pinqiopinqio

Legal

Chrome Extension Privacy Disclosure

Effective 2026-04-22

This disclosure describes what the Pinqio Chrome Extension does, what data it handles, and how it complies with the Chrome Web Store Developer Program Policies. It supplements the general Pinqio Privacy Policy.

1. What the extension does

The Pinqio extension runs only on linkedin.com. When you open a LinkedIn DM conversation in your browser, the extension:

  • Reads the visible conversation's contact name, role, company, profile URL, and message thread from the rendered LinkedIn page.
  • Sends that content to your Pinqio account at https://pinqio.com over HTTPS so it appears in your Pinqio inbox and pipeline.
  • Lets you trigger Pinqio's AI features (reply drafter, summarizer) from an in-page overlay. AI calls are routed through the Pinqio server — the extension never calls LLM providers directly.

The extension never sends messages on your behalf, never clicks buttons on LinkedIn for you, and never accesses LinkedIn functionality outside the currently-open conversation.

2. Host permissions

  • *://*.linkedin.com/* — required to read the conversation DOM in the current tab.
  • *://*.pinqio.com/* — required to send captured conversation data to your Pinqio account.

The extension requests no permissions for any other domain.

3. Chrome API permissions we request

  • activeTab — read the currently-active tab only. Not used to track other tabs.
  • storage — remember your Pinqio session locally so you don't re-sign in every time you open LinkedIn.

We do not request: tabs, webRequest, webNavigation, history, bookmarks, cookies, downloads, management, proxy, or any host permission beyond the two above.

4. Data the extension reads

  • Name, role, company, public profile URL, and avatar of the LinkedIn contact whose conversation you have open.
  • Message text (what you sent, what they sent), timestamps, and attachments visible in the currently-open conversation.

The extension does not read:

  • Other conversations you haven't opened with the Pinqio overlay visible.
  • Your LinkedIn password or credentials.
  • Your LinkedIn connections graph or notifications feed.
  • Any content outside the DM conversation pane.
  • Any content on non-linkedin.com tabs.

5. Data the extension transmits

Only the data listed in section 4 is transmitted, over HTTPS, to https://pinqio.com/api/conversations/*. Transmission is authenticated via your Pinqio session cookie. No third-party servers (ad networks, analytics vendors) receive any data.

6. Data the extension stores locally

  • Your Pinqio session token (httpOnly cookie from pinqio.com, not readable by the extension itself).
  • UI preferences (overlay position, collapse state) in chrome.storage.local. Never transmitted.

The extension stores no message content locally.

7. Chrome Web Store Limited Use certification

Pinqio certifies that its use of data obtained through the Chrome Extension complies with Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

  • We use extension-captured data only to provide the Pinqio product to the user who captured it.
  • We do not transfer that data to third parties for advertising.
  • We do not use that data to determine creditworthiness or for lending purposes.
  • We do not allow humans to read that data except (a) with the user's explicit consent, (b) for security investigations under legal process, (c) if the data is aggregated and used for internal operations in accordance with applicable laws.
  • We do not use the data to train LLMs or other ML systems outside of per-user personalization, and providers we route to (Anthropic, OpenAI, Google) are configured with "no training" where that option is offered.

8. Extension security

  • Content scripts run in an isolated world and cannot read sibling tabs.
  • No remote code is loaded at runtime (CSP allows self only).
  • We follow Manifest V3 best practices — no persistent background pages, no broad host permissions beyond those declared.

9. Revoking consent

Uninstall the Pinqio extension from chrome://extensions to stop any data capture. Your server-side Pinqio account and historical data remain until you delete your account at Settings → Delete account (or email privacy@pinqio.com).

10. Contact

Chrome-specific questions: chrome@pinqio.com. Privacy: privacy@pinqio.com.