Privacy Policy

1. What this extension does

The Sourcing Engine Connector is a Chrome extension built exclusively for authorised users of The Sourcing Engine platform. It connects your own LinkedIn session in this browser to your workspace on The Sourcing Engine, so that the LinkedIn information you ask for is fetched in your own browser, with your own LinkedIn session, and saved to your workspace. It does three things:

• Connects your LinkedIn session — it sends your LinkedIn session cookie to your workspace, and sends it again when LinkedIn renews it.
• Add to TSE — it adds a button to LinkedIn profile pages that imports the profile into your workspace, and shows when the person is already in it.
• Work you start in the platform — when you import a LinkedIn profile, reveal a candidate's contact details or run a Sales Navigator search from your workspace, the extension fetches that information from LinkedIn and sends it to your workspace.

2. Data the extension handles

• Authentication information — your LinkedIn session cookie (li_at), sent to your workspace, which stores it encrypted; LinkedIn's JSESSIONID cookie, used only inside your browser as the security token LinkedIn requires on its own requests and never sent to our servers; and your workspace's own session cookie, used only to identify you to that same workspace.
• Profile data you import — when you add a LinkedIn profile to your workspace, with the button or by importing a profile address in the platform, the extension fetches LinkedIn's answer for that profile in your own session and sends it to your workspace. Your workspace keeps the details below, as far as the person has filled them in and LinkedIn shows them to you, and discards the rest of LinkedIn's answer:
  • Profile — name, headline, "About" text, location, industry, profile address, number of connections and followers, and whether the person shows "Open to Work".
  • Experience — for each role: job title, company and the company's link, employment type, location, whether the role is remote, start and end dates, and description.
  • Education — school, degree, field of study, dates, grade, activities and societies, and description.
  • Licences and certifications — name, issuing organisation, issue and expiry dates, credential ID and credential link.
  • Skills and languages — each skill with its number of endorsements, and each language with its proficiency.
  • Other sections — volunteer work (role, organisation, cause, dates, description); projects (title, dates, link, description); publications (title, publisher, date, link, description); honours and awards (title, issuer, date, description); courses (name, number, the employer they are linked to); organisations (name, position, dates, description); patents (title, number, pending or issued, date, link, description); and test scores (name, score, date, description).
  • A record of the import — which profile was added, by whom, and when.
• Sales Navigator results — the name, title, company, location and profile link shown in the Sales Navigator search results your workspace asks for.
• Contact details you ask to reveal — the email address, phone number, websites, Twitter handle and birthday (day and month; LinkedIn does not share the year) that LinkedIn shows you for that person, usually only for your 1st-degree connections, and the date you revealed them. They are added only where your workspace has nothing yet: an email address or phone number already saved for that person is never overwritten.
• LinkedIn profile addresses you visit — when you open a LinkedIn profile page, its address is sent to your workspace to show whether that person is already in it. It is used only for that check and is not saved.
• Time zone and language — your browser's time zone and language setting are sent with your LinkedIn session cookie, and stored with it, to choose the country of the proxy service the platform uses with that cookie (see section 3).
• Connection settings — your workspace address and connection token, stored locally on your device.

3. How data is used

Everything the extension collects is sent over HTTPS to one place only: the workspace on thesourcingengine.io that you connected it to. There it is used for the recruitment work you do in that workspace.

Your LinkedIn session cookie is stored encrypted. Profiles, contact details and Sales Navigator results are always fetched in your own browser, never with the stored cookie. The platform uses the stored cookie once, when it first receives it: it opens LinkedIn from its own servers, through a proxy service, to see which LinkedIn products your account has (for example Sales Navigator) and to note the name on your LinkedIn account.

The extension does not:

• Read cookies other than the three listed above.
• Read pages other than LinkedIn profile pages and the Sales Navigator result pages your workspace asks for.
• Send data anywhere except your own workspace (and LinkedIn, for LinkedIn's own requests).
• Use analytics, tracking, or advertising services of any kind.
• Sell or transfer data to third parties, use it for anything other than connecting LinkedIn to your workspace, or use it to determine creditworthiness or for lending.

While you act as another user in the platform (for example when an administrator views the platform as a colleague), the extension pauses: it sends nothing and fetches nothing under that other person's name.

4. Data storage

Connection settings (workspace address and connection token) are stored locally on your device using chrome.storage.local. They are not synced across devices and are not accessible to any website or third party. Removing the extension from Chrome deletes them.

Data sent to your workspace is stored and managed by the platform on behalf of your organisation. To have your stored LinkedIn session or other data removed, contact your platform administrator.

5. Permissions used

6. Who can use this extension

This extension is intended exclusively for authorised users of The Sourcing Engine platform. It only works after you connect it to your workspace from within the platform; until then it sends nothing.

7. Contact

For questions about this privacy policy or the extension, please contact your platform administrator or reach out via the feedback form inside The Sourcing Engine platform.