Privacy Policy

1. What This Policy Covers

This policy covers information processed by Commently to provide the Service. It does not cover LinkedIn’s own practices. LinkedIn and other third parties have their own privacy policies and terms, and you are responsible for reviewing them.

2. Information We Collect

We collect only the information needed to operate the Service, improve reliability, and keep the Service secure.

• Account and authentication data: identifiers required to sign in and keep you authenticated (for example, session tokens).
• Technical data: basic device/app signals and diagnostics needed for debugging, abuse prevention, and performance (for example, timestamps, error codes).
• LinkedIn connection data (limited): to enable automation features, the extension may request access to LinkedIn pages you visit and may request certain session cookies. Where we store such cookies on our systems, they are stored encrypted at the application layer and are not stored in plaintext.
• Content you provide: prompts, drafts, and inputs you submit to generate comments or configure the Service.

3. Information We Do Not Collect

• We do not store your LinkedIn password.
• We do not intentionally collect or store private LinkedIn personal messages.
• We do not build user profiles from LinkedIn personal data, and we do not sell personal information.
• If you choose to use a custom Gemini API key, we do not store that key in our database. It is stored in browser-level storage on your device.

4. How We Use Information

We use information to:

• Provide the core functionality of the Service (authentication, settings, and feature delivery).
• Enable LinkedIn-related automation features you explicitly use.
• Maintain security, prevent abuse, and protect users and the platform.
• Monitor reliability and fix bugs (for example, troubleshooting errors).

5. AI Features and Third‑Party Processing

Commently may use third‑party AI providers to generate suggestions. When you use AI features, certain text you submit (such as a prompt and relevant context you provide) may be sent to an AI provider to generate a response. You control what you submit, and you are responsible for reviewing outputs before posting.

If you configure your own Gemini API key, the key remains stored on your device and is used from your browser environment to access the AI provider.

6. Data Storage, Security, and Access Controls

• We apply reasonable administrative, technical, and organizational safeguards to protect information.
• Where cookies/tokens must be stored server-side for functionality, we store them encrypted at the application layer and limit access on a need-to-know basis.
• We design our APIs to be protected and to enforce authentication/authorization for sensitive routes.
• We avoid logging sensitive data and do not intentionally expose or examine user activity beyond what is required to deliver and secure the Service.

7. Sharing of Information

We share information only as needed to operate the Service:

• With vendors and service providers who help us run the Service (subject to confidentiality).
• With AI providers when you invoke AI features, as described above.
• If required by law, regulation, legal process, or to protect the rights, safety, and security of users and the Service.

8. Data Retention

We retain information for as long as necessary to provide the Service and comply with legal obligations. We may delete or anonymize data when it is no longer needed for these purposes.

9. Your Choices and Controls

• You can stop using the Service at any time and uninstall the extension to remove local data.
• You can choose not to use AI features or avoid submitting specific content to AI features.
• If you use a custom Gemini API key, you can remove it by clearing your browser/extension storage.

10. GDPR

We aim to comply with applicable GDPR requirements and privacy-by-design principles. We are not currently certified under any formal GDPR certification scheme.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted at this URL, and the “Last updated” date will be revised accordingly.

12. Contact

If you have questions or requests about privacy, contact us via our website at https://commently.in.