Overview
Popzy is a Chrome extension that helps users generate personalized cold outreach messages for LinkedIn profiles using AI. We are committed to protecting your privacy and being transparent about our data practices.
Quick Summary:
✓ Your API key stays on your device
✓ No data sent to our servers (we don't have any)
✓ LinkedIn data is only used temporarily for message generation
✓ All API communication is encrypted
✓ You control your data — delete anytime
Data We Collect
Data Stored Locally on Your Device
Popzy stores the following data locally in your browser using Chrome's storage API:
- OpenAI API Key: Your personal OpenAI API key is stored locally on your device to authenticate requests to OpenAI's services. This key never leaves your device except when making API calls directly to OpenAI.
- Onboarding Status: A simple flag indicating whether you've completed the initial setup.
Data We Do NOT Collect
- We do not collect, store, or transmit any personal information to our servers
- We do not have any backend servers or databases
- We do not track your browsing activity
- We do not collect analytics or usage data
- We do not store any LinkedIn profile data permanently
How We Use Data
LinkedIn Profile Data
When you visit a LinkedIn profile and use Popzy:
- The extension temporarily reads publicly visible profile information (name, headline, about section, experience) from the current page
- This data is sent directly to OpenAI's API to generate a personalized message
- This data is not stored permanently and is discarded after the message is generated
OpenAI API Integration
- Your messages are generated using OpenAI's API (specifically the gpt-4o-mini model)
- Data sent to OpenAI is subject to OpenAI's Privacy Policy
- We recommend reviewing OpenAI's data usage policies
Data Security
- Your API key is stored locally using Chrome's secure storage API
- All communication with OpenAI's API is encrypted via HTTPS
- No data is transmitted to any servers owned or operated by Popzy
Third-Party Services
Popzy integrates with the following third-party services:
Your Rights
You have full control over your data:
- Delete your API key at any time through the extension settings
- Uninstall the extension to remove all locally stored data
- Clear browser data to remove all extension storage
Permissions Explained
Popzy requires the following browser permissions:
- storage: To save your API key and settings locally
- tabs: To detect when you're on a LinkedIn profile page
- activeTab: To read profile information from the current LinkedIn page
- Host permissions for linkedin.com: To access LinkedIn profile pages
- Host permissions for api.openai.com: To make API requests to OpenAI
Children's Privacy
Popzy is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last Updated" date at the top of this page.