Privacy Policy

1. About this notice

Morango LLC, operating as LinkedAsk ("LinkedAsk", "we", "us"), is the data controller for personal data processed through the linkedask.me website, the LinkedAsk Chrome extension, and our customer relationships. LinkedAsk is a personal productivity tool that helps you organize and track your own LinkedIn activity. This notice explains what data we collect, why, who we share it with, and the rights you have. For any question about this notice, contact us at contact@linkedask.me.

2. What personal data we collect and why

• Account data — your email address and authentication identifiers, provided when you sign up. Used to create and secure your account. Legal basis: performance of a contract.
• LinkedIn activity data — captured by the Chrome extension as described in section 2.1. Used solely to provide your personal dashboard, charts, and chat over your own data. Legal basis: performance of a contract.
• Payment data — handled by our payment processor; we never receive or store your card number. We keep records of your subscription status and invoices. Legal basis: performance of a contract; legal obligation.
• Product usage analytics — events such as sign-ups, page views, and feature usage, used to understand and improve the product. Legal basis: legitimate interest.
• Diagnostic records — technical health signals from the extension (counts, timestamps, and status codes only — never the content of what was captured), used to detect when data collection breaks. Legal basis: legitimate interest.

2.1 The LinkedAsk Chrome extension

The extension works only on linkedin.com and linkedask.me. As you browse LinkedIn, it reads the pages you open and the responses LinkedIn's own website loads for those pages, and records:

• Profile visits — names, headlines, and timestamps of profiles you view
• Post reactions — posts you react to, and the post author
• Connections and invites — your connections list and connection requests you send
• Messaging — conversation metadata (participant names, direction, timestamps) and the first 50 characters of a message body, never full message content
• Followers, post analytics, and profile viewer lists that LinkedIn shows you
• Leads — profiles you choose to track, including name, headline, company, and location

Captured data is transmitted only to linkedask.me over HTTPS. The extension checks whether a LinkedIn session cookie exists to know you are signed in, but never reads, stores, or transmits its value. It does not collect your browsing history or keystrokes, and collects nothing from any other website.

2.2 Data about other LinkedIn members

The activity data above naturally includes information about the LinkedIn members you interact with (for example, the name and headline of a profile you visited). This data is collected on your behalf and shown only to you, in your own dashboard. We do not pool it across users, do not use it to contact those members, and do not sell or share it. It is deleted together with your account.

3. Who we share your personal data with

We share personal data only with the service providers that operate LinkedAsk, and only to the extent needed to run it:

• Google Cloud — application hosting and database (EU region, Netherlands). AI features such as chat and analytics are processed within our Google Cloud infrastructure using Vertex AI; AI inputs are not used to train models.
• Firebase Authentication (Google) — sign-in and account security.
• Stripe — payment processing.
• PostHog — product usage analytics, hosted in the EU.

We may also disclose data where required by law, to enforce our terms, or, with your consent, to others you direct. Your data is never sold, never shared with advertising platforms or data brokers, and never used for personalized advertising.

The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

4. How we protect your data

• All data is encrypted in transit (HTTPS/TLS) and at rest.
• Data is isolated per user with database Row Level Security — no user can access another user's data.
• Data minimization by design: message bodies are capped at 50 characters, diagnostic records carry counts only, and the extension never collects LinkedIn credentials.
• No data is stored on your device beyond temporary session tokens and local settings.

5. Data storage, retention and deletion

Your activity data is kept for as long as your account exists. Deleting your account permanently removes all stored activity data, leads, and charts; you can request deletion at any time at the email below. Diagnostic records are kept for at most 90 days. Billing records are retained as long as required by accounting law.

6. International transfers

Our primary infrastructure and analytics are hosted in the European Union. Some providers (Google, Stripe) may process limited data in the United States; such transfers are covered by the EU–US Data Privacy Framework and/or European Commission Standard Contractual Clauses.

7. Your rights

Subject to applicable law (including the GDPR), you have the right to access, correct, delete, and export your personal data, to restrict or object to its processing, and to withdraw any consent. To exercise these rights, email contact@linkedask.me. You also have the right to lodge a complaint with your local data protection authority.

8. Links to other websites

LinkedAsk links to third-party websites (including LinkedIn itself). Their privacy practices are governed by their own policies, which we encourage you to read.

9. Updates to this notice

We may update this notice as the product evolves. Material changes will be reflected in the "Last updated" date above, and where the law requires it, we will ask for your consent.