Privacy Policy
Last Updated: January 2026
1. Introduction
248.AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web platform, products (including Researcher, Outbounder, and Inbounder), Chrome extensions, and related services (collectively, the "Services"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not use our Services.
2. Information We Collect - Platform Services
2.1 Account Information
When you create an account or use our platform, we collect:
- Registration data: Name, email address, company name, and job title
- Authentication data: Login credentials and session information
- Profile information: Any additional information you choose to provide
2.2 Business Data You Provide
When using our products, you may upload or provide:
- Lead lists: Business names, addresses, and contact information for your sales prospects
- Territory data: Geographic areas and assignment information
- Email templates: Outreach content you create for campaigns
2.3 Publicly Available Business Data
Our AI agents collect publicly available information about businesses (primarily restaurants and bars) including:
- Website content and features (online ordering, reservations, menus)
- Social media presence and profiles
- Google Business Profile information
- Business registration and licensing data from public records
This data is collected from publicly accessible sources to help sales teams personalize their outreach.
2.4 Usage and Analytics Data
We automatically collect certain information when you use our Services:
- Log data (IP address, browser type, pages visited, time spent)
- Device information (operating system, device type)
- Feature usage patterns and interactions
- Performance data and error logs
2.5 Form Submissions
When you submit forms on our website (demo requests, contact forms, newsletter signups), we collect the information you provide, including name, email, company, and any message content.
3. Information We Collect - Chrome Extension
This section applies specifically to our Chrome extension "248 | Recruiter Connector".
3.1 LinkedIn Authentication Cookies
To connect your LinkedIn account to our service, our extension accesses the following authentication cookies stored in your browser when you are logged into LinkedIn:
- li_at cookie: LinkedIn authentication token required for account connection
- li_a cookie: LinkedIn Recruiter/Sales Navigator authentication token (if available and if you have a premium LinkedIn account)
These cookies are only accessed from LinkedIn domains (.linkedin.com) and are used solely for authentication purposes. We do not access, read, or modify any other cookies from your browser or any other websites.
3.2 Browser Information
When you use our Chrome extension, we collect:
- User Agent: Your browser's user agent string, which is required for proper authentication with LinkedIn's systems
- Extension Version: For support and troubleshooting purposes
3.3 LinkedIn Account Information
When you connect your LinkedIn account, we may receive and store:
- Profile picture URL
- First name and last name (if provided by LinkedIn)
This information is stored locally in your browser and is also transmitted to our backend servers to maintain your account connection.
3.4 What the Extension Does NOT Collect
Our extension does NOT collect:
- Your browsing history
- Page content from websites you visit
- URLs of pages you visit (except for LinkedIn authentication)
- Contact information from web pages
- Any data from websites other than LinkedIn authentication cookies
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our platform and services
- Process and enrich lead data to help your sales team
- Generate sales intelligence reports about businesses
- Send email campaigns through Outbounder on your behalf
- Respond to inbound leads through Inbounder
- Connect your LinkedIn account to the 248 | Recruiter service (Chrome extension)
- Respond to your inquiries and provide customer support
- Improve and personalize your experience
- Analyze usage patterns to improve our Services
- Detect, prevent, and address technical issues and security vulnerabilities
- Comply with legal obligations
5. Data Storage and Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.
5.1 Local Storage (Chrome Extension)
The following information is stored locally in your browser using Chrome's local storage API:
- Your account ID
- Profile picture URL
- First name and last name
- Last sync timestamp
This data remains on your device and is not accessible to other extensions or websites.
5.2 Backend Storage
Your authentication cookies and user agent are transmitted securely (HTTPS) to our backend servers hosted by DigitalOcean. This data is:
- Encrypted in transit using HTTPS
- Stored securely on our servers
- Used exclusively for maintaining your LinkedIn account connection
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your consent: When you explicitly agree to share your information
- Service providers: With trusted third-party service providers who assist us in operating our extension and services (e.g., hosting providers like DigitalOcean)
- Legal requirements: When required by law, court order, or governmental authority
- Business transfers: In connection with a merger, acquisition, or sale of assets
- Protection of rights: To protect our rights, property, or safety, or that of our users or others
We do not share your LinkedIn authentication cookies with any third parties except as necessary to provide our service.
7. Third-Party Services
Our extension integrates with:
- LinkedIn: We access LinkedIn authentication cookies to connect your account. LinkedIn's privacy practices are governed by their own privacy policy.
- Unipile: Our backend service may integrate with Unipile for LinkedIn account management. This integration is handled server-side and does not expose your data to additional third parties.
We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before using our service.
8. Data Retention
We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:
- Authentication cookies are retained as long as your account is connected
- Account information is retained until you disconnect your account
- When you disconnect your account, we will delete your stored authentication data
- Local storage data can be cleared by disconnecting through the extension
When we no longer need your information, we will securely delete or anonymize it.
9. Your Rights and Choices
You have the following rights regarding your personal information:
- Disconnect: You can disconnect your LinkedIn account at any time through the extension, which will stop the collection and syncing of cookies
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Data portability: Request a copy of your data in a structured, machine-readable format
- Withdraw consent: Withdraw consent by disconnecting your account
To exercise these rights, please contact us using the information provided below or disconnect your account through the extension interface.
10. Children's Privacy
Our extension is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.
12. California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt-out of the sale of personal information (we do not sell personal information)
- The right to non-discrimination for exercising your CCPA rights
13. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR), including those outlined in Section 9 above. Our legal basis for processing your information includes:
- Consent: When you connect your LinkedIn account, you provide explicit consent for us to access and use your authentication cookies
- Contract: When processing is necessary to perform the service you have requested
- Legal obligation: When we must comply with legal requirements
- Legitimate interests: When processing is in our legitimate business interests and does not override your rights
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our extension after changes are posted constitutes your acceptance of the revised policy.
15. Cookie Policy (Chrome Extension)
Our extension accesses LinkedIn authentication cookies (li_at and li_a) stored in your browser when you are logged into LinkedIn. These cookies are:
- Read from your browser's cookie storage (only from .linkedin.com domains)
- Transmitted securely (HTTPS) to our backend servers
- Used exclusively for connecting your LinkedIn account to the 248 | Recruiter service
- Synced periodically (every 30 minutes) to maintain your account connection
- Not shared with any third parties except as necessary to provide our service
We do not access, read, or modify any other cookies from your browser. The extension only accesses cookies from LinkedIn domains (.linkedin.com).
You can disconnect your account at any time through the extension, which will stop the collection and syncing of these cookies. Disconnecting will also clear locally stored account information.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
248.ai
Email: uzair.qarni@248.ai
Address: 151 10th street, San Francisco, California, United States
We will respond to your inquiry within 30 days.