Privacy Policy — TOYOU-IN LinkedIn Integration

Last updated: July 12, 2026

This Privacy Policy applies specifically to the LinkedIn application “TOYOU-IN”,
developed and operated by TO YOU S.r.l. Società Benefit (“TOYOU”, “we”, “us”),
registered office at Via di Santa Teresa 23, 00198 Rome, Italy, VAT/Tax code IT 16362251007.
It supplements, and does not replace, TOYOU’s general website privacy policy, which governs
data collected through toyou.it independently of this application.

1. Purpose of this application

TOYOU-IN is an internal automation tool used exclusively by TOYOU to publish content
(text posts, images, and related comments) that TOYOU itself authors, to TOYOU’s own
LinkedIn Company Page. Its sole function is to let TOYOU distribute its own editorial
content — originally published on the TOYOU corporate blog (toyou.it/news) — to LinkedIn
without manual copy-paste, on behalf of TOYOU’s Organization Page.

2. Data we access via the LinkedIn API

Through LinkedIn’s Community Management API, TOYOU-IN accesses and processes only:

• An OAuth 2.0 access token issued to a TOYOU employee holding an Administrator or
  Content Admin role on the TOYOU LinkedIn Organization Page, used solely to
  authenticate API calls made on behalf of that Organization Page.
• The LinkedIn Organization ID of the TOYOU Company Page.
• Content authored by TOYOU (post text, images, hashtags) that TOYOU-IN submits to
  LinkedIn for publication, and the identifiers LinkedIn returns for the resulting
  posts/comments (used only to confirm successful publication and for internal
  logging).

TOYOU-IN does not access, collect, store, or process personal data belonging to
LinkedIn members — including followers, commenters, or any other individuals who
interact with the TOYOU Organization Page. It does not read member profiles, connections,
messages, analytics on individual members, or any personal data beyond what is described
above.

3. How this data is stored and secured

The OAuth access token and Organization ID are stored in an encrypted environment
variable configuration on infrastructure controlled by TOYOU, accessible only to
authorized TOYOU personnel. They are never shared with, sold to, or disclosed to any
third party, except as required to make the authenticated API calls to LinkedIn itself.
Tokens are retained only for as long as the integration remains active and are deleted
upon disconnection or revocation.

4. Data sharing with third parties

TOYOU-IN does not share any data with third parties. The only party the data is
transmitted to is LinkedIn Corporation, as the platform on which the content is
published, under LinkedIn’s own applicable terms and privacy practices.

5. Legal basis and data subject rights

As a company established in the European Union, TOYOU processes the limited data
described in this policy on the legal basis of legitimate interest (Article 6(1)(f)
GDPR) — operating its own corporate communications. Because this application does not
process personal data of individuals other than the authorizing TOYOU administrator, no
separate consent mechanism applies to third parties. TOYOU employees whose credentials
are used to authorize this application may exercise their rights under the GDPR
(access, rectification, erasure, restriction, portability, objection) by contacting us
using the details below.

6. Data retention

Access tokens are retained for the duration of the integration’s operation and are
deleted immediately upon revocation of the application’s access, either by TOYOU or by
LinkedIn. Logs of published posts (titles, timestamps, LinkedIn post identifiers) are
retained for internal auditing purposes for a reasonable period, not exceeding 24
months, and contain no personal data of LinkedIn members.

7. Changes to this policy

We may update this policy if the scope of the TOYOU-IN application changes. Material
changes will be reflected with an updated “Last updated” date above.

8. Contact

For any question regarding this policy or the TOYOU-IN application, contact:

TO YOU S.r.l. Società Benefit
Via di Santa Teresa 23, 00198 Rome, Italy
Email: info@toyou.it
PEC: toyou@legalmail.it