We NEVER sell or rent your personal data.
This commitment is legally binding under this Privacy Policy and our Terms of Service.
LinkAssist's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not use user data for any purposes other than providing and improving the core functionality of the LinkAssist extension and SaaS platform.
LinkAssist.ai is an AI-powered SaaS platform and Chrome Extension that helps professionals create compelling LinkedIn content. We are committed to protecting your privacy and handling your personal data with care and transparency.
Company Name
LinkAssist
Location
Uttar Pradesh, India
Contact Email
Website
To provide our AI-powered features within the browser, the LinkAssist Chrome Extension utilizes specific permissions:
Used to locally cache your authentication tokens and preferences.
Used to analyze post content only when you trigger the AI assistant and to insert generated replies directly into the comment box.
We capture post text and media only when you explicitly use the "Save to Swipe File" feature.
Note: We do not monitor your private browsing history or collect data from websites other than LinkedIn and our authorized service domains.
Plain-English Summary: This section lists every piece of data LinkAssist collects, why we need it, and where it comes from. We collect only what's necessary to provide AI-powered LinkedIn features.
| Category | What We Collect | Source | Legal Basis (GDPR) |
|---|---|---|---|
| Account Data | Name, email, password (hashed), phone number | You (signup form) | Contract (Art. 6(1)(b)) |
| LinkedIn Profile | Name, headline, profile picture, URL, public ID | LinkedIn OAuth API | Contract + Consent |
| Professional Details | Position, company, work experience, education | LinkedIn OAuth API | Contract + Consent |
| LinkedIn Analytics | Follower count, connections, profile views, impressions | LinkedIn API | Legitimate Interest (Art. 6(1)(f)) |
| Your LinkedIn Posts | Text, media URLs, timestamps, engagement (up to 100 posts) | LinkedIn API (with consent) | Consent (Art. 6(1)(a)) |
| Content You Create | AI posts, comments, saved posts, scheduled content | You (dashboard/extension) | Contract |
| Billing Data | Billing name, address, GST number, payment method | You + Razorpay | Contract + Legal Obligation |
| Usage Data | Feature usage, button clicks, session duration, errors | Extension + dashboard | Legitimate Interest |
| Technical Data | IP address, browser type, OS, device ID, access times | Automatic (server logs) | Legitimate Interest |
Providing AI-powered LinkedIn content generation and intelligent comment suggestions
Training your personal AI voice model based on your historical posts
Creating and managing your account, processing payments
Sending service updates, support responses, and important notifications
Your data does NOT train AI models for other users.
We will notify you 30 days before adding any new sub-processor that will process your personal or production data.
How we notify: Email to your registered account, dashboard banner notification, and updated sub-processor list on this page.
We share your data with the following third parties ONLY to provide our core services:
| Vendor | Purpose | Location | Certifications |
|---|---|---|---|
| OpenAI | AI content generation | United States | SOC 2, ISO 27001 |
| Google Gemini | AI fallback generation | United States | SOC 2, ISO 27001 |
| Razorpay | Payment processing | India | PCI-DSS Level 1 |
| MongoDB Atlas | Database storage | India (AWS Mumbai) | SOC 2, ISO 27001 |
| Vercel | Application hosting | India (AWS Mumbai) | SOC 2, ISO 27001 |
| Cloudinary | Media storage & CDN | India (AWS Mumbai) | SOC 2, ISO 27001 |
| Pinecone | Vector database (AI style) | United States (AWS) | SOC 2, ISO 27001 |
MongoDB Atlas
AWS Mumbai, India (ap-south-1)
Cloudinary
AWS Mumbai, India
OpenAI/Google
United States (temp, 30-day deletion)
Pinecone
AWS us-west-2, United States
AES-256-GCM at rest, TLS 1.2+ in transit
Role-based access, JWT tokens, least privilege principle
24/7 error tracking via Sentry, rate limiting via Redis
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Active Account Data | While account is active | N/A |
| LinkedIn Posts (for AI) | While account is active | Deleted on account deletion |
| Deleted Account Data | 30-day grace period | Permanent deletion after 30 days |
| Subscription & Invoices | 7 years after transaction | Required by Indian tax law |
| Server Logs | 90 days | Automated rotation |
| Encrypted Backups | 90 days | Overwritten with new backups |
| AI API Logs (OpenAI/Gemini) | 30 days | Deleted by provider automatically |
| Tool | Cookie Name | Purpose | Lifetime | Type |
|---|---|---|---|---|
| NextAuth.js | next-auth.session-token | Maintains login session | 30 days | Essential |
| NextAuth.js | __Host-next-auth.csrf-token | Prevents CSRF attacks | Session | Essential |
| Extension | linkassist_extension_token | Extension authentication | 12 hours | Essential |
| Google Analytics | _ga, _gid, _gat | Website analytics | 2 years / 24h / 1min | Analytics |
| Cloudflare | cf_clearance | Bot detection & DDoS | 12 months | Security |
Note: We do NOT use advertising cookies or third-party tracking pixels (no Facebook Pixel, Google Ads, etc.).
Request a copy of all personal data we hold about you
Update inaccurate or incomplete information
Request permanent deletion of your data
Request your data in JSON format
Email [email protected] with:
Response time: Within 30 days
No. We NEVER sell, rent, or share your personal data with advertisers, data brokers, or third parties except as disclosed in Section 5 (service providers only).
No. Your LinkedIn posts are analyzed ONLY to match your writing style for YOUR AI content generation. We do NOT train models for other users with your data.
Primary storage: MongoDB Atlas (AWS Mumbai, India)
Media files: Cloudinary (AWS Mumbai, India)
AI processing: OpenAI/Google (United States, deleted after 30 days)
Vector embeddings: Pinecone (AWS us-west-2, United States)
Yes. Enable "Offline Mode" in the extension Options page. This stores all data locally on your device only and disables cloud sync/AI features.
30-day grace period for recovery, then permanent deletion from all systems (MongoDB, Cloudinary, Pinecone). Encrypted backups overwritten within 90 days. Invoices retained for 7 years (Indian tax law).
Not yet. LinkAssist is a startup. However, our infrastructure providers (MongoDB Atlas, Vercel, Cloudinary) are SOC 2 and ISO 27001 certified. We follow industry best practices for security. SOC 2 certification is on our roadmap for 2026.
LinkAssist is NOT intended for users under 18 years of age.
By continuing to use LinkAssist after changes, you accept the new policy. If you disagree with changes, you may delete your account.
Email with request type in subject line
Response time: Within 30 days per DPDP Act 2023
Acknowledgment: By using LinkAssist, you acknowledge that you have read, understood, and agree to this Privacy Policy.
Version 2.0 (Chrome Web Store Compliant) • Last Updated: January 5, 2026