Privacy Policy

Mastreach is a product of Rian Infotech, the brand of RianX AI LLP (“we”, “us”). This page says what the product actually does with information: the web app, the desktop watcher and the Chrome extension. Mastreach drafts LinkedIn comments and posts in your voice. It never posts, likes, connects or sends a message for you on its own. You press the button yourself. If you connect your LinkedIn account for publishing, a post goes out only when you publish or schedule it.

1. What we collect

• Account data. Your name and email, a sign-in token and, if you sign up with email and password, the password stored only as a hash. You can sign in with email or with Google. For Google sign-in we receive your Google account email and name from Google, through Supabase authentication. We never ask for your LinkedIn password.
• Your voice and business details. The identity, voice, pillars and knowledge base notes you set up, so drafts sound like you.
• LinkedIn data you connect. Through the desktop watcher: your own posts and their counts, your own comments and replies under them, your inbox conversations, notifications about engagement with you, posts in your feed that you might comment on, and your profile counters (profile views, search appearances). Through the extension: the post you are replying to.
• Content drafts and what you published. Drafts, edits, the comment or post you finally published, and limited usage counts (for example comments sent today).
• Pictures. Images you upload, and images the app generates for your posts. They are stored in cloud storage so they can be shown and attached to a post.
• Billing data. Plan, status and Razorpay customer and subscription IDs. Card or UPI details are entered on Razorpay’s pages and are never stored by us.
• Operational data. Request logs, error logs, and what each AI call cost us.

2. How we use it

• To write drafts of posts, comments and replies in your voice.
• To show you what needs attention: comments to write, messages to answer, content to approve.
• To apply plan limits and pacing limits, and to bill you.
• To compare a draft with what you actually posted, so your drafts improve.
• To keep the service running, secure and supported.

We do not sell your data. We do not use it for advertising. We do not use third-party analytics or advertising trackers on the website or the app. We do count visits to the landing page, the blog and the sign-up page, without a cookie. The page, the site that sent you (host only) and any utm_source are sent to our own server, together with a one-way code made from your IP address and browser with a salt that changes every day. When a search or AI crawler fetches a blog article, we record its name and the page path.

3. Who processes it for us

We use these services to run Mastreach. Each sees only what it needs for its job.

• AI model providers. Text you work on (post text, your notes, your voice settings, inbox messages you ask us to reply to) is sent to a language model to produce drafts. The code calls OpenAI directly, and OpenRouter, which routes to other providers: Anthropic (Claude, which writes your posts), Google (Gemini) and DeepSeek. Pictures are described and generated through OpenRouter (the code names a Qwen image model).
• Hosting. Railway runs the application servers.
• Database, storage and sign-in. Supabase.
• Payments. Razorpay.
• Email. Resend sends service alerts, such as a notice that your desktop watcher has gone offline, to the addresses you set for alerts.
• Publishing. When you schedule or publish a post, its text and images go to Outstand, the service that delivers it to LinkedIn.
• Lead research. The lead finder uses Exa and Apify to search public web pages. Search queries are sent to them; your private data is not.
• Push notifications. Google Firebase Cloud Messaging delivers app notifications.

• Issue tracking. If LinkedIn changes its page layout and the extension sends a diagnostic (see section 5), we file it in our own GitHub issue tracker.
• Contact lookup. The lead finder can use Enrich.so to look up contact details of a person you ask about.
• Fonts and checkout. Our public pages load fonts from Google Fonts, and the payment window loads from Razorpay, so those companies see your IP address and browser.

We share data only with the services listed here, and where the law requires it.

4. The desktop watcher

The watcher is a small app for macOS and Windows. It runs on your computer, in a Chrome profile that belongs to you and that you sign in to LinkedIn with yourself. It only reads. It does not send messages, connect, like, follow or post.

What it reads

From your own signed-in LinkedIn session: inbox conversations, your own posts and their counts, your own comments and their impressions, replies under your comments, engagement notifications, posts moving in your feed, and your profile dashboard counters.

What it sends to our server

The content and counts listed above, over HTTPS, labelled with your Mastreach token. It also sends a health report: a random device ID, the computer’s name, the operating system, the watcher version, its status (watching, paused, login needed), uptime and the last error. Health events describe structure only, such as “sync failed” or “LinkedIn asked for a check”, with short messages and counters. They are not meant to carry LinkedIn content.

What stays on your computer

Your LinkedIn login, cookies and Chrome profile never leave your machine. We never see your LinkedIn password or two-factor code. The watcher keeps small state files (what it has already sent), logs, its settings including your Mastreach token, and the device ID.

Where it is stored

• macOS: ~/Library/Application Support/RianWatcher
• Windows: %APPDATA%\RianWatcher
• Windows, Microsoft Store version: %LOCALAPPDATA%\Packages\<package name>\LocalCache\RianWatcher

Removing it

In the watcher menu, “Disconnect this account” deletes the token and settings, and “Sign out and forget this Mac” also deletes the Chrome profile and state. Logs are kept so you can diagnose problems; delete the folder above to remove them. Uninstalling the Windows app removes the program and its start-at-login entry but deliberately leaves that data folder, so reinstalling does not cost you your LinkedIn sign-in. Delete the folder yourself if you want it gone. Uninstalling the Microsoft Store version removes its data folder too. Neither action deletes what is already stored on our servers; see section 7.

5. The Chrome extension

The Mastreach extension does two things: it drafts a comment for the LinkedIn post you are reading, and it lets you save a page you choose into your knowledge base.

• On linkedin.com. When you press the Mastreach button in a comment box, it reads that post (text, author name, comments already under it, and its picture) and sends it to our server to draft your comment. Nothing from the post is sent before you press it. After you publish a comment on a post you drafted for, the extension reports the comment you posted so we can compare it with the draft.
• On other sites. It holds permission to read any tab, so it can tell whether you are on LinkedIn. While the side panel is open it reads the page title, address, visible text and your selection into the panel. That stays in your browser until you press “Save to knowledge base”.
• Kept in the browser. Your account token, a random install ID and your chosen voice.
• Diagnostics. If LinkedIn changes its page layout, the extension may send a short diagnostic: the page address, counts of elements it could not match and a sample of the page’s HTML structure. We record it in our own issue tracker.
• Never. It never posts, likes, follows, connects or messages for you, and never sees your passwords.

To remove it, uninstall it in Chrome. Ask us to delete what is stored on our side.

6. Cookies and local storage

We use a session cookie to keep you signed in, and browser storage for small conveniences such as remembering where you came from when you sign up. We do not use advertising cookies.

7. Keeping and deleting your data

We keep account and writing data while your account is active, and for a limited time afterwards if we need it for support, security, tax or legal reasons. To have your account and the data we hold deleted, or to see or correct it, email info@rianinfotech.com from your account email. We will confirm and carry it out. There is no self-service delete button in the app yet.

8. Children

Mastreach is for working adults. We do not knowingly collect data from anyone under 18.

9. Where data is processed

We are based in India. Our providers may process data in other countries, including the United States.

10. Changes

If we change this policy we update the date at the top. For a material change we will notify you.

11. Contact

Questions, requests and complaints about your data: info@rianinfotech.com, or by post at the address below.