How we collect, use, store, and protect your personal information and API access data.
Effective Date: July 24, 2026
This Privacy Policy applies to Muhammad Tahir (MTDeveloper) ("we", "our", or "us") accessible via https://mtdeveloper.vercel.app and its associated services, backend APIs, and LinkedIn integration tools.
1. Information We Collect
We collect minimal personal data to operate our portfolio website and automated social publishing tools effectively:
Contact Inquiries: Name, email address, phone number, and message content submitted through our contact form.
LinkedIn OAuth Data: Member identification URNs, profile display name, and authorized OAuth 2.0 access tokens required to perform post creation via official LinkedIn APIs.
Analytics & Usage: Anonymous performance metrics, page view statistics, and device types collected via Vercel Speed Insights and Analytics to optimize performance.
2. How We Use Your Information
Your data is processed strictly for legitimate operational purposes:
To respond to project inquiries, consulting requests, and contact submissions.
To generate, schedule, and publish authorized social media post drafts to your connected LinkedIn profile using official LinkedIn Posts APIs.
To monitor engagement statistics (impressions, reactions, comments) of published portfolio content.
To ensure application security, prevent rate limit abuse, and maintain server reliability.
3. Token Security & Encryption at Rest
Security is paramount. All sensitive OAuth access tokens and refresh tokens granted through LinkedIn integration are stored in our MongoDB database using industry-standard AES-256-GCM encryption. Plaintext tokens are never stored in log files or exposed client-side.
4. Third-Party Integrations & API Compliance
Our portfolio connects with select trusted third-party service providers:
LinkedIn Developer Platform: Uses OAuth 2.0 to access requested scopes (w_member_social, openid, profile) in full compliance with LinkedIn Developer Agreements.
Google Gemini AI: Used server-side to generate blog summaries and caption drafts. No personally identifiable user data is shared with AI models.
Cloudinary & Vercel: Used for secure media asset storage and edge web hosting.
5. Your Rights & Disconnection
You reserve full control over your data. You may disconnect your LinkedIn integration at any time through the dashboard or revoke app access directly in your LinkedIn Account Settings. To request complete deletion of your contact records or connected tokens, contact us at:
