Privacy Policy for LinkPilot AI

Last updated: July 30, 2026

1. Introduction

LinkPilot AI ("we", "our", or "us") is dedicated to protecting user privacy while providing AI-assisted writing, connection intro generation, and job match analysis for LinkedIn users. This Privacy Policy details how LinkPilot AI collects, uses, and safeguards user data.

2. Information We Collect and Process

LinkPilot AI is designed with privacy-first principles:

• LinkedIn Profile & Post Context: When you activate LinkPilot AI features on LinkedIn (e.g. generating post replies, drafting connection intros, or scoring job matches), the extension processes the visible text context of the specific post or profile you interact with.
• Local Settings: User preferences, prompt templates, and local session tokens are saved locally in your browser via Chrome's native chrome.storage.local API.
• No Unrelated Tracking: We do not track your browsing activity outside of LinkedIn, nor do we sell user data to third parties.

3. Permissions Used

LinkPilot AI requests the following Chrome permissions solely to deliver its core assistant functions:

• activeTab & scripting: Allows the extension to interact with LinkedIn page elements to insert AI writing controls and draft responses.
• sidePanel: Provides a dedicated side panel interface for interactive AI drafting, job match analysis, and template management.
• storage: Used to save user preferences, custom prompt templates, and session data locally.
• contextMenus: Adds right-click options on LinkedIn to quickly send text to LinkPilot AI.
• host_permissions (https://www.linkedin.com/*, https://*.supabase.co/*): Required to operate on LinkedIn pages and connect to our backend Supabase database / AI processing endpoints securely.

4. Data Sharing and Third Parties

We do not sell, trade, or rent user data. Data processed during AI generation is sent securely over HTTPS to our backend AI API for processing and is not shared with unauthorized third parties.

5. Security

All communication with backend services occurs exclusively over encrypted HTTPS connections using industry-standard SSL/TLS protocols.