Privacy Policy

Effective Date: August 8, 2025
Last Updated: August 8, 2025
Version: 1.0

1. Introduction

This Privacy Policy describes how Linked Apply Bot ("we," "our," or "us") collects, uses, stores, and protects your personal information when you use our Chrome extension and related services. By using our service, you consent to the data practices described in this policy.

Important Legal Notice: This service is not affiliated with, endorsed by, or sponsored by LinkedIn Corporation. We are an independent third-party service that accesses LinkedIn's platform through your browser session. Use of this service is at your own risk and may violate LinkedIn's Terms of Service.

2. Information We Collect

2.1 LinkedIn Authentication Data

Session Cookies: We access LinkedIn session cookies (including li_at (LinkedIn authentication token), JSESSIONID (session identifier), and other authentication tokens) locally on your device to authenticate your LinkedIn account and enable automated job applications. These cookies are never transmitted to our servers.

CSRF Tokens: We access Cross-Site Request Forgery tokens locally on your device for secure communication with LinkedIn's platform. These tokens are never transmitted to our servers.

User Profile Data: We collect your LinkedIn profile information including first and last name, professional occupation, LinkedIn public identifier (your LinkedIn profile URL), member ID and tracking ID, and entity URN (LinkedIn's internal user identifier).

2.2 Personal Contact Information

Email Address: Your email address for job applications and communication

Phone Number: Your phone number including country prefix and national number

Location Data: Your country and city information for job matching

2.3 Resume and Application Data

Resume Content: Your resume text content and PDF files

Resume Metadata: File names, upload locations, and file sizes

Job Application History: Records of jobs you've applied to, including job IDs, application status, and timestamps

2.4 Technical Data

Extension Configuration: Your preferences, filters, and settings

Usage Analytics: Information about how you use the extension (for service improvement)

Error Logs: Technical information for debugging and support

3. How We Use Your Information

3.1 Primary Service Functions

Automated Job Applications: Using your profile data and resume to apply to jobs on your behalf

Job Matching: Matching your preferences with available job opportunities

Account Management: Managing your subscription and service access

3.2 Service Improvement

Analytics: Analyzing usage patterns to improve our service

Bug Fixes: Using error logs to identify and resolve technical issues

Feature Development: Understanding user needs to develop new features

3.3 Communication

Service Updates: Notifying you about important service changes

Support: Responding to your questions and providing technical support

Legal Compliance: Complying with legal obligations and responding to legal requests

4. Data Storage and Security

4.1 Storage Locations

AWS DynamoDB: User configurations and profile data stored in the United States

AWS S3: Resume files and application data stored in the United States

Local Storage: Some data cached locally in your browser extension

User's Computer: Critical authentication data (LinkedIn session cookies, CSRF tokens) remain on your local device and are never transmitted to our servers

4.2 Security Measures

Encryption: All data transmitted and stored using industry-standard encryption (AES-256)

Access Controls: Strict access controls limiting who can access your data

Regular Audits: Regular security audits and vulnerability assessments

Data Minimization: We only collect data necessary for service functionality

File Security: All uploaded files (including resumes) are stored securely in AWS S3 with access controls

Vulnerability Protection: Regular security updates and patches to prevent data breaches

5.1 LinkedIn Integration

We share your data with LinkedIn only as necessary to authenticate your account, submit job applications on your behalf, and retrieve job listings and details.

Third-Party Terms Compliance: By using our service, you acknowledge that you are responsible for complying with LinkedIn's Terms of Service and any other third-party platform terms.

5.2 Service Providers

We may share data with trusted service providers who help us host and maintain our infrastructure (AWS), process payments (Stripe), provide customer support, and analyze service usage.

All service providers are bound by data processing agreements and confidentiality obligations.

5.3 Legal Requirements

We may disclose your data when required by law or to comply with legal obligations, protect our rights and safety, and respond to valid legal requests.

6. Your Rights and Choices

6.1 Access and Control

Access: Request a copy of your personal data via email to contact@jj-op.link

Correction: Request correction of inaccurate data through our support channels

Deletion: Request deletion of your data (subject to legal requirements) via account settings or email

Portability: Request your data in a portable format (JSON/CSV) via email

Withdraw Consent: You can withdraw consent for data processing at any time through account settings

Opt-Out: You can opt out of certain data collection and processing in the extension settings

Account Deletion: You can request complete account deletion through the extension interface or by email

6.3 Data Retention

Active Accounts: Data retained while your account is active

Inactive Accounts: Data will be deleted after 12 months of inactivity

Legal Requirements: Some data may be retained for up to 7 years to comply with legal obligations

Resume Files: Stored for the duration of your account plus 30 days after deletion

7. Cookies and Tracking

7.1 LinkedIn Cookies

We access LinkedIn cookies to maintain your login session, authenticate API requests, and enable automated job applications.

Local Storage Only: LinkedIn session cookies (including li_at and JSESSIONID) remain on your local device and are never transmitted to our servers. These critical authentication tokens are only used locally by the extension to authenticate requests to LinkedIn's platform.

Cookie Consent: By using our service, you consent to our access to LinkedIn cookies necessary for service functionality.

7.2 Extension Cookies

We use browser storage to cache your preferences and settings, store temporary session data, and improve extension performance.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for EU data transfers, adequacy decisions where applicable, and other appropriate safeguards as required by local law.

9. Children's Privacy

Our service is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children under the applicable age threshold. If we become aware that we have collected personal information from a child under the applicable age, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 30 days in advance, update the "Last Updated" date, provide advance notice for material changes, and require renewed consent for significant changes affecting data processing.

11. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: contact@jj-op.link
Website: https://linapbot.com
Physical Address: Spain Malaga, Calle Martinez de la Rosa, 157, 5D, 29010
Business Name: IURII TIMOFEEV

Under GDPR, we process your data based on consent for optional data collection and marketing communications, contract performance to provide our core service functionality, legitimate interest for service improvement and security, and legal obligation to comply with applicable laws.

13. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at: Email: contact@jj-op.link

14. Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

15. Third-Party Platform Compliance

15.1 LinkedIn Terms of Service

We are not affiliated with LinkedIn Corporation. Use of our service may violate LinkedIn's Terms of Service. You are responsible for ensuring your use complies with LinkedIn's policies. We cannot guarantee that LinkedIn will not take action against your account.

15.2 Chrome Web Store Policies

Our extension complies with Chrome Web Store policies. We do not collect data beyond what is necessary for functionality. All data collection is disclosed in this privacy policy.

16. Glossary

li_at: LinkedIn authentication token used to maintain your login session

CSRF Token: Cross-Site Request Forgery token for secure API communication

Entity URN: LinkedIn's internal identifier for user accounts

Member ID: Your unique LinkedIn member identifier

Public Identifier: Your LinkedIn profile URL identifier

Important Notice: By using our service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. You also acknowledge that use of this service may violate third-party platform terms of service and is undertaken at your own risk.