process information in countries other than your own. Where that happens, we rely on appropriate safeguards, such as standard contractual clauses, to protect your information consistent with this policy.
11. Children
Advocado is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.
13. Contact us
Advocado
Privacy questions and requests: pit@advocado.it