Privacy Policy — VeloMarketing MCP

VeloMarketing is an MCP (Model Context Protocol) server operated by BBTruck / VeloPulse ("we"). It runs entirely on your own computer (macOS or Windows) and lets your AI assistant draft and publish posts to your own LinkedIn account.

What we access

You sign in with your own LinkedIn account through LinkedIn OAuth. We request only these scopes:

• openid and profile — to identify your LinkedIn member account and show your name;
• w_member_social — to publish posts you have approved, on your behalf.

Where your data is stored

• Your LinkedIn access tokens are stored only in your operating system's keychain (macOS Keychain or Windows Credential Manager) on your own computer.
• Post drafts and settings stay on your computer.
• We run no central database and receive no copy of your tokens, drafts or posts.

Token-exchange endpoint

To complete sign-in, the endpoint https://velopulse.io/oauth/token forwards the one-time OAuth authorization code to LinkedIn and returns LinkedIn's response directly to your computer. It is stateless: we do not store or log your authorization code or tokens.

Publishing

Posts are published only after your own explicit confirmation. Nothing is posted automatically without your approval.

What we do not do

• No analytics, tracking or advertising.
• We do not sell, rent or share your data.

Your choices

You can revoke VeloMarketing's access at any time at linkedin.com/psettings/permitted-services. You can also delete the stored tokens from your OS keychain, or uninstall the MCP.

Changes and contact

We may update this policy; the date below will change when we do. Questions: [email protected].