Privacy Policy

Last updated: 24 May 2026

LinkedIn Co-Pilot is a Chrome extension that helps you draft LinkedIn comments, with a website for installation and product updates. This document explains, in plain language, what the extension and website do with your data.

TL;DR

What we collect

The Chrome extension does not send your settings, API keys, voice profile, topic lists, post history, or drafted comments to us.

The website can collect your email address only if you submit the Pro waitlist form and agree to receive product updates. We store that email address with a timestamp and a simple page-source label such as pricing or final_cta. We do not sell waitlist emails.

What is stored locally on your device

The extension uses the standard chrome.storage API. Two storage areas are used:

Storage areaContentsSynced across devices?
chrome.storage.local Your AI provider API keys, your voice profile, recently shown posts, daily comment counter No — local to this browser only
chrome.storage.sync Your settings (selected provider, model, topic lists, filter preferences, daily cap) Yes — if you have Chrome sync enabled, these settings sync to your Google account

You can see exactly what is stored at any time via Settings → Export my data. You can delete it all via Settings → Delete everything.

What is stored by the website waitlist

If you join the Pro waitlist, the website sends your email address and consent choice to a Cloudflare Worker and stores the email in a Cloudflare KV namespace controlled by this project. This is used only for LinkedIn Co-Pilot launch, pricing, and product updates.

To request removal from the waitlist, email info@linkedincopilot.app from the subscribed address.

What is sent over the network, and to whom

The extension makes only two kinds of network requests:

  1. To linkedin.com — when you ask the extension to scrape posts or capture your voice. These requests are made by the content script in your browser, just as your normal browser tab does. No data is sent to us.
  2. To your chosen AI provider's API endpoint — one of:
    • Google Gemini at generativelanguage.googleapis.com
    • OpenAI at api.openai.com
    • Anthropic at api.anthropic.com
    • OpenRouter at openrouter.ai
    The extension sends your voice profile (as part of the system prompt) and the text of the post(s) being commented on, authenticated with your API key. Each provider's privacy and data-use policies apply to those requests.

The website also makes a same-origin request to /api/waitlist when you submit the Pro waitlist form.

Permissions used, and why

The extension requests the following Chrome permissions:

PermissionWhy
storageSave your settings, API keys, and voice profile in your browser.
sidePanelOpen the Co-Pilot UI in a side panel.
tabsFind your existing LinkedIn tab when you click "Run".
scriptingRe-inject the content script if it isn't already present on a LinkedIn page.
activeTabRead the post you're currently viewing when you click "Comment on visible post".
host_permissions: linkedin.comRead post content on LinkedIn pages so the AI has something to comment on.
host_permissions for AI providersSend draft requests to your chosen provider's API.

The extension does not request access to any other website or any system resource.

What the extension does NOT do

Children

The extension is not intended for children under 13.

Changes to this policy

If we ever change what the extension or website does with your data, this policy will be updated. Material extension-data changes will also be reflected in the extension changelog and version.

Contact

For questions about this policy, email info@linkedincopilot.app.