Privacy Policy

Aletheia is a Chrome extension and web service that helps people prepare LinkedIn connection notes, cold email, InMail, follow-ups, role-fit replies, and grounded YC application answers. Aletheia is operated by Nagarjun Mallesh, an individual sole developer based in Boston, Massachusetts, United States. We are not a registered corporation. Aletheia is not affiliated with, endorsed by, or sponsored by LinkedIn Corporation.

Questions or requests: hello@aletheia.live.

We collect only what we need to operate the service:

• Selected supported-page context from the LinkedIn profile you choose to reference — such as name, headline, location, role, and profile details. This is read only after you provide consent and is transmitted only when you request a draft. On Apollo, Aletheia only places a draft you have reviewed into a supported compose field; it does not extract Apollo profiles.
• Resume, opportunity, and confirmed evidence context you provide in Aletheia. This supports professional drafts and grounded YC application answers from your recorded background.
• Generated drafts, plus accept/reject feedback you give. This feedback can be used to improve future drafts for your account.
• Account email you sign up with, plus auth tokens issued by our identity provider (Supabase Auth).
• Operational telemetry — request count, error traces, latency. No message body or profile content in error logs.

The extension checks the active page URL locally to determine whether the current page supports Aletheia’s profile-reading or fill features. The URL is not retained as browsing history or transmitted to Aletheia.

We do not collect: payment card numbers through Aletheia, LinkedIn passwords, or LinkedIn or Apollo cookies. We do not automatically collect messages from other people. If you provide prior conversation context for a follow-up, we process only the context you choose to submit. Aletheia currently provides a trial only; refill checkout is not available.

Your data is stored across these processors. Each link is the processor’s own privacy notice:

• Supabase — Postgres database and auth. Stores your account, generated message history, accept/reject feedback. supabase.com/privacy
• Anthropic (Claude API) — runs the AI model that writes your messages. We send only the data needed to generate the requested message. We configure zero data retention where available. anthropic.com/privacy
• Vercel — hosts the web app and API. Receives request metadata (IP, user agent) for routing and abuse prevention. vercel.com/legal/privacy-policy
• Sentry — server-side error tracking. Receives stack traces and error context. Configured to scrub message bodies and personal data. sentry.io/privacy

We do not sell, rent, or share your data with advertisers. We do not use your message content to train any third-party AI model beyond the single request that generates your message.

Aletheia’s use and transfer of information received through Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this information only to provide or improve Aletheia’s single user-facing purpose. We do not use or transfer it for personalized advertising, sell it, use it for creditworthiness or lending, or permit human access except with explicit user consent for support, for security purposes, to comply with applicable law, or in aggregated and anonymized form for internal operations.

The web app sets only the cookies required for sign-in (Supabase session cookies). No advertising or cross-site tracking cookies.

If you choose auto-fill, the extension places a reviewed draft into a supported compose field. It does not click Send, submit forms, or otherwise send messages for you.

The Chrome extension uses chrome.storage.local to remember your sign-in token, profile-reading consent, extension preferences, and accepted-message history on your own device. Your uploaded resumes are stored in your Aletheia account rather than in Chrome local storage.

Before reading supported profile content, the extension presents an in-product disclosure and requires your affirmative consent. You can decline or later withdraw this consent in the extension settings. When consent is declined or withdrawn, active profile readers stop and extracted profile state is cleared.

You can, at any time:

• Access the data we hold about you — email hello@aletheia.live and we will send an export.
• Delete your account and all associated data — email hello@aletheia.live with the subject “Delete my account”. We process deletion within 30 days.
• Correct inaccurate data in your account.
• Withdraw profile-reading consent in the extension settings. You can stop all extension processing by uninstalling it, and you can request deletion of the account data held by Aletheia.
• Lodge a complaint with your local data protection authority if you believe we have mishandled your data.

If you are an EU/UK/Swiss resident, your rights under GDPR / UK GDPR apply. Our legal basis for processing is your affirmative consent for profile reading and requested drafts, and our legitimate interest in securely operating the service.

We retain your account data while your account is active. After account deletion, identifiable data is removed within 30 days. Anonymous aggregated metrics (e.g. total messages generated per day) may be retained for product analytics.

Server logs containing IP addresses are kept for up to 30 days for abuse and security investigations, then deleted.

Aletheia is intended for adults. Do not use the service if you are under 18. We do not knowingly collect data from children. If you believe a child has signed up, email hello@aletheia.live and we will remove the account.

We use HTTPS everywhere, row-level security on the database, scoped service tokens, and least-privilege access. No system is perfectly secure. If you discover a vulnerability, email hello@aletheia.live with the subject “Security” and we will respond within 7 days.

Our processors (Supabase, Anthropic, Vercel, Sentry) operate in the United States and other regions. By using Aletheia you consent to transfer of your data to those jurisdictions for the purposes described above.

We may update this policy. If we make material changes we will update the effective date at the top and, where possible, notify you by email or in-app banner before the change takes effect.

Questions, deletion requests, complaints: hello@aletheia.live. We reply within 7 business days.