Privacy Policy

Aletheia is a Chrome extension and web service that helps people prepare LinkedIn connection notes, cold email, InMail, follow-ups, role-fit replies, and grounded YC application answers. Aletheia is operated by Nagarjun Mallesh, an individual sole developer based in Boston, Massachusetts, United States. We are not a registered corporation. Aletheia is not affiliated with, endorsed by, or sponsored by LinkedIn Corporation.

Questions or requests: hello@aletheia.live.

We collect only what we need to operate the service:

• Supported LinkedIn profile context — such as name, headline, location, role, and visible profile details. After you consent in the extension, it can read supported LinkedIn profiles you visit even when its panel is closed. Selected profile content is sent to Aletheia only when you request a draft. On Apollo, Aletheia only places a draft you have reviewed into a supported compose field; it does not extract Apollo profiles.
• Original resume files, extracted resume text, opportunity context, and confirmed evidence you provide in Aletheia. This supports professional drafts and grounded YC application answers from your recorded background.
• Generated drafts and examples you approve, plus accept/reject feedback you give. Approved examples and feedback can guide the wording and structure of future drafts for your account.
• Account email you sign up with, plus auth tokens issued by our identity provider (Supabase Auth).
• Operational telemetry — request count, error traces, latency. No message body or profile content in error logs.
• Optional support-chat information — questions, name, and email address you voluntarily submit through the chat widget on our landing page.

The extension checks the active page URL locally to determine whether the current page supports Aletheia’s profile-reading or fill features. The URL is not retained as browsing history or transmitted to Aletheia.

We do not collect: payment card numbers through Aletheia, LinkedIn passwords, or LinkedIn or Apollo cookies. We do not automatically collect messages from other people. If you provide prior conversation context for a follow-up, we process only the context you choose to submit. Aletheia currently provides a trial only; refill checkout is not available.

Your data is stored across these processors. Each link is the processor’s own privacy notice:

• Supabase — Postgres database, authentication, and private file storage. Stores your account, original resume files, extracted resume text, generated message history, and accept/reject feedback. supabase.com/privacy
• Anthropic (Claude API) — runs the AI model that writes your drafts. Depending on the request, selected profile, resume, application-profile, role or opportunity, prior conversation, and approved-example context may be sent to generate the draft. Anthropic handles submitted content under its published API data-handling and retention terms. anthropic.com/privacy
• Vercel — hosts the web app and API. Receives request metadata (IP, user agent) for routing and abuse prevention. vercel.com/legal/privacy-policy
• Sentry — server-side error tracking. Receives stack traces and error context. Configured to scrub message bodies and personal data. sentry.io/privacy
• OpenSpeechAI — provides the optional landing-page support chat. It receives the messages and contact details you choose to submit, along with ordinary request metadata needed to deliver the widget. openspeechai.com/privacy-policy

We do not sell, rent, or share your data with advertisers. Aletheia does not train AI models on your drafting context. Selected context is shared with Anthropic to generate the draft you request, subject to Anthropic’s published API terms.

Aletheia’s use and transfer of information received through Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this information only to provide or improve Aletheia’s single user-facing purpose. We do not use or transfer it for personalized advertising, sell it, use it for creditworthiness or lending, or permit human access except with explicit user consent for support, for security purposes, to comply with applicable law, or in aggregated and anonymized form for internal operations.

The web app sets only the cookies required for sign-in (Supabase session cookies). No advertising or cross-site tracking cookies.

If you choose auto-fill, the extension places a reviewed draft into a supported compose field. It does not click Send, submit forms, or otherwise send messages for you.

The Chrome extension uses chrome.storage.local to remember your sign-in token, profile-reading consent, extension preferences, and accepted-message history on your own device. Your uploaded resumes are stored in your Aletheia account rather than in Chrome local storage.

The optional OpenSpeechAI chat widget initializes only after you visit the public landing page and is hidden on every other route. It uses browser local storage to maintain a chat session and remember information you choose to provide. Opening the widget or submitting a message sends that chat information to OpenSpeechAI so it can provide the requested support experience.

Before reading supported profile content, the extension presents an in-product disclosure and requires your affirmative consent. You can decline or later withdraw this consent in the extension settings. When consent is declined or withdrawn, active profile readers stop and extracted profile state is cleared.

You can, at any time:

• Access the data we hold about you — email hello@aletheia.live and we will send an export.
• Delete your account and all associated data — email hello@aletheia.live with the subject “Delete my account”. We process deletion within 30 days.
• Correct inaccurate data in your account.
• Withdraw profile-reading consent in the extension settings. You can stop all extension processing by uninstalling it, and you can request deletion of the account data held by Aletheia.
• Lodge a complaint with your local data protection authority if you believe we have mishandled your data.

If you are an EU/UK/Swiss resident, your rights under GDPR / UK GDPR apply. Our legal basis for processing is your affirmative consent for profile reading and requested drafts, and our legitimate interest in securely operating the service.

We retain your account data while your account is active. After account deletion, identifiable data is removed within 30 days. Anonymous aggregated metrics (e.g. total messages generated per day) may be retained for product analytics.

Ready original resume files and extracted text remain in your account until you delete the resume or request account deletion. Files that are rejected, canceled, or abandoned remain private in quarantine and are scheduled for deletion by a daily cleanup job. Vercel Hobby scheduling or a temporary infrastructure failure may delay that cleanup; the file remains private and unavailable to drafting while cleanup retries.

Server logs containing IP addresses are kept for up to 30 days for abuse and security investigations, then deleted.

Aletheia is intended for adults. Do not use the service if you are under 18. We do not knowingly collect data from children. If you believe a child has signed up, email hello@aletheia.live and we will remove the account.

We use HTTPS everywhere, row-level security on the database, scoped service tokens, and least-privilege access. No system is perfectly secure. If you discover a vulnerability, email hello@aletheia.live with the subject “Security” and we will respond within 7 days.

Our processors (Supabase, Anthropic, Vercel, Sentry, and the optional OpenSpeechAI support chat) operate in the United States and other regions. By using Aletheia you consent to transfer of your data to those jurisdictions for the purposes described above.

We may update this policy. If we make material changes we will update the effective date at the top and, where possible, notify you by email or in-app banner before the change takes effect.

Questions, deletion requests, complaints: hello@aletheia.live. We reply within 7 business days.