Chrome extension privacy

The Programmable Social Chrome extension carries out the outreach a Programmable Social account has approved, in its user's own browser, signed in as them. This page covers what the extension itself reads and sends. How the Service handles that data afterwards is in the Privacy Policy.

1. What it does, in one line

It types and (only when you have switched live sending on) sends messages and comments that someone on your account approved, on LinkedIn, Reddit, X, Instagram and TikTok, and copies your conversations there back to your account. It does nothing else, and nothing at all until you connect it to your account.

2. Which pages it reads, and when

• It runs only on linkedin.com, reddit.com, x.com (and twitter.com), instagram.com and tiktok.com, and on the Programmable Social site to talk to your account. It can't read any other site.
• It reads a page on those sites only when it is acting for you: opening the conversation or post an approved draft is for, capturing a conversation you have open, checking your inbox for new replies (only if you turned that on, in both your account and the extension), or running a page check you started.
• Each platform is off until you turn it on, both in your account and in the extension.

3. What it sends, and to whom

It sends to your Programmable Social account only (programmable.social, or the server address you set), over HTTPS, with your extension key:

• Captured conversations: the other person's name, headline and profile address, and each message's text, direction and time, as you can see them. Optionally a screenshot of the visible part of the page when a conversation is captured, kept for 30 days as evidence of what it said.
• Run reports: which drafts it acted on, whether each was staged, sent or failed, the text it read back from the message box, and errors.
• Warnings: when a platform shows a rate limit, captcha, restriction or similar warning, what kind it was, so your account can pause.
• Heartbeats: every few minutes, the extension's version, its own switch settings and when it last synced, checked the inbox or sent. No names, addresses or message text.
• Page checks you start: which of the extension's page selectors matched, as counts. No page text.
• The browser-agent fallback, only if your account and your extension both have it on: a description of the page's buttons and text boxes (their labels and a short excerpt of visible text) when the extension's own code can't find the box or button it needs. Your account's server passes it to your account's own AI provider, on your account's key, to decide the next step. The extension never holds an AI key.

It sends nothing to us beyond this, and nothing to anyone else. What it types on the platforms is the approved draft, as if you had typed it.

4. What it never does

• It never reads or sends your passwords, cookies or sign-in details, for the platforms or for us. It works through the session you are already signed in to.
• It never reads your browsing history, other tabs' contents, or any site other than those above.
• It never sends a message nobody approved, unless an owner of your account turned on “skip approval” and you turned it on in the extension too. It never sends to anyone on the do-not-contact list.
• It never changes your account settings on the platforms, follows, likes, buys, or posts anything other than the approved drafts.
• It has no advertising, analytics or tracking, and we don't sell or share the data it collects.

5. What it keeps in your browser

Its settings (your server address, your extension key, its switches, quiet hours and caps), a short local log of recent sends used for pacing, and the last sync's summary. Removing the extension deletes them. Revoking the key in your account's Settings → Extension stops it at once.

6. How long your account keeps it

Conversations and drafts stay until your account deletes them or closes. Screenshots go after 30 days; run reports, warnings and browser-agent logs after 180 days. The full schedule is in the Privacy Policy and the DPA.

7. Contact

Questions, or to stop being contacted through the Service: [email protected].