Trayo for LinkedIn — Extension Privacy Policy

Trayo AI, Inc.
Effective Date: May 9, 2026
Last Updated: May 9, 2026

This privacy policy describes the data practices of the Trayo for LinkedIn browser extension (the "Extension"). The Extension is a companion to the Trayo platform ( app.trayo.ai) and lets authenticated Trayo users add a LinkedIn company to their Trayo workspace in two clicks.

Use of the Trayo platform itself is governed by the broader Trayo Privacy Policy. This page covers only the additional behavior introduced by the Extension.

1. What the Extension does

When you visit a LinkedIn company page (for example, linkedin.com/company/stripe or linkedin.com/sales/company/<id>), the Extension injects an Add to Trayo button into the page. When you click that button and confirm, the Extension sends the company identifier to your Trayo workspace so Trayo can begin monitoring it.

2. Data the Extension processes

2.1 LinkedIn company data

The Extension only reads data from LinkedIn pages you actively visit. Specifically:

• The company name displayed on the page
• The company URL slug (e.g. stripe from /company/stripe)
• The current page URL

The Extension does not read your LinkedIn profile, your messages, your connections, your search history, or any other LinkedIn content. It does not run on LinkedIn pages other than company pages.

The above data is transmitted to Trayo's API (api.trayo.ai) only when you click "Add to Trayo" and confirm. Nothing is transmitted from passive browsing.

2.2 Trayo authentication data

To call your Trayo workspace on your behalf, the Extension needs to know that you are signed in to Trayo. When you visit app.trayo.ai or admin.trayo.ai in the same browser, the Extension reads your existing Trayo session token (a JWT) and tenant identifier from that page's local storage and stores them in Chrome's extension storage so the Extension can authenticate API calls.

The session token is the same token already issued to you by Trayo when you signed in. It is sent only to api.trayo.ai and never to LinkedIn or any third party. It is removed when you sign out of Trayo or uninstall the Extension.

2.3 Settings

The Extension stores a small set of local preferences in Chrome's extension storage, including the configured Trayo API URL and a stable, randomly generated installation identifier used for product analytics (see Section 3). These never leave your browser except as described in this policy.

3. Product analytics

The Extension sends a limited set of product-analytics events to PostHog (us.i.posthog.com) so we can measure reliability and detect when LinkedIn ships changes that break the integration. The events we capture are:

• extension_installed — the Extension was installed or updated
• extension_inject_attempted — whether the Add to Trayo button rendered on a given page (used to catch UI-selector breakage)
• extension_add_clicked / extension_add_completed — funnel from clicking the button to a successful add

Each event is associated with a stable, randomly generated installation identifier. We do not send your name, email address, Trayo tenant identifier, LinkedIn profile, IP address as a tracked property, or any other personally identifying information with these events. PostHog may receive a connecting IP address as a normal property of any internet request; we do not use it to identify you.

4. Permissions and why we need them

• storage — to remember the configured Trayo API URL, your captured session token (so the Extension can call Trayo on your behalf), and the analytics installation identifier described above.
• Host permission for www.linkedin.com — to inject the Add to Trayo button on company pages.
• Host permission for app.trayo.ai and admin.trayo.ai — to read your Trayo session token from the page's local storage so the Extension can authenticate API calls.
• Host permission for api.trayo.ai — to send the "add this company" request to your Trayo workspace.
• Host permission for us.i.posthog.com — to send the product-analytics events listed in Section 3.

5. What we do not do

• We do not sell or rent any data collected by the Extension.
• We do not share data collected by the Extension with third parties for their own marketing or advertising purposes.
• We do not use the Extension's data to build LinkedIn-derived data products outside of your own Trayo workspace.
• We do not collect, transmit, or store the contents of LinkedIn pages outside of the company name, slug, and URL described in Section 2.1, and only when you actively click "Add to Trayo".
• We do not run the Extension on any site outside of those listed in Section 4.

6. Data retention and your controls

Local data stored by the Extension (your captured session token, settings, and the installation identifier) lives in Chrome's extension storage on your device. It is removed when you uninstall the Extension or clear your browser data. Signing out of Trayo invalidates the captured session token.

Companies you have added to Trayo via the Extension live inside your Trayo workspace and are subject to the Trayo Privacy Policy. To delete those records, remove the account from your Trayo workspace or contact us at [email protected].

7. Security

All network requests made by the Extension use HTTPS. The Extension is restricted by Chrome's content security policy and only connects to the hosts listed in Section 4. For information about Trayo's broader security program, see our Security page.

8. Children

The Extension is intended for business users and is not directed to children under 13. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through the Extension's release notes or via the Trayo platform.

10. Contact

Questions about this policy or the Extension can be sent to [email protected].