Scope and controller
Reddot AI operates Reddot and is the controller of personal information processed for the Reddot service. This policy applies to red-dot.ai, the Reddot Chrome extension, the Reddot demo, the Reddot application programming interface, and support communications.
Reddot is not affiliated with, sponsored by, or endorsed by LinkedIn or any other social network. Those services have their own terms and privacy practices.
Reddot does not request your social network password, does not sell personal information, does not serve advertising, and does not use your information for targeted advertising.
Information we collect
We limit collection to information needed to identify the profile connected to an extension installation, display a chosen signal, maintain user controls, protect the service, and provide support. On a new installation, profile detection, local profile storage, and synchronization remain paused until you review the in-extension disclosure and select “Enable Reddot.”
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Profile information | Public profile path, profile slug, displayed name, and profile image URL | Detected from the social network page open in your browser | Connect the extension to the correct profile and display signals beside the correct profile |
| Signal and visibility choices | Open to love, open for coffee, open to partnership, status update time, and whether your signal is visible | Your direct action in the extension or demo | Provide the core Reddot feature and respect your visibility choice |
| Installation information | Random installation identifier, hashed authentication token, extension version, creation time, and last activity time | Generated when the extension connects to Reddot | Authenticate requests, prevent unauthorized changes, and maintain service reliability |
| Technical and security information | Internet Protocol address used for rate limiting, request time, error information, and basic server logs | Your browser, network, and hosting infrastructure | Secure the service, prevent abuse, diagnose failures, and maintain availability |
| Optional website analytics | Page views, session activity, approximate location, browser type, and device type | Google Analytics, only after you accept analytics on red-dot.ai | Understand aggregate website use and improve the website and demo |
| Optional extension analytics | A separate random analytics identifier, extension version, and allowlisted events for opening the popup or updating a signal or visibility setting | The Chrome extension, only after you select “Allow analytics” in its Cookie settings | Understand aggregate feature use and improve extension reliability and usability |
| Support information | Email address, message content, and information you choose to provide | You | Respond to questions, rights requests, and support issues |
Information stored on your device
After you select “Enable Reddot,” the extension uses Chrome local storage and IndexedDB on your device to keep the installation token, current profile reference, recently detected profile information, pending synchronization records, short lived status lookup results, and your essential-data and analytics preferences. If you allow extension analytics, it also creates a separate random analytics identifier. Selecting “Essential only” removes that analytics identifier and stops future analytics events. This local information supports faster operation and is not a browser cookie.
Information we do not collect
We do not ask for or collect your social network password, private messages, contact list, payment card details, precise geolocation, browsing history outside supported Reddot pages, or the content you type into unrelated websites. Optional extension analytics never include your public profile name or path, profile image, selected signal, page URL, page content, or browsing history.
How we use information
- Identify the profile connected to an extension installation.
- Save, update, hide, and display the signal you choose.
- Show signals of other visible Reddot users when your own profile is visible.
- Authenticate extension requests and prevent unauthorized status changes.
- Cache limited lookup results so the service remains fast and scalable.
- Measure aggregate use of the website and demo when you consent to Google Analytics.
- Measure aggregate extension feature use when you separately allow anonymous usage analytics in the extension.
- Detect misuse, enforce rate limits, protect accounts, and secure infrastructure.
- Provide support, respond to privacy requests, and communicate material service or policy changes.
- Comply with law and establish, exercise, or defend legal claims.
We do not use personal information for advertising, credit decisions, employment decisions, data brokerage, or automated decisions that produce legal or similarly significant effects.
Legal bases for processing
Where the European Economic Area, United Kingdom, or similar law applies, we rely on the following legal bases:
- Performance of a contract. We process installation, profile, status, and visibility information to provide the service you request.
- Your consent and affirmative choice. Before profile data is stored or synchronized on a new installation, you review the extension disclosure and select “Enable Reddot.” You then voluntarily select a signal and decide whether it is visible. You may change or hide it at any time.
- Website analytics consent. We use Google Analytics on red-dot.ai only after you select “Accept analytics.” You may withdraw that consent at any time through “Cookie settings.”
- Extension analytics consent. We send only the allowlisted anonymous feature events described above after you select “Allow analytics” inside the extension. You may withdraw consent at any time by opening the extension’s “Cookie settings” and selecting “Essential only.” Website and extension analytics choices are separate.
- Legitimate interests. We process limited technical information to secure, operate, improve, and prevent misuse of Reddot. We balance those interests against your rights.
- Legal obligations. We may process information when necessary to comply with law, lawful process, or enforceable requests.
A romantic or personal availability signal may be considered sensitive in some jurisdictions. Reddot processes that signal only when you intentionally choose it for display. You can replace it, hide it, or request deletion.
Sharing and service providers
We do not sell personal information and do not share it for cross context behavioral advertising. We disclose information only as described below:
- Other Reddot users. Your selected signal and the public profile to which it belongs are visible to extension users when your visibility setting is on.
- Infrastructure providers. Vercel and contracted database, cache, security, and network providers process limited information to host and protect Reddot.
