Privacy Policy

Subul IN - AI LinkedIn Copilot Chrome Extension

Effective: May 31, 2026 Last Updated: May 31, 2026 Version 3.2.0 Designed around common GDPR and CCPA privacy principles
Subul IN does not sell personal data, does not use personal data for advertising, and does not use user data to train foundation models.

Contents

  1. Privacy at a Glance
  2. Introduction and Overview
  3. Data We Collect (Collection)
  4. How We Process Data (Processing)
  5. Storage and Retention (Storage)
  6. Data Sharing (Sharing)
  7. Chrome Extension Permissions
  8. Data We Do Not Collect
  9. Security Measures
  10. International Data Transfers
  11. Children's Privacy
  12. Changes to This Policy
  13. User Rights and Deletion
  14. Chrome Web Store Limited Use Compliance
  15. Compliance and Contact

Privacy at a Glance - Four Pillars (Collection / Processing / Storage / Sharing)

📥
Collection (Collecte)
Profile data you explicitly extract, account email, telemetry, and target profile snippets when you trigger an action.
⚙️
Processing (Traitement)
AI generation via Microsoft Azure OpenAI Service, rule-based scoring, authentication relay, and diagnostics.
🔒
Storage (Stockage)
Microsoft Azure Cosmos DB with AES-256 at rest, TLS in transit, and local cache in chrome.storage.local.
🔗
Sharing (Partage)
Shared only with Microsoft Azure services and Subul platform as needed. Never sold.
Section 1

Introduction and Overview

Subul IN is an AI-powered professional productivity assistant designed to help users optimize their LinkedIn presence. The extension generates posts, evaluates profile quality, identifies skill gaps, and provides networking insights.

Subul IN is developed and operated by Smartovate Technologies ("Smartovate"), a Microsoft Partner. Subul IN is part of the broader Subul educational and professional development platform designed to support university students and early-career professionals.

The extension is integrated with the Subul ecosystem, an AI-powered educational and career development platform that helps university students improve employability, professional networking, and career readiness.

We adhere to the Principle of Least Privilege and collect only the data required to deliver these features. We do not sell your data and do not use it for advertising or profiling.

Subul IN does not sell personal data, does not display third-party advertising, and does not use collected data for advertising or marketing profiling.
Section 2

Data We Collect (Collection / Collecte)

Personal and authentication data
Email address, user name, and authentication tokens or session information retrieved from Subul-owned domains (https://*.subul.uk) to keep you signed in. Notification preferences if enabled.
LinkedIn profile data
Profile information visible to the user in their browser such as headline, work history, skills, certifications, education, and posts when you click Analyze, Scan, or Generate.
Networking analysis data
Profile information visible in the user's active browser tab used for user-requested networking compatibility analysis and professional recommendations.
Networking goals and preferences
Industries, seniority, and objectives you enter in settings to personalize scoring.
Technical and telemetry data
Endpoint status codes, request latency, and error types. We do not collect browsing history or device identifiers, and we do not use IP addresses for tracking or advertising.
All collection is user-initiated. The extension does not collect LinkedIn data in the background or while the user is not actively using the extension.

User control: The extension only activates analysis and AI features after a direct user action such as clicking Analyze, Generate, or Scan.

By using Subul IN features such as Analyze, Generate, or Scan, you consent to the processing described in this Privacy Policy.

By installing and using the extension, users explicitly consent to the collection and processing practices described in this Privacy Policy.

Subul IN accesses LinkedIn page content only while the user is actively viewing a LinkedIn page and only after a direct user action. The extension does not automatically collect profile data in the background.

The extension does not continuously monitor LinkedIn activity and does not collect LinkedIn profile data in the background without direct user interaction.

Telemetry use: Telemetry is used exclusively for reliability, debugging, abuse prevention, and service performance monitoring.

We do not collect LinkedIn passwords, private messages, payment data, or browsing history outside LinkedIn.
Section 3

How We Process Data (Processing / Traitement)

Legal basis: We process data based on user consent and our legitimate interest in providing the requested productivity and AI analysis features.

By triggering AI-powered features such as Analyze, Generate, or Scan, the user explicitly requests processing of the selected content through Subul IN backend services and Microsoft Azure OpenAI Service infrastructure.

AI requests are processed through Microsoft Azure OpenAI Service hosted by Microsoft. Data submitted through Microsoft Azure OpenAI Service is not used to train OpenAI or Microsoft foundation models.

AI prompts and generated content are retained only for as long as needed to deliver the request, support the user, investigate abuse, or meet legal and security obligations. Where they are no longer needed, they are deleted or de-identified according to our retention schedule.

Data minimization: We apply data minimization principles and transmit only the minimum data required to fulfill the requested feature.

AI prompts and generated content are not routinely reviewed by humans unless required for security investigations, abuse prevention, or user-requested support.

AI Model Training

Subul IN does not use your personal data, LinkedIn profile content, prompts, or generated outputs to train proprietary AI models.

Generated AI outputs may contain inaccuracies or incomplete recommendations and should be reviewed by users before professional use.

AI-generated scores and recommendations are informational only and are not used for automated employment decisions, eligibility determination, or legal profiling.

Section 4

Storage and Retention (Storage / Stockage)

Local storage
chrome.storage.local caches your profile snapshot and UI state. chrome.storage.sync stores limited authentication state and non-sensitive settings like server URL and language. Authentication state is time-limited and transmitted only over HTTPS.
Cloud storage
Data synced with the backend is stored in Microsoft Azure Cosmos DB. Encryption at rest uses AES-256.
In-transit security
All traffic uses TLS 1.2+ / HTTPS between the extension, backend, Cosmos DB, and Microsoft Azure OpenAI Service.

