Privacy Policy
Last updated: July 22, 2026
This Privacy Policy describes how the One Assessment - LinkedIn Recruitment browser extension ("Extension", "we", "our") collects, uses, and protects your information.
This Policy at a Glance
- What the Extension does: while you browse LinkedIn with the Extension active, it collects publicly visible profile information, which you can access in your company's One Assessment workspace.
- Who is responsible: your company's One Assessment workspace is the data controller for candidate data; One Assessment processes that data on your company's behalf, as its processor.
- Your consent: before signing in, you accept this Policy and the data processing terms by ticking a checkbox. You can withdraw consent at any time by unticking the box or removing the Extension.
- What we never collect: your LinkedIn login credentials, your private LinkedIn messages, and your browsing outside of LinkedIn.
- No selling of data: data is not sold, traded, or shared with third parties beyond your organization's One Assessment account, except where required by law.
- Where data lives: data is hosted on servers located in the European Union. The Extension does not use cookies.
- Questions or requests: contact your workspace administrator or use our contact form.
1. Scope and Definitions
This Policy covers the One Assessment - LinkedIn Recruitment browser extension. The Extension and the One Assessment platform are operated by Analytica One ltd (operating as One Assessment). This Policy is provided in line with the transparency requirements of Article 13 of the General Data Protection Regulation ("GDPR").
In this Policy:
- "Extension" means the One Assessment - LinkedIn Recruitment browser extension.
- "Platform" means the One Assessment recruitment platform.
- "Workspace" means your company's One Assessment account on the Platform.
- "You" means the recruiter who uses the Extension in a professional capacity.
- "Candidate" means a LinkedIn member whose publicly visible profile information is collected through the Extension.
2. Roles: Controller and Processor
When you use the Extension, three parties are involved:
- You, the recruiter, use the Extension in a professional capacity.
- Your company's One Assessment workspace is the data controller for candidate data collected through the Extension: it determines why and how that data is used.
- One Assessment operates the Extension and the Platform and processes candidate data on your company's behalf, as its processor.
3. Information We Collect
3.1 LinkedIn Profile Data (Candidates)
When you use the Extension on LinkedIn, we collect publicly visible profile information including:
- Name and profile URL
- Job title and company
- Profile photo URL
- Work experience and education (as displayed on LinkedIn)
- Skills listed on the profile
While you browse LinkedIn with the Extension active, it analyzes in the background the publicly visible profiles you visit, which you can access in your workspace.
3.2 User Settings and Usage Data (You)
We store your Extension preferences locally and process usage data, including:
- Authentication tokens for One Assessment platform
- Extension settings and preferences
- Usage analytics: features used and daily usage counters
- Your browsing activity on linkedin.com and actions performed through the Extension (saving profiles, adding notes, connection request automation where you enable it)
3.3 Information We Do NOT Collect
- Your LinkedIn login credentials
- Private LinkedIn messages - the Extension does not read, analyze, or collect messages you send to other LinkedIn users
- Your browsing history outside of LinkedIn
- Personal files from your computer
4. How We Use Information
The collected information is used to:
- Send LinkedIn profiles to your One Assessment recruitment dashboard
- Check if a profile already exists in your candidate database
- Display profile status indicators on LinkedIn pages
- Facilitate connection request automation (when enabled by user)
- Operate, secure, and improve the service (usage analytics)
5. Legal Bases for Processing
| Data |
Purpose |
Legal basis |
| Your data as an Extension user: settings, usage analytics, and your LinkedIn browsing and actions performed through the Extension |
Operate, secure, and improve the service; provide the Extension's features |
Your consent under Article 6(1)(a) GDPR, given by ticking the consent checkbox before signing in. You may withdraw it at any time (see Sections 9 and 15). |
| Candidate profile data: publicly visible LinkedIn profile information |
Recruiter-initiated candidate sourcing for your company |
Your company's legitimate interest under Article 6(1)(f) GDPR. Your company is the controller. Candidates are not asked for consent, and consent is not the legal basis for processing their data. |
6. How Information Is Shared
We do not sell, trade, or share your data with third parties except:
- With your organization's One Assessment account (as intended functionality)
- With service providers (subprocessors) that help us operate the service; these include Cloudflare (network infrastructure and security)
- When required by law or legal process
7. Data Storage and Security
7.1 Local Storage
User preferences and authentication tokens are stored locally in your browser using Chrome's secure storage API.
7.2 Server Storage
LinkedIn profile data is transmitted to and stored on One Assessment servers (oneassessment.com). This data is:
- Hosted on servers located in the European Union
- Encrypted in transit using HTTPS/TLS
- Stored securely on our servers
- Accessible only to authorized users in your organization
7.3 Cookies
The Extension does not use cookies.
8. Data Retention
Candidate and usage data is retained in accordance with your company workspace's data retention policy, as configured by your company as controller. One Assessment retains data only on the company's instructions. For applicable retention periods, consult your workspace administrator.
9. Your Rights as an Extension User
As an Extension user, you have the right to:
- Access - Request a copy of data stored about you
- Rectification - Request correction of inaccurate data
- Deletion - Request deletion of your data from our servers
- Restriction - Request that processing of your data be restricted
- Objection - Object to processing of your data
- Data Portability - Export your data in a standard format
- Withdraw Consent - Withdraw your consent at any time by unticking the consent checkbox on the login screen or by removing the Extension from your browser. Because the processing described in this Policy is essential to how the Extension works, withdrawing consent means the Extension can no longer be used. Withdrawal does not affect the lawfulness of processing carried out before it (Article 7(3) GDPR).
