Privacy Policy

Last updated: 16 October 2026

This policy explains how Munero Limited ("Munero", "we", "us") collects, uses and protects personal data when you visit munero.co.uk or use one of our applications, including applications that connect to your LinkedIn account. Where a particular product publishes its own privacy notice, that notice adds to this one.

1. Who we are

Munero Limited is the data controller for the personal data described here. We are a company registered in England and Wales (company number 15769236).

We have not appointed a data protection officer. Please send any privacy question or request to the email address above.

2. Data we collect

When you visit this website

The website does not use cookies, analytics or advertising trackers, and has no forms. Like any website, the services that deliver it process technical data such as your IP address, browser type and the pages requested, in order to serve and secure the site (see section 6).

When you contact us

If you email us we receive your name, email address and whatever you choose to include in your message.

When you use one of our applications

Depending on the application, we may process:

• Account details — your name, email address and login identifiers.
• Content you create — posts, drafts, comments, files and settings you enter into the application.
• Usage and technical data — logs of actions taken in the application, error reports, IP address and device information, used to run and secure the service.
• Data from connected services — when you choose to connect a third-party account, such as LinkedIn, the data described in section 3.

3. Applications that connect to LinkedIn

Some of our applications let you sign in with LinkedIn and manage LinkedIn Pages or your own LinkedIn profile, for example to publish posts, read and reply to comments, and view the performance of your content. These applications use LinkedIn's official APIs and only act on accounts and Pages you have authorised.

What we receive from LinkedIn

The data we receive comes from LinkedIn, and only with your permission at the time you connect. It depends on the permissions you grant and may include:

• Your basic profile: name, profile photo, LinkedIn member identifier and email address.
• The LinkedIn Pages you administer, and your role on them.
• Posts, comments, reactions and mentions on those Pages or on your profile, including the public names and profile details of other LinkedIn members who interact with that content.
• Follower and engagement statistics for those Pages or posts.
• Access tokens issued by LinkedIn that let the application act on your behalf.

How we use LinkedIn data

We use LinkedIn data only to provide the features you use for managing your LinkedIn Pages and profile. In line with LinkedIn's API terms, we do not:

• use LinkedIn member data for advertising, sales, lead generation, recruiting or audience building;
• sell LinkedIn data, or export or transfer it to anyone outside the application;
• combine LinkedIn member data with other data to build or enrich profiles;
• use LinkedIn data to train artificial intelligence models;
• show member data about a Page to anyone other than the people who manage that Page through the application.

We request only the LinkedIn permissions an application needs to work.

How long we keep LinkedIn data

We keep LinkedIn data only as long as LinkedIn's data storage requirements allow and the feature needs it. Other members' activity data (such as comments and reactions) is kept for no more than 48 hours, and most member profile data for no more than 24 hours, after which it is deleted or fetched again from LinkedIn when needed. Access tokens are kept until they expire, until you disconnect your account, or until you revoke access.

Disconnecting

You can disconnect LinkedIn at any time inside the application, or by removing the application under Settings › Data privacy › Permitted services in your LinkedIn account. When you disconnect, we stop accessing your LinkedIn account and delete the LinkedIn data and tokens we hold for you within 30 days.

4. Why we use your data, and our lawful basis

• To provide an application you have signed up for, including connecting to LinkedIn on your instruction — performance of a contract with you.
• To process data about other people that appears on Pages or posts you manage, such as commenters — our legitimate interests, and yours, in managing your own LinkedIn presence. This is limited to what LinkedIn makes available to Page and profile owners and is kept only for the short periods set out in section 3.
• To keep our services secure and working, including logs and error reports — our legitimate interests in operating reliable, secure services.
• To answer your messages — our legitimate interests in responding to enquiries.
• To meet legal obligations, such as keeping accounting records — legal obligation.

We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not sell personal data.

5. How long we keep data

• Application accounts and the content you create: while your account is active, and deleted within 30 days of you closing it, unless we must keep something longer by law.
• LinkedIn data: as set out in section 3.
• Server and security logs: up to 90 days.
• Emails with us: up to two years after our last exchange, or longer if they form part of a contract or business record we must keep.
• Accounting and tax records: six years, as required by UK law.

6. Who we share data with

We do not sell personal data. We share it only with service providers who process it on our behalf under contract, and only as needed to run our services:

• Hosting and infrastructure — Amazon Web Services (servers and storage in the UK region) and Cloudflare (content delivery and security).
• Fonts — this website loads typefaces from Google Fonts, which receives your IP address when the page loads.
• Email — our email provider, to send and receive messages.
• LinkedIn — when you use a LinkedIn feature, we send your instructions (for example, a post to publish) to LinkedIn. LinkedIn's own use of data is covered by the LinkedIn Privacy Policy.

We may also disclose data where the law requires it, or to protect our rights or the safety of others.

7. International transfers

Some of our providers, such as Cloudflare and Google, are based in or may process data in the United States or other countries outside the UK. Where this happens we rely on a recognised safeguard, such as the UK–US data bridge or the UK International Data Transfer Addendum to standard contractual clauses.

8. Security

We protect personal data with encryption in transit, access controls limited to the people who need it, and secure storage of access tokens. No system is perfectly secure, but we will tell you and the regulator about a breach where the law requires it.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on it.

To use any of these rights, email [email protected]. We will respond within one month. There is normally no charge.

10. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

11. Children

Our services are for businesses and professionals and are not directed at children under 16. We do not knowingly collect their data.

12. Changes to this policy

We may update this policy as our services change. The date at the top shows when it last changed. Where a change materially affects how we use your data, we will tell users of the affected application before it takes effect.