Privacy Policy

• Account details. Your username, email address and password (stored only as a salted hash). If you sign in with Google, we receive your Google account's name, email address and account identifier.
• What you ask us to draft. The details you enter for a message (for example a recipient's name, company and role, the job you are applying for, your background, or context for a follow-up), the tone you choose, and the draft that is generated. These are saved to your history so you can find and reuse them.
• Your display name (or username) is included in the request so the draft can be signed as you.
• Technical data. Our hosting providers keep standard server logs, such as IP address, time and requested URL, for security and troubleshooting. We use your IP address and account to enforce rate limits. We do not use analytics or advertising trackers.

When you open the extension on a LinkedIn profile, it reads the name, role and company shown on that page to pre-fill the form. This happens only when you open it, only on the page you are viewing, and nothing is sent anywhere until you click Generate. You can edit or clear the fields first. The extension does not read your messages, connections or browsing history, and it does not run in the background.

The extension stores its sign-in tokens in Chrome's local extension storage on your device. The web app stores its sign-in tokens in your browser's local storage and sets one cookie that only records that you are signed in.

Only to provide ConnectPilot: to sign you in, generate drafts, show your history, keep the service secure and enforce usage limits. We do not sell your data, use it for advertising, or share it with data brokers, and we do not use it to build profiles of the people you write to.

• Groq generates the drafts. The details of each request are sent to Groq's API for that purpose, under Groq's terms.
• Render hosts the API and Supabase hosts the database (both in Singapore).
• Vercel hosts the web app.
• Google handles Google sign-in if you choose it.

We share data with these providers only as needed to run the service.

Drafts stay in your history until you delete them, which you can do at any time from the History page. Your account and its data are kept until you ask us to delete them. To delete your account and everything associated with it, or to get a copy of your data, email paritoshkhubchandani2@gmail.com from the address on your account. Signing out of the web app or the extension revokes that session.

All traffic uses HTTPS. Passwords are hashed, sign-in tokens expire and are rotated, and access to each account's data is limited to that account.

ConnectPilot is not intended for anyone under 16.

If this policy changes, the new version will be posted here with a new date. Material changes will be highlighted in the app.

Questions or requests: paritoshkhubchandani2@gmail.com