Privacy Policy
This is an unofficial third-party Chrome extension. It is not affiliated with, endorsed by, or sponsored by LinkedIn or Microsoft.
Who we are
LinkedIn Comment Assistant (“the extension”) runs entirely in your browser. This version has no vendor backend, account system, or analytics service. The developer of this extension does not operate a server that receives your LinkedIn content or API key.
Data we store on your device
- OpenAI API key — stored only in Chrome local storage on this device. It is encrypted at rest with AES-GCM using a device-local wrapping key. The plaintext key is not written to storage after encryption or migration.
- Custom prompts — optional per-tone instructions you type in the popup. Stored only in Chrome local storage on this device.
These values are not synced to a developer server. They stay in chrome.storage.local until you delete them.
Data sent to OpenAI
When you generate a comment or reply, the extension sends a request over HTTPS to https://api.openai.com only. That request includes:
- the current post text extracted from the page
- author names when needed for reply context
- relevant thread comments when you generate a reply
- the selected tone and any custom prompt you saved for that tone
- your OpenAI API key in the Authorization header (sent only to OpenAI)
Nothing in this version is sent to any other vendor, tracker, or analytics endpoint. OpenAI processes the request under its own terms and privacy policy. This extension does not use your content to train models on a developer backend, because there is no such backend.
Permissions
storage— to save your encrypted API key and custom prompts locally.- Host access to
linkedin.com— to inject the comment helper on LinkedIn pages you visit. - Host access to
api.openai.com— to call OpenAI from the extension service worker.
Encryption and transit
Your API key is encrypted at rest with AES-GCM on this device. Requests to OpenAI use HTTPS in transit. The wrapping key never leaves the browser profile on this machine.
How to delete your data
- Remove the extension in
chrome://extensions— Chrome deletes the extension’s local storage. - Or clear the extension’s storage via Chrome’s site/extension data controls.
After removal, this extension retains no copy of your key, prompts, or LinkedIn text, because it never uploaded them to a developer server.
Chrome Web Store User Data Policy — Limited Use
This extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements:
- User data is used only to provide the extension’s single purpose: drafting a comment or reply for you to review and post.
- We do not sell user data.
- We do not use user data for advertising, creditworthiness, or unrelated product training.
- We do not transfer user data to a third party except OpenAI, and only when you click generate, as required to perform that request.
- The developer does not human-review your posts or keys; this version has no operator dashboard.
Children
The extension is intended for professionals using LinkedIn. It is not directed at children.
Changes
If a later version adds a backend, analytics, or additional sharing, this policy will be updated before that change ships.