Privacy Policy

This policy explains what Epexta (operated by White Way Web) collects and how it is used. We collect only what is needed to run the service.

Account data

Your name, email address, and a hashed password (never the password itself), plus the organisation you belong to and your role in it.

Connections you add

For WordPress connections: the site URL, username, and Application Password. Application Passwords are encrypted at rest. API keys and OAuth tokens issued by Epexta are stored only as one-way hashes.

LinkedIn sign-in service

• When a WordPress plugin sends you to Epexta to connect LinkedIn, we exchange LinkedIn's authorisation code for an access token using our LinkedIn app credentials, and pass that token once to the website you approved.
• We do not store the LinkedIn access token, your LinkedIn profile, or your posts. The short-lived state and hand-off values are encrypted, expire within minutes, and are not kept in a database.
• The token can only be redeemed by the website origin you approved. Posting to LinkedIn happens directly from your website, not through Epexta.

Technical data

We use Vercel for hosting and privacy-friendly usage analytics. Standard server logs (such as IP address and request time) may be kept for security and troubleshooting.

Sharing

We do not sell your data. It is shared only with the providers needed to run Epexta (hosting and database) and with the services you choose to connect.

Retention and your rights

We keep account data while your account exists. You can disconnect a site, revoke a connected app, or ask us to delete your account and data, and you may ask for a copy of your data or a correction to it.

Contact

Privacy questions: whitewayweb.com. See also our Terms of Service.