Security

Security is not a feature we bolted on. The whole product is built so that using LinkPilot is safer than the alternatives. Here is how we protect your account and your data.

We never store your LinkedIn password

LinkPilot connects to LinkedIn through official OAuth. You log in on LinkedIn's own page, and we receive a scoped access token, never your password. You can revoke that token at any time from your LinkedIn settings.

Encryption

All traffic between you, the extension, and our servers is encrypted in transit with TLS. Sensitive data, including your LinkedIn access token, is encrypted at rest. Tokens are stored separately from your content.

Account safety by design

The most common way people get restricted on LinkedIn is aggressive automation. LinkPilot does the opposite. It suggests content for you to review and post yourself, enforces conservative rate limits and daily caps, and pauses automatically when it sees a warning signal. We would rather do less and keep your account safe than chase volume.

The Chrome extension

The extension runs only on linkedin.com and on your LinkPilot dashboard. It requests the minimum permissions needed, never logs keystrokes, and never publishes anything without you clicking the button. Its code is scoped so it cannot read pages outside the sites it declares.

Data minimization and access control

We collect only the data we need and limit who can access it. Access to production systems is restricted, authenticated, and logged. We use reputable cloud infrastructure with their own physical and network security controls.

Payments

Card data is handled by our PCI-compliant payment processor. LinkPilot never sees or stores full card numbers.

Responsible disclosure

If you believe you have found a security vulnerability, we want to hear from you. Email [email protected] with the details and steps to reproduce. Please give us a reasonable chance to fix the issue before disclosing it publicly. We will not pursue legal action against good-faith research that respects user privacy and avoids service disruption.

Incident response

If a breach ever affects your data, we will investigate, contain it, and notify affected users and regulators as required by law, without unnecessary delay.

Your part

Security is shared. Use a strong, unique password and two-factor authentication on your LinkedIn account, keep your browser updated, and only install the LinkPilot extension from the official Chrome Web Store.

Contact

Security questions or reports: [email protected].