Privacy Policy

Scotty Bug Reporter Chrome Extension  ·  Last updated: 20 Jul 2026

1. Overview

Scotty Bug Reporter is a Chrome extension built and operated by WarpDrive Tech Works LLP ("we", "us", "our"). It has two distinct features:

• A bug reporting tool that lets authorised users capture and report bugs directly from any web page into the Scotty project management platform.
• A LinkedIn Candidate Importer that lets authorised recruiters (Talent Acquisition users) import a candidate's public LinkedIn profile into Scotty's applicant tracking system (ATS) as part of their hiring workflow.

This policy explains what data each feature collects, why, how it is stored, and your rights. Section 3 covers the bug reporter. Section 4 covers the LinkedIn Candidate Importer — note that this feature processes personal data belonging to a different person than the extension's user: the candidate whose profile is being imported, who has not installed this extension and may not be aware it was used.

2. Who can use this extension

Access is invite-only. The extension only activates for users whose email address has been explicitly added to a project (bug reporter) or an organisation's recruiting team (Candidate Importer) by a WarpDrive project manager or org admin. Unrecognised emails are blocked at verification.

3. Data we collect — Bug Reporter

Data	Why it is collected	Stored where
Email address	To verify that you are an authorised reporter for a project	Scotty database (PostgreSQL on AWS RDS)
Session token	To keep you logged in for up to 90 days without re-entering your email	Browser local storage (extension only) and Scotty database
Page URL	To identify which page the bug was found on	Scotty database, attached to the bug report
Screenshot	To visually document the bug at the time it was reported	Google Drive (WarpDrive service account folder)
Pin coordinates	To record exactly where on the page the user clicked to report the bug	Scotty database, attached to the bug report
Element selector & text	To identify the specific DOM element the bug relates to	Scotty database, attached to the bug report
Browser & OS info	To help developers reproduce the bug in the same environment	Scotty database, attached to the bug report
Bug title & description	User-entered text describing the bug	Scotty database, attached to the bug report

We do not collect passwords, payment information, browsing history, or any data from pages unrelated to an active bug report.

4. Data we collect — LinkedIn Candidate Importer

When a recruiter uses this feature on a LinkedIn profile page, the extension reads the following data about the candidate whose profile is open — not about the recruiter using the extension:

Data	Why it is collected	Stored where
Name, headline, location	To create the candidate's record in Scotty's ATS	Scotty database (PostgreSQL on AWS RDS)
Work experience & education history	To build a resume PDF and assess role fit	Scotty database; generated PDF stored on Microsoft SharePoint/OneDrive
Skills	To assess role fit and suggest relevant open roles	Scotty database
Profile photo	Included in the generated resume PDF	Microsoft SharePoint/OneDrive; referenced from the Scotty database
Email address (when visible/discoverable on the profile)	To create the candidate record and, only if the recruiter opts in, to send a notification that they were added to a hiring pipeline	Scotty database
Full scraped profile text	Sent to a third-party AI service to fill in any of the above fields the page structure alone couldn't reliably capture	Cached temporarily (up to 30 days) in the Scotty backend's Redis cache; not retained by the AI provider beyond the individual request per that provider's own policy

We do not use this feature to scrape LinkedIn profiles in bulk, automatically, or without a specific recruiter action on a specific profile page.

5. How data is used

• Bug reports are visible only to members of the specific Scotty project the bug was filed against.
• Screenshots are stored in a private Google Drive folder accessible only to the WarpDrive service account and authorised project members.
• Email addresses (bug reporter users) are used solely for access verification and invite notifications — we do not send marketing emails.
• Session tokens expire after 90 days and are invalidated when a user's access is revoked by a project manager.
• Candidate data imported via the LinkedIn Candidate Importer is visible only within the recruiting organisation that performed the import, and is used solely for that organisation's own hiring process.
• A candidate notification email is sent only if the importing recruiter explicitly opts in and the system has a directly-observed (not AI-inferred) email address for that candidate — added specifically to avoid contacting the wrong person from an AI misread.

6. Third-party services

• Google Drive Screenshots (bug reporter) are uploaded to Google Drive using a WarpDrive service account. Google's privacy policy applies: policies.google.com/privacy
• Firebase Internal WarpDrive team members authenticate via Firebase Authentication. Firebase's privacy policy applies: firebase.google.com/support/privacy
• AWS RDS The Scotty database runs on Amazon RDS (ap-south-1 region). AWS's privacy policy applies: aws.amazon.com/privacy
• AI providers (Groq / OpenAI-compatible) Scraped LinkedIn profile text is sent to a third-party AI provider, configured by the recruiting organisation, to extract structured candidate data. We do not control that provider's own data retention — see their respective privacy policies.
• Microsoft SharePoint/OneDrive Generated resume PDFs and candidate profile photos are uploaded to the recruiting organisation's own Microsoft 365 storage. Microsoft's privacy policy applies: privacy.microsoft.com/privacystatement
• LinkedIn The Candidate Importer reads data directly from LinkedIn profile pages the recruiter is already viewing in their own logged-in browser session. LinkedIn's own user agreement and privacy policy govern the underlying page content: linkedin.com/legal/privacy-policy

7. Data retention

• Bug reports are retained as long as the associated Scotty project is active.
• Session tokens expire after 90 days or when access is revoked, whichever comes first.
• Screenshots in Google Drive are retained until manually deleted by a project manager.
• Scraped LinkedIn profile text, and the AI-extracted data derived from it, is cached for up to 30 days to avoid re-processing the same profile repeatedly, then automatically expires.
• Imported candidate records (name, resume, application history) are retained as long as the recruiting organisation's Scotty account is active, the same as any other candidate added to their ATS.
• You may request deletion of your data at any time by contacting us (see Section 9).

8. Data security

• All communication between the extension and the Scotty backend is over HTTPS.
• Screenshots are served through an authenticated backend proxy — direct Drive links are not shared publicly.
• Session tokens are unique, unguessable (256-bit random), and expire automatically.
• Access to bug reports, and to imported candidate records, is scoped per project/organisation — users cannot see data belonging to a different project or a different recruiting organisation.

9. Your rights

If you are an extension user (bug reporter, or a recruiter using the Candidate Importer), you have the right to:

• Request a copy of the data we hold about you
• Request deletion of your email address and associated session tokens
• Ask a project manager or org admin to remove your access at any time

If you are a candidate whose LinkedIn profile was imported by a recruiter using this extension, you have the right to:

• Request a copy of the data held about you in the recruiting organisation's Scotty account
• Request correction or deletion of that data

Because candidate data is imported and controlled by the specific recruiting organisation you applied to (or were sourced by), we may need to direct your request to that organisation to act on. Contact us and we will help route it correctly.

To exercise any of these rights, email us at privacy@warpdrivetech.in. We will respond within 7 business days.

10. Children's privacy

This extension is intended for use by professionals on work projects, and its Candidate Importer feature is intended only for adult job candidates in a professional hiring context. We do not knowingly collect data from anyone under the age of 18.

11. Changes to this policy

We may update this policy as the extension evolves. Material changes will be communicated via the Chrome Web Store update notes. The "last updated" date at the top of this page always reflects the current version.

12. Contact

WarpDrive Tech Works LLP
Email: privacy@warpdrivetech.in
Website: scottybackend.warpdrivetech.in