Privacy Policy
Effective Date & Last Updated:
1. Overview & Scope
This Privacy Policy explains how Johnny LeHane ("we", "us", or "our") collects, uses, and safeguards information through:
- The website located at johnnylehane.com (the "Site").
- Our private marketing automation and scheduling application connecting Postiz with the LinkedIn Developer Platform API (the "LinkedIn Bridge Application").
- Our private AI agent system (the "LeHane fleet") that connects to Google Workspace — Gmail, Google Calendar, Google Drive, and Google Contacts — via Google's standard OAuth 2.0 authorization (the "Google Workspace Agent Access").
We are committed to respecting your privacy and adhering to platform compliance standards, including the LinkedIn API Terms of Use, GDPR, and applicable US privacy regulations.
2. LinkedIn Bridge Application (Postiz Integration)
We operate a developer application designed strictly as an internal, single-operator bridge to manage social media publishing and content distribution for:
- The personal LinkedIn profile of Johnny LeHane (/in/jwlehane)
- The Johnny LeHane Consulting LinkedIn Organization / Company Page
A. Data Accessed via LinkedIn OAuth
When authenticating with LinkedIn via standard OAuth 2.0 authorization, our application accesses:
- Authentication Tokens: Secure OAuth 2.0 access and refresh tokens required to interact with LinkedIn APIs on behalf of authorized administrative accounts.
- Basic Profile & Organization Identifiers: Member URNs, organization page IDs, and names necessary to designate destination channels for scheduled posts.
- Post Content & Status: Text, media attachments, scheduling timestamps, and API delivery confirmations for posts published through Postiz.
B. Strict Limits on LinkedIn Data Use
In compliance with LinkedIn Developer Policies:
- No Resale or Brokerage: We never sell, rent, license, or monetize LinkedIn member data or API responses.
- No Scraping or Surveillance: We do not scrape, harvest, or construct external profiling databases from LinkedIn users, connections, or comments.
- Purpose Limitation: All LinkedIn API interactions are strictly restricted to publishing and verifying author-scheduled content.
C. Infrastructure & Security
The Postiz instance operates on private, self-hosted infrastructure. Access tokens and configuration credentials are encrypted in transit and at rest, accessible solely by authorized administrators.
3. Google Workspace Agent Access
We operate a personal AI agent system (the "LeHane fleet") that authenticates to Google via standard OAuth 2.0 authorization to access the following Google Workspace services for the single authorized account agent.lehane@gmail.com:
- Gmail: Read, send, and modify messages to summarize, triage, and respond to email on behalf of the authorized account.
- Google Calendar: Read and write calendar events to manage scheduling and reminders.
- Google Drive: Read and write documents and files to support assistant workflows.
- Google Contacts: Read contact records to support communication and lookup.
A. Purpose Limitation
This application is a private, self-hosted, single-operator internal tool running on the operator's own infrastructure (the "Lenny" server). It is used solely to operate Johnny's personal assistant workflows. No Google Workspace data is sold, rented, licensed, or shared with third parties, and none is used for advertising.
B. Infrastructure & Security
OAuth access and refresh tokens are encrypted in transit and at rest and are accessible only to the authorized operator. The application runs only for the authorized account agent.lehane@gmail.com; it is not exposed as a public product or service.
4. Information Collected from Website Visitors
A. Analytics & Usage Data
We use Google Analytics and Firebase Analytics cookies to aggregate anonymous traffic statistics. This includes browser type, operating system, pages viewed, referral sources, and session duration to optimize website performance and user experience.
B. Voluntary Inquiries & Meeting Bookings
If you contact us via email or schedule a discovery call through integrated booking tools (e.g. Cal.com / Calendly), we collect the contact details you voluntarily provide (such as name, email address, company name, and discussion notes) solely to communicate with you regarding advisory services.
5. Data Retention & Revocation
- LinkedIn OAuth Tokens: Maintained only while active publishing integration is maintained. Tokens are invalidated upon disconnect.
- Immediate Deletion: You or platform operators may revoke application permissions at any time via LinkedIn settings (LinkedIn Permitted Services), which immediately terminates API access.
- Inquiry Records: General inquiry emails and contact form responses are retained for ordinary business communication and client relationship management.
6. Third-Party Service Providers
We partner with reputable infrastructure and service providers who adhere to strict security standards:
- LinkedIn Corporation: API integration and OAuth authentication.
- Google LLC (Firebase / Google Cloud / Google Analytics): Hosting infrastructure and website analytics.
- Postiz: Open-source social media management and scheduling engine.
7. Your Rights & Data Deletion Requests
Depending on your location, you may have rights under applicable privacy laws (such as GDPR or CCPA/CPRA) to request access to, correction of, or deletion of your personal data.
To request data deletion, ask questions about our data practices, or submit privacy-related inquiries, please contact:
8. Updates to this Policy
We may update this Privacy Policy periodically to reflect changes in our technology, LinkedIn API guidelines, or legal requirements. Updates will be posted on this page with an updated "Last Updated" timestamp.