Legal
Privacy Policy
Last updated: July 14, 2026
How LeadPilot AI — Your AI assistant for LinkedIn growth — collects, uses, and protects your data when you use our dashboard and Chrome extension.
Overview
LeadPilot AI ("we", "us") is a manual-first LinkedIn growth assistant. This policy explains what data we process when you use our web dashboard and Chrome extension.
What we collect
- Account data — email, name, and authentication tokens via Supabase Auth when you sign up or log in.
- Workspace data — leads, notes, follow-ups, voice profile, ICP, AI generation history, and usage events you create in the product.
- LinkedIn context you choose to send — when you click generate or save, the extension sends only the visible page text/fields needed for that action (e.g. post text, profile fields you preview). We do not scrape LinkedIn in the background.
- Technical logs — standard server logs (IP, timestamps, error messages) for security and reliability.
How we use data
- Provide AI drafts (comments, DMs, connection messages, posts) you request.
- Store and display your leads, follow-ups, and settings in the dashboard.
- Enforce plan limits and improve product reliability.
We do not automatically post, send messages, or connect on LinkedIn on your behalf.
Chrome extension permissions
The extension requests access to LinkedIn pages to inject UI (buttons and panels) and read visible content only when you trigger an action. It stores your session and settings in Chrome storage. API calls go to our backend — API keys for AI providers never ship inside the extension.
Third-party processors
- Supabase — authentication and database hosting.
- NVIDIA NIM (or configured AI provider) — processes prompts you submit to generate text. Do not include secrets you do not want sent to the model provider.
- Freemius — processes paid plan checkout and subscription billing when you upgrade.
Retention & deletion
We retain account and workspace data while your account is active. You may request deletion of your account and associated data by contacting us. Backups may persist for a limited period after deletion.
Security
We use HTTPS, authenticated API routes, and row-level security on workspace data. No method of transmission or storage is 100% secure; please use a strong password and keep your extension updated.
Children
LeadPilot AI is not directed at children under 16. We do not knowingly collect data from children.
Changes
We may update this policy. Material changes will be reflected by the "Last updated" date on this page.
Contact
Questions about privacy: visit Support or email hello@tomnitive.com.