Privacy Policy

One-line summary

linkedn’t reads the text of LinkedIn posts you choose to rewrite, sends it to a language model to produce a translated version, and shows that version back to you. The original post text is hashed but never stored as plaintext. We do not sell your data to anyone.

What we collect

If you use Bring Your Own Key (BYOK)

• Your API keyfor the provider you chose (Groq, OpenAI, Anthropic, Google Gemini, OpenRouter, or a custom OpenAI-compatible endpoint). Stored only in your browser’s local storage viachrome.storage.local. Never sent to our servers.
• The text of the LinkedIn posts you rewrite is sent directly from your browser to the provider you chose. We do not see it.
• No account is required. Nothing is stored on our backend at all.

If you use credits (the proxy path)

• Your Google account email, obtained through Google OAuth via Supabase Auth. Stored in our database to identify your account and grant you credits.
• An OAuth session token stored inchrome.storage.local in your browser, used as the Authorization header when our backend rewrites a post for you.
• The text of the LinkedIn posts you rewrite is sent from your browser to our /rewrite edge function on Supabase. The plaintext is used only to call the language model and is then discarded. A SHA-256 hash of the text is kept so a future request for the same post can return a cached rewrite without re-billing the model.
• A usage log entry per rewrite with: your user id, the mode you picked (TL;DR / Touch Grass / The Group Chat), the model used, response latency, the input hash, and the credit cost. No plaintext.
• Payment data(card number, billing address) is handled entirely by Polar (polar.sh) when you buy credits. We never see it. Polar sends us a webhook saying “user X bought N credits”, nothing more.

What we never collect

• Your LinkedIn feed at large. The extension only sends the specific post text you clicked rewrite on.
• Your browsing history. The extension runs only on linkedin.com.
• Your keystrokes, mouse position, screen recordings, or any other behavioural telemetry.
• LinkedIn cookies, your LinkedIn session, or your DMs.
• Health information, location data, or financial information beyond what Polar handles for payment.

Who we share data with

• BYOK path: the provider you chose. They have their own privacy policies — refer to Groq, OpenAI, Anthropic, Google, or OpenRouter.
• Proxy path:Groq and OpenRouter (depending on which mode you pick). The post text is sent to the relevant API to produce the rewrite. No data sent beyond what’s needed for that single request.
• Supabase hosts our database and edge functions. Your email, OAuth session, and usage log live in their managed Postgres.
• Polar handles payments. Their privacy policy is at polar.sh/legal/privacy.
• Cloudflare serves linkednt.com (this website) and routes requests. They see standard request metadata (IP, user-agent) for routing and DDoS protection.

We do not sell or transfer your data to any third party for advertising, profiling, training models we don’t control, or any purpose unrelated to delivering the rewrite you asked for.

How long we keep it

• Cached rewritesare kept indefinitely so repeat requests for the same post don’t re-bill the model. Keyed by hash, not plaintext.
• Usage logs are kept for one year, then deleted.
• Your user row (email, credit balance) persists until you ask us to delete it.
• OAuth session tokensexpire on their own within an hour and refresh automatically while you’re signed in.

Your rights

You can delete your account and all associated data at any time. Email us at [email protected]from the address you signed in with and we’ll erase everything within 30 days. You can also clear all locally-stored data by uninstalling the extension — that wipes the BYOK key, OAuth session, and cached account info from your browser.

Cookies and tracking

The linkednt.com website uses no analytics, no advertising cookies, and no tracking pixels. The extension does not set cookies. The only persistent local data it uses ischrome.storage.local for your settings and OAuth session.

Children

linkedn’t is not directed at people under 13. We do not knowingly collect data from children. If you believe a minor has signed up, email us and we’ll delete the account.

Changes to this policy

We’ll bump the “Last updated” date at the top of this page whenever we change anything material. Significant changes (new data collected, new third parties) will be announced in the extension popup before they take effect.

Contact

Questions, data requests, or complaints: [email protected].