Extension Privacy Policy

Wannalead ("we") provides a LinkedIn automation API. The extension connects a user's existing LinkedIn browser session to the Wannalead backend so that the LinkedIn actions the user requests through the Wannalead product are executed on their behalf, from their own browser.

The extension has one purpose: connect the user's already-authenticated LinkedIn session in their browser to Wannalead, and execute the LinkedIn requests the user asks for through the Wannalead API. It does nothing else.

• LinkedIn session cookies (presence and metadata). The extension reads whether the LinkedIn authentication cookies (li_at, JSESSIONID) are present in the browser and derives the session validation token required by LinkedIn. This is used to (a) confirm the user is logged into LinkedIn and (b) execute the user-requested LinkedIn requests with the user's own session. Cookie values are never logged. Only presence flags and a non-reversible hash of the cookie set are sent to Wannalead to detect session changes.
• LinkedIn request results. When the user requests a LinkedIn action through Wannalead, the backend sends the extension a fully-resolved request (method, LinkedIn URL, allowed headers). The extension performs that request against linkedin.com using the user's session and returns the raw response to Wannalead so the product can parse and return it to the user.
• Local extension state (chrome.storage): pairing state, extension connection identifier, service endpoint, and last-known status metadata.

• It never asks for or stores the user's LinkedIn password.
• It never injects UI into LinkedIn pages and never reads arbitrary browsing history outside LinkedIn.
• It never executes remote code. The backend sends data (which request to run), never executable code.
• It does not sell user data, does not use it for advertising, and does not transfer it to data brokers.

Data is sent over encrypted connections to Wannalead servers (wannalead.co): authentication status (cookie presence/hash, session-validation presence), browser/extension metadata, and the LinkedIn payloads needed to fulfil the user's requests. Data is used solely to provide the Wannalead product to that user (Limited Use). We retain it only as long as needed to provide the service and honor deletion requests.

Every LinkedIn request is fulfilled in-flight from the connected user's own LinkedIn session, bounded by what that user can already see and do from their own account. We do not pool, cross-reference, resell, or maintain a shared dataset of LinkedIn data across users, and we do not perform cross-account lookups. Data obtained through one user's session is used only to provide the Wannalead product to that same user.

Our use of data received from the extension complies with the Chrome Web Store Limited Use policy: data is used only to provide and improve the user-facing features of Wannalead; it is not sold, not used for ads, and not transferred except as required to operate the service or by law.

Uninstalling the extension stops all data collection. Users can revoke the LinkedIn session at any time from LinkedIn settings, and can request deletion of their data by contacting us.

support@wannalead.co