- Analytics provider. Google LLC processes optional website analytics and, under a separate extension consent, limited extension usage events. We configure analytics without advertising personalization or Google Signals. Extension events are transmitted through the Reddot server using Google Analytics Measurement Protocol and do not load Google scripts or cookies in the extension.
- Professional advisers. Lawyers, auditors, insurers, and advisers may receive information when reasonably necessary and subject to confidentiality duties.
- Legal and safety disclosures. We may disclose information when required by law or when reasonably necessary to protect users, Reddot AI, or the public.
- Business transactions. Information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice obligations.
Service providers may use information only to perform services for us and must protect it under contractual or legal obligations.
Your signal is designed to be visible
The purpose of Reddot is to make a selected signal visible beside the corresponding public profile to other Reddot users. A signal may communicate personal intent. Choose a signal only if you are comfortable making it visible in that context.
You control visibility. When visibility is off, other Reddot users do not receive your signal and your installation does not receive the signals of others. Removing the extension from Chrome stops local operation but may not by itself delete server records. You may request deletion at any time.
Retention and deletion
We retain profile, status, visibility, and installation information while needed to provide Reddot, maintain security, resolve disputes, and meet legal obligations. Status records remain until changed, hidden, or deleted. Rate limit records and temporary cache entries are short lived and expire automatically. Optional analytics information is retained according to our configured Google Analytics retention settings and may be retained longer in aggregated or deidentified reports. Your local extension analytics preference remains until you change it or clear extension storage. Support communications are retained only as long as reasonably needed for the request and applicable recordkeeping duties.
When information is no longer needed, we delete or deidentify it. Limited copies may remain temporarily in protected backups or logs until they are overwritten under normal retention cycles. To request deletion, email hello@red-dot.ai. We may ask for information reasonably necessary to verify that the request relates to the correct profile or installation.
Security
Reddot uses administrative, technical, and organizational safeguards designed to protect information. These include encrypted HTTPS transport, restricted extension origins, random installation credentials, server side hashing of authentication tokens, access controls, input validation, rate limiting, protected infrastructure credentials, and limited data collection.
No method of transmission or storage is completely secure. You are responsible for maintaining the security of your browser profile and device. Please contact us immediately if you believe your Reddot installation or information has been compromised.
International data transfers
Reddot AI and its service providers may process information in the United States and other countries where they operate. Those countries may have data protection laws different from the laws where you live.
Where required, we use lawful safeguards for international transfers, such as adequacy decisions, the European Commission Standard Contractual Clauses, the United Kingdom transfer addendum, or another legally recognized mechanism. You may contact us for additional information about applicable safeguards.
Your privacy rights
Depending on where you live, you may have rights to know or access personal information, correct inaccurate information, request deletion, restrict or object to processing, withdraw consent, obtain a portable copy, and appeal a decision regarding a request. You may also have the right to complain to your local data protection authority.
Submit a request to hello@red-dot.ai. Describe the right you wish to exercise and the profile or installation involved. We will not discriminate against you for exercising a privacy right. We may verify your request to protect against unauthorized access or deletion. Authorized agents may submit requests where permitted by law, subject to proof of authority.
We respond within the period required by applicable law. Under the GDPR this is generally within one month. Under the CCPA this is generally within 45 days, subject to permitted extensions.
California privacy notice
This section describes our practices for the preceding 12 months and applies if California law covers your information. The categories collected are identifiers, internet or electronic activity, publicly available professional profile information, user selected preferences, and support communications. We collect these categories from you, your browser, pages you visit where the extension operates, and our infrastructure providers.
We use and disclose these categories for the business purposes described in this policy, including providing the requested service, authentication, security, debugging, customer support, and legal compliance. We disclose them to other Reddot users as directed by your visibility choice and to service providers that support our operations.
Reddot AI has not sold personal information and has not shared personal information for cross context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16.
California residents may request access, correction, deletion, and information about collection and disclosure, and may exercise the right to non discrimination. If our practices change in a way that creates a right to opt out of sale or sharing, we will provide the required mechanism before that activity begins.
Children
Reddot is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 13, or a higher minimum age where local law requires parental consent. If you believe a child has provided information to Reddot, contact us and we will investigate and delete it where required.
Chrome Web Store Limited Use disclosure
Reddot uses information received from Chrome and supported web pages only to provide and improve the single purpose described to users: detecting the profile connected to the extension, saving a user selected signal and visibility preference, and displaying visible Reddot signals beside the correct public profiles. Optional extension analytics are collected only after separate opt in and are limited to a random analytics identifier, extension version, and allowlisted feature events. They do not contain information read from supported web pages.
Reddot complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not transfer this information for advertising, creditworthiness, lending, or sale to data brokers. Humans do not read user data except when the user gives specific permission for support, when necessary for security or abuse investigation, when required by law, or when the data is aggregated and deidentified for internal operations.
Changes and contact
We may update this policy to reflect changes in Reddot, law, or our service providers. We will post the revised policy with a new effective date. If a change materially affects how extension user data is collected, used, or shared, we will provide additional notice or consent where required.
Questions, complaints, and privacy requests may be sent to:
Reddot AI
Reddot Privacy Team
hello@red-dot.ai