Privacy Policy

📊 1. What Information We Collect and Why

To make ActiveConnect work effectively, we need to handle a few types of information:

a. Information You Provide Directly to the Extension:

• Search Queries & Filters: When you enter search terms (e.g., "Software Engineer"), location queries, or select filters (like connection degree, "Active Only," "Has Profile Picture," activity threshold), we use this to perform searches on LinkedIn on your behalf or to filter profiles you've already discovered. This is stored locally to remember your preferences and for display.
• Custom Connection Messages: If you write custom connection messages in the modal, these are used to send personalized connection requests via LinkedIn. Templates are stored locally as part of your settings.
• Account Credentials: If you create a ActiveConnect account or sign in, you provide your email and password. This information is securely sent to our authentication provider, Supabase, to create and manage your account. We do not store your raw password ourselves; Supabase handles this securely.
• Extension Settings: Preferences you set (like daily action limits, processing delays, connection message templates) are stored locally so the extension behaves as you've configured it.

b. Information Collected from LinkedIn (At Your Direction):

When you use ActiveConnect to discover or interact with LinkedIn profiles, the extension, acting on your behalf, accesses and processes information from LinkedIn pages. This can include:

• Profile URLs: Links to LinkedIn profiles.
• Public Profile Information: Names, headlines, locations, "About" sections, company names, profile picture URLs, follower/connection counts, mutual connections text, and details about their recent activity (like timestamps of posts).

This information is collected to display to you in the extension, add to your action queues (Connect/Follow), and help you manage your LinkedIn outreach. It's stored locally on your computer.

c. Information Related to Your Account & Subscription:

• Supabase User ID: A unique identifier for your ActiveConnect account.
• Plan & Subscription Status: Whether you're on a free or premium plan. If you subscribe to a premium plan, this is managed through Stripe, our payment processor. We receive confirmation of your subscription status from Supabase (which syncs with Stripe).
• Stripe Customer & Subscription IDs: These are identifiers used by Stripe and are associated with your account in Supabase to manage your subscription. ActiveConnect itself does not collect, store, or process your credit card details. All payment processing is handled directly and securely by Stripe when you are redirected to their checkout or customer portal pages.

d. Technical & Usage Information (Stored Locally):

• Activity Log: A log of actions performed by the extension (e.g., "profile scraped," "connection request sent," "error encountered"). This is stored locally for your reference and troubleshooting.
• Daily Action Statistics: Counts of connections and follows initiated through the extension for the current day, stored locally to help you track against your configured limits.
• Error Information: If something goes wrong, error messages might be logged locally or displayed to help diagnose issues.

🔧 2. How We Use Your Information

We use your information to:

• Provide and Operate ActiveConnect: Perform LinkedIn searches, scrape profile data (as you instruct), manage your connection/follow queues, and send messages using the data you provide.
• Personalize Your Experience: Remember your settings, search filters, and connection message templates.
• Manage Your Account: Authenticate you, manage your subscription (if any), and enable premium features.
• Display Information to You: Show you discovered profiles, activity logs, and queue statuses within the extension.
• Improve and Maintain the Extension: Understand how the extension is used (through anonymized error reporting, if implemented and consented to) and fix bugs.
• Communicate with You: Respond to support requests or inform you about important updates (very rarely, and only if you contact us or if there's a critical service update).

🤝 3. How We Share Your Information

We are very careful about who sees your information. We do not sell your personal information to third parties.

We may share information under these limited circumstances:

• With Supabase (Our Backend & Authentication Provider): Your email, hashed password (Supabase handles the hashing), user ID, full name (if you provide it), and subscription-related data (like plan type and Stripe IDs) are stored and managed by Supabase. This is essential for user accounts and subscription management.
• With Stripe (Our Payment Processor): If you choose to subscribe to a premium plan, you will be redirected to Stripe's secure website to enter your payment details. ActiveConnect does not see, handle, or store your credit card information. We only receive confirmation of your subscription status from Stripe (via Supabase).
• When You Direct Us To (LinkedIn): The core function of the extension involves interacting with LinkedIn on your behalf. For example, when you add someone to the connect queue with a message, the extension will attempt to send that message through your LinkedIn account.
• For Legal Reasons: If required by law, court order, or other valid legal process, we may disclose information. We will try to narrow such disclosures and inform you if legally permissible.
• To Protect Rights and Safety: If we believe it's necessary to prevent harm, fraud, or protect the safety of our users or the public.
• In Case of Business Transfer: If ActiveConnect is sold or merged, your information might be transferred as part of that deal, under the terms of this privacy policy.

🔒 4. Data Storage, Security, and Retention

• Local Storage: Most of the data ActiveConnect handles (scraped profiles, activity logs, your settings, UI preferences, Supabase authentication tokens) is stored directly on your computer using Chrome's secure local storage. This means it's under your control and as secure as your computer and Chrome browser.
• Supabase Storage: Your account information (email, hashed password, user ID, name, plan type, Stripe IDs) is stored securely on Supabase's servers.
• Stripe Storage: Your payment information is stored securely by Stripe if you make a purchase.
• Security Measures: We take reasonable technical and organizational measures to protect your information. However, no system is 100% secure, so we cannot guarantee absolute security. Your vigilance in protecting your LinkedIn and account credentials is also important.

Data Retention:

• Locally stored data (scraped profiles, activity logs) remains until you clear it using the extension's clear buttons or if you uninstall the extension.
• Your account data on Supabase is retained as long as your account is active. You can request account deletion (see section 5).

⚙️ 5. Your Data Rights and Choices

You have control over your information:

• Access and View: You can view the profiles you've scraped, your activity log, and your current settings directly within the ActiveConnect extension.
• Modify: You can change your search queries, filters, connection messages, and extension settings at any time.
• Delete Locally Stored Data: The extension provides buttons to clear stored profiles and activity logs from your local Chrome storage.
• Control Queues: You can add or remove profiles from the Connect and Follow queues.
• Disable or Uninstall: You can disable or uninstall ActiveConnect at any time through Chrome's extension management page. Uninstalling will remove all locally stored data.
• Account Deletion: If you wish to delete your account, please contact us at [email protected]. We will process your request to delete your account data from Supabase.
• Manage Subscription: If you have a premium subscription, you can manage it through the extension's account settings, which will redirect you to Stripe's customer portal.

📝 6. Changes to This Privacy Policy

We may update this privacy policy from time to time. If we make significant changes, we will endeavor to notify you (perhaps through an in-extension message or by updating the "Last Updated" date). We encourage you to review this policy periodically.