Integration
Growcita + LinkedIn
The Paid Media and Demand Gen agents connect directly to LinkedIn via the Marketing Developer Platform OAuth so they can manage Sponsored Content campaigns, publish approved organic posts, and report on ad and content performance — all under the autonomy level and guardrails you configure.
Requires LinkedIn Marketing Developer Platform approval for rw_ads— developer access only until approval lands.
What the integration does
Once you connect your LinkedIn account, Growcita uses the LinkedIn REST API to power these features:
- Ads performance reporting: Pull spend, impressions, clicks, leads, and conversions across your Sponsored ad accounts, campaign groups, campaigns, and creatives.
- Approved campaign edits: Create paused campaigns and creatives, adjust budgets within your daily-change guardrail, and pause underperformers. Enabling a campaign always requires explicit approval.
- Organic organization posts: Draft and publish approved posts to LinkedIn Company Pages you administer.
- Organic member posts (demand-gen outreach): Publish approved posts to your personal feed for demand-generation workflows. LinkedIn's API publishes immediately — there is no draft state — so these are treated as high-risk and require explicit human approval before each send.
Not supported via the standard LinkedIn API: direct messages (Messaging API is Partner-only), connection requests (no public API), and profile or lead search (Sales Navigator is Partner-only). When asked to do any of these, the agent refuses verbatim rather than fabricating success.
Data we read
- · Your basic profile (id, name, email)
- · Sponsored ad accounts you can reach (URN, name, status, currency)
- · Campaign groups, campaigns, ad creatives, and targeting
- · Spend, impressions, clicks, conversions, lead-gen-form responses
- · Organization pages you administer (id, name)
- · Public posts and engagement metrics on those pages
Data we write
- · Create campaigns and creatives (always paused)
- · Adjust budgets (gated by your max-daily-change %)
- · Pause / resume campaigns and creatives
- · Publish approved posts as an organization
- · Publish approved posts as the authenticated member
Every write passes through autonomy, budget, guardrail, and approval gates before reaching the LinkedIn API.
OAuth scopes we request
When you click “Connect LinkedIn” in your Growcita dashboard, we redirect you to LinkedIn's consent screen and request only the scopes required to deliver the features you signed up for.
| Scope | Why we need it |
|---|---|
| openid, profile, email | Identify the connected LinkedIn member so we can attach the account to your Growcita workspace and surface which member each integration is using. |
| r_basicprofile | Read basic profile fields used in the integration picker UI (name, headline, profile picture). |
| r_ads | Read the structure of your Sponsored ad accounts — campaigns, ad groups, and creatives. |
| r_ads_reporting | Read campaign and creative performance metrics for the Paid Media dashboard. |
| rw_ads | Create, edit, pause, and resume Sponsored campaigns and creatives under your daily-change and budget guardrails. Requires Marketing Developer Platform approval. |
| r_organization_social | Read posts and engagement on Company Pages you administer so the Organic Social agent can report on performance. |
| w_organization_social | Publish approved posts to LinkedIn Company Pages you administer. |
| w_member_social | Publish approved posts to your personal LinkedIn feed for demand-gen outreach. Treated as high-risk — requires human approval before each send. |
We only request scopes for features you intend to use. If your LinkedIn app has not yet been approved for rw_ads, the connection still completes — write tools will surface LinkedIn's 403 verbatim until approval lands.
LinkedIn API Terms commitment
Growcita's use of data received from LinkedIn adheres to the LinkedIn API Terms of Use and applicable Marketing Developer Platform policies.
- No selling LinkedIn data. We do not sell, license, or share LinkedIn data with data brokers, advertising networks, or other unrelated third parties.
- No generalized model training. We do not use LinkedIn data to train generalized AI models. Only per-session agent invocations see your data, and only for the task you initiated.
- Purpose limitation. LinkedIn data is used only to deliver the features described on this page and elsewhere in the Growcita product.
- Restricted ad categories. Ad creatives that include LinkedIn-restricted categories (gambling, crypto, etc.) are validated upstream and refused before reaching the API.
- Retention. Tokens are deleted from our database within 24 hours of disconnect; cached performance data is deleted within 30 days on request.
How we secure your data
- Encrypted tokens. LinkedIn refresh tokens are stored in our Supabase Postgres database encrypted at rest. Access tokens are short-lived and never written to disk in plaintext.
- Standard refresh flow. LinkedIn issues OAuth2-standard refresh tokens. Growcita re-exchanges them silently before expiry on a ~60-day cycle so you never see surprise disconnections.
- TLS in transit. All requests to LinkedIn APIs and between Growcita services use TLS 1.2 or higher.
- Rate-limit aware. Workers back off on HTTP 429 from LinkedIn and never retry POSTs without first checking platform state — we don't risk double-publishing on a network error.
- Audit log on every write. Every LinkedIn write is recorded in our internal
tool_executionstable with the tool name, input size, duration, and outcome. - Guardrails before every write. See our security disclosure policy for vulnerability reporting and the features page for autonomy levels and human-approval gates.
Revoke access at any time
You can revoke Growcita's access to your LinkedIn data instantly:
- 1. Go to Data sharing → Permitted services on LinkedIn
- 2. Find “Growcita” and click Remove
- 3. Or, sign in to Growcita and disconnect from the Integrations page
Delete stored LinkedIn data
Disconnecting deletes the encrypted refresh and access tokens from our database. To delete cached performance data and dashboards as well, follow the Data Deletion Instructions, or email privacy@growcita.com. Requests are processed within 30 days.
Independent third party
Growcita is an independent third-party application built on the LinkedIn Marketing Developer Platform. We are not affiliated with, endorsed by, or sponsored by LinkedIn Corporation. “LinkedIn” is a registered trademark of LinkedIn Corporation.
Ready to connect?
Sign in to Growcita and connect your LinkedIn account in two clicks. You stay in control of which ad accounts and Company Pages the agents can touch.