- Complaint - Lodge a complaint with your supervisory authority
To exercise these rights, contact your workspace administrator or reach us through the channels listed in Section 14.
10. Information for LinkedIn Members Whose Profiles Are Collected
If your LinkedIn profile has been collected through the Extension:
- Only publicly visible profile information is collected.
- The company using the Extension is the data controller for your data and processes it on the basis of its legitimate interest in recruiter-initiated candidate sourcing under Article 6(1)(f) GDPR.
- That company, as controller, remains responsible for your rights and for transparency toward you.
You may direct requests concerning your data to the company that collected your profile, or reach One Assessment through the channels listed in Section 14.
11. Chrome Permissions Explained
The Extension requires certain browser permissions:
| Permission |
Why the Extension needs it |
| storage |
To save your preferences and authentication tokens locally |
| identity |
To enable secure Google and Microsoft single sign-on (SSO) |
| webNavigation |
To detect when you navigate to LinkedIn profiles |
| Host access: linkedin.com |
To read publicly visible LinkedIn profiles |
| Host access: oneassessment.com |
To communicate with One Assessment servers |
12. Children's Privacy
This Extension is intended for business use by recruitment professionals. We do not knowingly collect data from children under 16.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify users of significant changes through the Extension or via email.
15. Consent
By installing and using this Extension, you consent to the collection and use of information as described in this Privacy Policy. Before signing in, the Extension asks you to confirm, by ticking a checkbox, that you have read and agree to this Privacy Policy and the data processing terms; those terms are set out in full in the Appendix below.
Appendix: LinkedIn Data Processing Consent
These are the data processing terms you accept via the consent checkbox shown before sign-in. Last updated: July 20, 2026.
1. Who is involved, and in which role
When you use the One Assessment - LinkedIn Recruitment extension ("Extension"), three parties are involved. You, the recruiter, use the Extension in a professional capacity. Your company's One Assessment workspace is the data controller for candidate data collected through the Extension: it determines why and how that data is used. One Assessment operates the Extension and the platform and processes candidate data on your company's behalf, as its processor. This notice is provided to you in line with the transparency requirements of Article 13 GDPR.
2. What you are consenting to
By ticking the consent box, you give your consent under Article 6(1)(a) GDPR, as the Extension's user, to the following processing of your data:
(a) Usage analytics. The Extension collects information about how you use it, such as features used and daily usage counters, in order to operate, secure, and improve the service.
(b) Passive profile capture. While you browse LinkedIn with the Extension active, it analyzes in the background the publicly visible LinkedIn profiles you visit and adds them to your company's One Assessment candidate database. You can access these profiles in your workspace.
(c) Your LinkedIn browsing and actions. The Extension processes your browsing activity on linkedin.com, meaning the profiles and pages you visit, and the actions you perform on LinkedIn through the Extension, such as saving profiles, adding notes, and connection request automation where you enable it.
The Extension does not track your browsing outside of linkedin.com and never collects your LinkedIn login credentials.
3. What the Extension does not read: your messages
The Extension does not read, analyze, or collect messages you send to other LinkedIn users. The content of your LinkedIn conversations is never accessed, stored, or transmitted to One Assessment.
4. Candidate data and its legal basis
Candidates whose profiles are captured are not asked for consent, and consent is not the legal basis for processing their data. Your company processes candidate profile data on the basis of its legitimate interest in recruiter-initiated candidate sourcing under Article 6(1)(f) GDPR. Your company, as controller, remains responsible for candidates' rights and for transparency toward them. Only publicly visible profile information is collected.
5. Data categories
- Candidate profiles: name, profile URL, job title and company, profile photo URL, work experience, education, and skills, as displayed on LinkedIn
- Your usage data: Extension settings and preferences, features used, and daily usage counters
- Your activity data: LinkedIn profiles and pages visited with the Extension active, and actions performed through the Extension
- Technical data: authentication tokens for the One Assessment platform, stored locally in your browser
6. Storage and security
Preferences and authentication tokens are stored locally in your browser using Chrome's secure storage. Profile data is transmitted to One Assessment servers (oneassessment.com), encrypted in transit using HTTPS/TLS, stored securely, and accessible only to authorized users in your organization. Data is not sold, traded, or shared with third parties beyond your organization's One Assessment account, except where required by law.
7. Retention
Candidate and usage data is retained in accordance with your company workspace's data retention policy, as configured by your company as controller. One Assessment retains data only on the company's instructions. For applicable retention periods, consult your workspace administrator.
8. Your rights
You may request access to your data, rectification, deletion, restriction of processing, objection, and data portability by contacting the address below or your workspace administrator. You also have the right to lodge a complaint with your supervisory authority.
9. Withdrawing your consent
You may withdraw your consent at any time by unticking the consent box on the login screen or by removing the Extension from your browser. Because the processing described above is essential to how the Extension works, withdrawing consent means the Extension can no longer be used. Withdrawal does not affect the lawfulness of processing carried out before it (Article 7(3) GDPR).
10. Contact
For privacy questions or to exercise your rights, contact your workspace administrator or reach One Assessment through the contact form at oneassessment.com/en/contact.