Privacy Policy
Effective date: July 23, 2026
1. Who we are
Epyphite Pte. Ltd., a company registered in Singapore (UEN 202011664K), operating Critical Tech (criticalmass.tech). For privacy inquiries, contact [email protected].
2. What MassLink reads
MassLink's content script is injected on linkedin.com pages. It reads and collects on exactly three:
- Your connections list (
/mynetwork/invite-connect/connections/) - People search results (
/search/results/people/) - Company search results (
/search/results/companies/)
On every other LinkedIn page, nothing is read or stored.
Fields captured:
- Connections: Name, headline, "connected on" date (when shown), profile URL, profile slug, capture timestamp
- People search: Name, headline, location, connection degree (1st/2nd/3rd), profile URL, profile slug, capture timestamp
- Company search: Company name, industry/location, size/followers, company URL, company slug, capture timestamp
What MassLink does not do:
- Does not log in, authenticate, or act as you
- Does not click, scroll, paginate, or submit anything on LinkedIn
- Does not send connection requests, messages, or any other action
- Does not make any network request to LinkedIn
- Does not run when the browser is closed
- Does not read your LinkedIn credentials, cookies, inbox, or feed
3. What leaves the browser
By default, nothing leaves. Capture, storage, filtering, sorting and CSV/Excel export are entirely local. A user who never turns on AI categorisation sends no contact data anywhere.
When you use AI categorisation or Search Refine, text is sent to our backend, which forwards it to Anthropic's Claude for classification. Precisely what is sent:
- Categorise (people): Headline text only, as an indexed list
- Categorise (companies): Company name and industry line
- Search Refine: A sample of text strings with their assigned category, the search keywords you typed, and your ICP description
- Licence checks: Your licence key only
What is never transmitted for people: name, profile URL, profile slug, location, connection degree, "connected on" date, or your notes.
Be aware: a LinkedIn headline is free text and frequently contains an employer, role, and sometimes the person's name. While MassLink does not send a name field, headline text is personal data and is transmitted when you use AI features.
4. What we store and for how long
Everything is stored in the browser's IndexedDB, in the extension's own origin (not readable by LinkedIn's scripts). Four stores: connections, discovery results, AI classifications, and settings.
Retention: indefinite until you delete it. There is no expiry, no automatic purge, and no upload. It stays on your machine until cleared or the extension is uninstalled.
Headline history: When a captured person's headline changes between captures, MassLink keeps the previous headline alongside the new one, with the date it changed. This powers job-change detection and means the extension retains a small history of headline changes over time, locally, until deleted.
Server-side: AI classification is stateless — items in, results out, nothing stored. Usage metadata (licence key, item count, token count, cost) is retained for billing purposes.
5. What we don't do
- We do not sell data
- We do not share data with advertisers
- We do not build a cross-user database of profiles — captured contacts are stored only in your own browser
- We do not track your browsing — the extension reads only the three pages listed above
- There is no advertising, analytics, tracking, error-reporting or telemetry code in the extension
6. Third parties
The extension contacts exactly two hosts:
- linkedin.com — pages you are already viewing (read-only; no requests made to it)
- trade.orbitalpay.ai — our backend, for licence checks and AI features
No analytics, error tracking, CDNs, fonts, or tag managers. The manifest grants no other host permission.
Stripe — reached only by opening a checkout link in a new tab. Card details are entered on Stripe's own page; payment details never pass through the extension or our backend.
Anthropic (Claude) — via the backend for AI classification. Headline text reaches Anthropic's API during categorisation.
7. Your rights and choices
- Export your data: CSV on every tab and every plan; Excel on paid
- Delete one record: ✕ on any row in the dashboard
- Delete one category of data: "Clear" per surface — connections, People, or Companies
- Delete everything: A single delete-all action wipes all captured data, search results, and AI results
- Remove everything permanently: Uninstalling the extension removes its entire local database
Every delete path removes derived AI classifications with the record. Nothing survives a clear or uninstall.
8. Third-party data
MassLink captures information about people who have not installed it. The data is read from pages you have lawful access to as a LinkedIn member — largely your own accepted connections (a pre-existing relationship) and public search results.
Nothing about a captured person is uploaded or centrally stored. Their data sits in your browser only. We hold no database of captured individuals and cannot look someone up, confirm whether they appear in any user's data, or delete them centrally.
The only fragment that reaches a server is headline text during classification, transiently, and it is not retained.
9. Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date.