Local browser storage remains under the user's browser environment and may be cleared by the user at any time through browser settings.

Authentication tokens stored locally are time-limited session tokens and are not accessible to websites visited by the user.

Retention by document type

Document Type Stored Elements Data Lifetime
userEmail, display name, account creation date, subscription state, optionsRetained while the account remains active or until deletion is requested
profile_snapshotLinkedIn profile data (experiences, skills, posts)Retained while the account remains active or until deletion is requested
linkedin_profile_cacheTemporary profile analysis cache30-day TTL
cacheEphemeral locks and throttling recordsMinutes to hours TTL
networking_goalIndustry, seniority, target role and regionPersistent until updated or deleted
usage_logEndpoint metadata (timestamp, action, latency)90 days
weekly_stats_recordAggregate usage counts1 year
ai_score_record / gap_analysis_recordAI metrics and recommendations6 months
chat_recordChat routing records30 days
Section 5

Data Sharing (Sharing / Partage)

We do not sell, rent, or share personal data with advertisers or data brokers. Data is shared only with approved subprocessors to deliver features you use.

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA).

Subul IN does not sell personal data, does not use personal data for advertising, and does not use user data to train AI models.
Service Provider Purpose Data Shared
Microsoft Azure OpenAI Service Microsoft AI content generation and analysis. Microsoft acts as a data processor/subprocessor for AI services. Prompt text and profile snippets needed for the request
Microsoft Azure Cosmos DB Microsoft Persistent storage for user documents. Microsoft acts as a data processor/subprocessor for cloud hosting. Profile snapshots, usage logs, AI results
Subul API Subul UK Authentication and learning data sync Email address and Subul access token
Microsoft 365 Email Services Microsoft Email notifications (optional) Email address and notification content

Third-party services maintain their own independent privacy policies and security practices.

We may disclose information when required by law, legal process, regulatory request, or to protect the rights, safety, and security of users, the service, or others.

LinkedIn page content is accessed only within the user's active browser session and only after explicit user interaction. Subul IN does not scrape LinkedIn at scale, automate profile harvesting, or bypass LinkedIn access controls.

Subul IN is an independent productivity tool and is not affiliated with, endorsed by, or sponsored by LinkedIn Corporation.

Section 6

Chrome Extension Permissions

Subul IN requests the following permissions. Each permission is used only for its stated purpose.

Permission Purpose
storage Stores user preferences, cached profile data, consent flags, and authentication state.
activeTab Detects the currently active LinkedIn tab and accesses page content only after an explicit user action such as Analyze, Generate, or Scan.
scripting Injects the bundled analysis script into LinkedIn pages when activated by the user.
alarms Runs scheduled background tasks such as reminders or cache cleanup.
https://www.linkedin.com/*, https://linkedin.com/* Allows the extension to access LinkedIn page content rendered in the user's active browser tab for analysis.
https://*.subul.uk/* Retrieves authentication tokens or session information and syncs Subul learning data.
https://subulin-api.azurewebsites.net/* Connects to the Subul IN backend for AI analysis and data storage.
The extension does not request tabs, cookies, webRequest, history, or all_urls permissions.

Host permissions are limited to LinkedIn pages and Subul-owned domains required for the features you use.

Subul IN never accesses or stores LinkedIn login credentials, session cookies, or account passwords.
Subul IN does not perform automated scraping, bulk profile harvesting, background crawling, or autonomous interaction with LinkedIn. Analysis occurs only on pages actively opened and selected by the user.
Section 7

Data We Do Not Collect

Section 8

Security Measures

No electronic transmission or storage method is completely secure, but we use reasonable measures to reduce risk.

Section 9

International Data Transfers

Subul IN is hosted on Microsoft Azure. Depending on your location, your data may be processed or stored in the United States. Microsoft provides Standard Contractual Clauses (SCCs) and enterprise-grade protections for international transfers.

Section 10

Children's Privacy

Subul IN is intended for university students, professionals, and users aged 16 or older, or the minimum age required by applicable local law. It is not directed at children under 16. We do not knowingly collect data from children.

Section 11

Changes to This Policy

We may update this Privacy Policy as the product evolves. When we make material changes, we update the effective date and notify users in-app on the next extension launch.

Section 12

User Rights and Deletion

Your Choices

Access and export
Request a copy of your data and a machine-readable export.
Opt out of collection
Disable or uninstall the extension to stop all data access and analysis features.
Data deletion
Request deletion of your account, including stored profile snapshots, analytics records, networking preferences, and cached backend records.
Notification control
Toggle email notifications in Settings at any time.
To request deletion, email subul@smartovate.com with subject line "Data Deletion Request [Subul IN]". We may verify your identity before processing the request. Requests are acknowledged within 5 business days and processed within 30 days unless a longer period is required by law.

Once deletion is completed, associated cloud-stored profile snapshots, analytics records, and AI-generated data are removed from active production systems and handled according to our retention and backup policies, except where retention is legally required.

Section 13

Chrome Web Store Limited Use Compliance

Subul IN complies with the Chrome Web Store Limited Use Policy. Data collected through Chrome extension permissions is used solely to provide or improve user-facing functionality explicitly requested by the user.

Section 14

Compliance and Contact

Subul IN complies with Chrome Web Store Limited Use requirements. Data obtained through Google Chrome extension permissions is used exclusively to provide user-facing functionality requested by the user.

Privacy and Compliance Contact

For privacy, data protection, or user-rights requests, contact our compliance team.

subul@smartovate.com

Smartovate Technologies Ltd
71-75 Shelton Street
London WC2H 9JQ, United Kingdom
https://app.subul.uk