Privacy Policy

• Account details. Your username, email address and password (stored only as a salted hash). If you sign in with Google, we receive your Google account's name, email address and account identifier. If you sign in with LinkedIn, we receive your LinkedIn name, email address, profile photo link and account identifier, and nothing else from your LinkedIn account.
• Your profile, if you fill it in. Headline, summary, skills, the roles you are looking for, experience highlights and a writing sample. You type or paste these, fill them from a resume you upload, or import them with the extension from your own LinkedIn profile page when you choose to. An uploaded resume is sent to our AI provider only to suggest these fields and is not stored; we keep only the fields you save. Your profile is used only to personalise your drafts and is visible only to you.
• What you ask us to draft. The details you enter for a message (for example a recipient's name, company and role, the job you are applying for, your background, or context for a follow-up), the tone you choose, and the drafts that are generated (including rewrites you ask for). These are saved to your history so you can find and reuse them.
• Your outreach tracker. For each person you draft a message to: their name, company, role and (from the extension) LinkedIn profile URL, whether you sent it and when, whether they replied (the extension notes this when you open a conversation where they wrote last; the messages themselves are not stored), when to follow up, and any notes you add. Delete a person from the tracker to remove this.
• Your display name (or username) is included in the request so the draft can be signed as you.
• Technical data. Our hosting providers keep standard server logs, such as IP address, time and requested URL, for security and troubleshooting. We use your IP address and account to enforce rate limits. We do not use analytics or advertising trackers.

When you open the extension on a LinkedIn profile, it reads the visible name, role and company, and the About, experience and education sections shown on that page. On a LinkedIn job posting it reads the job title, company and description, and keeps that job in the extension on your device for up to 24 hours if you choose to use it for a referral request. This happens only when you open the extension, only on the page you are viewing, and the extension shows you what it read. With auto-draft on (the default), opening the extension on a page with enough details sends them to write drafts right away; turn auto-draft off in the extension to send nothing until you click Generate, and clear the page details first if you want. Drafts are kept in the extension until you close Chrome (at most 24 hours) so reopening it does not generate them again.

The About, experience, education and job description text is sent to our AI provider only to write that draft and is not stored; your history keeps only the name, role, company and job title. The extension does not read your connections or browsing history, and it does not run in the background.

When you open the extension on a LinkedIn conversation, it reads the last messages of that one conversation you have open (up to about 4,000 characters: who wrote each message, when, and the text) so it can draft your reply or follow-up. These messages are sent to our AI provider only to write that draft and are not stored. The extension never reads other conversations or your inbox.

On your own LinkedIn profile, the extension can import your headline, About, experience, education and skills into your ConnectPilot profile. It shows you what it will save and saves only when you confirm.

If you click Insert, the extension types the draft into the LinkedIn message box you have open. It never presses Send or clicks anything else; you review and send the message yourself.

The extension stores its sign-in tokens in Chrome's local extension storage on your device. The web app stores its sign-in tokens in your browser's local storage and sets one cookie that only records that you are signed in.

Only to provide ConnectPilot: to sign you in, generate drafts, show your history, keep the service secure and enforce usage limits. We do not sell your data, use it for advertising, or share it with data brokers, and we do not use it to build profiles of the people you write to.

• Groq generates the drafts. The details of each request are sent to Groq's API for that purpose, under Groq's terms.
• Render hosts the API and Supabase hosts the database (both in Singapore).
• Vercel hosts the web app.
• Google handles Google sign-in if you choose it.

We share data with these providers only as needed to run the service.

Drafts stay in your history until you delete them, which you can do at any time from the History page. Your account and its data are kept until you ask us to delete them. To delete your account and everything associated with it, or to get a copy of your data, email paritoshkhubchandani2@gmail.com from the address on your account. Signing out of the web app or the extension revokes that session.

All traffic uses HTTPS. Passwords are hashed, sign-in tokens expire and are rotated, and access to each account's data is limited to that account.

ConnectPilot is not intended for anyone under 16.

If this policy changes, the new version will be posted here with a new date. Material changes will be highlighted in the app.

Questions or requests: paritoshkhubchandani2@gmail.com