Andrew Tracker Capture Privacy Policy
Last updated: 2026-11-12
What the extension is
Andrew Tracker Capture is the browser extension for Andrew's tracker. It puts Andrew's icon on LinkedIn pages and in Gmail. On a LinkedIn profile or conversation you can log a touch, capture the conversation on your screen, save a file from that conversation to the person's documents with one press, record a check size, set the person's stage and next follow-up date, or add the person to your tracker without leaving the page; on an open Gmail conversation you can log its messages to your tracker and send one of the people on it to your tracker, with the conversation filed on them. It acts only when you press the icon. It has no automation: it never browses, searches, messages, scrapes or collects anything on its own.
What it reads, and when
Nothing is read until you press the icon. When you press it on a profile, the extension reads the name, the headline, the current position (title and company) and the profile URL visible on your screen. When you press it in a conversation, it reads the other party's name, headline and profile link. When you press Capture this conversation, it also reads the name and size of each file shown in that conversation; a file itself is read only when you press Save to Andrew on its row (see Saving a file from a conversation). It never reads search results, other tabs, or anything in the background, and it never reads pages in bulk.
Andrew never reads a conversation on its own: only what you paste into the panel, or the messages on your screen when you press Capture this conversation, is logged.
When you press the icon on the profile of a person your tracker already holds by their LinkedIn profile, the title, company and headline read at that press go to Andrew with the lookup. Andrew copies the title and the company onto the contact only where the contact has no role or no company recorded, and keeps the headline as a note only where the contact has none. It never replaces a role or a company the contact already holds: when one differs from the profile, the panel shows what LinkedIn shows and changes nothing unless you press Update. A person your tracker matched by name alone gets nothing from the look.
What you type or paste, and the fields read off the page when you press the icon, are sent to your own Andrew account on your own signed-in session, as your own browser tab would send them, and are stored there as part of your tracker.
How it talks to Andrew
A press makes a few requests to Andrew. The only time the extension asks anything of anyone else is when you press Save to Andrew on a file: it then asks LinkedIn for that file (see Saving a file from a conversation). First a lookup asks whether your tracker already holds the person on your screen (by profile and name on LinkedIn, by email address in Gmail), and Andrew answers with their card and which tracker lenses you may add them to. If you link a profile to a contact you already hold, a search over your own tracker finds the candidates. In Gmail, before anyone is listed, a check asks which of the addresses on the conversation are your company's own, so you are never offered yourself. Then the action you choose (a touch, an added contact, a link, a check size, a stage, a follow-up date, a role and company update, a captured conversation, a file you pressed Save to Andrew on, or the removal of a file you just saved) is its own request.
Every one of these requests carries its personal data (a name, an email address, a profile URL, a message, a note or a file) in the request body, never in the request's address. A web address is written into hosting and access logs; a request body is not. The extension refuses to build a request with such data in its address.
Capturing a conversation
On an open conversation the panel offers Capture this conversation. When you press it, the extension reads the messages on your screen at that moment (who sent each one, when LinkedIn says it was sent, and its text) and sends them, in the body of a request, to your own Andrew account, where each becomes a logged touch on that person, dated as LinkedIn showed it. One thread, only when pressed: to capture older messages you scroll up and press again.
It never reads your inbox in the background, never reads a thread you are not looking at, and keeps no copy of any message: the extension stores none of it. A message already logged (same person, same time, same opening words) is skipped, not logged twice. What was captured lives in your tracker, where you can delete it.
Saving a file from a conversation
When you press Capture this conversation, the panel also lists the files shown in that conversation, by name and size. Nothing of a file's content is read at that point. When you press Save to Andrew on a file's row, the extension presses LinkedIn's own Download button for that file, so LinkedIn starts an ordinary download of it in your browser. The file also lands in your Downloads folder, as any LinkedIn download does.
The extension then finds that download. It looks at your browser's downloads only for a few seconds after your press, and only at downloads that started after the press and came from linkedin.com. It takes the download only when its name and its size match the row you pressed. It fetches that file from LinkedIn, from the address the download used, with your own signed-in LinkedIn session, and sends it, in the body of a request, to your own Andrew account, where it is stored in Documents and linked to that contact, under the same file type and size limits as any other upload in Andrew. The row then says Saved to Documents and offers Undo, which removes that document from Andrew.
Nothing is saved without that press. A download you start yourself, on LinkedIn or anywhere else, is never looked at and never sent: the extension does not watch your downloads, it looks only in the moments after you press Save to Andrew. It never cancels, opens, moves, renames or deletes a download, never reads a file from the folders of your computer, and keeps no copy of the file and no list of your downloads.
If the file cannot be saved this way (LinkedIn started no download, the download is not the row's file, or LinkedIn refused the fetch), the panel says so, sends nothing, and offers the other way: you choose the downloaded file in your browser's own file window. The extension then reads only the one file you choose, compares its name and size with the row, and, if either differs, shows you both and sends nothing unless you confirm.
In Gmail
Nothing is read until you press the icon on an open conversation. When you press, the extension expands that conversation's collapsed messages and reads every message in it: who it is from, who it went to and who was copied (names and email addresses), when Gmail says it was sent, Gmail's own identifiers for the conversation and its messages, its subject and link, and the written text of each message with the quoted history Gmail marks removed. It reads this so that each message is logged on your tracker, on the page of every person on the conversation who is in your tracker. That is the reason the extension exists in Gmail. It never reads an attachment, never reads another conversation (one you opened earlier and Gmail still holds in the page is not read), never reads your inbox, and never runs in the background.
Before the people are listed, the extension asks Andrew which of the addresses on the conversation are your company's own, so it never offers you to yourself; when you choose a person it asks Andrew whether your tracker already holds that address. You choose one person from the people on the conversation, choose whether they are an investor, a customer or a candidate, and may write a note. The person, the note and the messages then go to your own Andrew account on your own session, in the body of that request; the addresses, names and messages are never put in a request's address. If your tracker already holds that email address, the conversation is filed on that contact and no second contact is made; if not, the contact is created. The messages land in your tracker the way mail from a connected mailbox does: a message your connected mailbox already synced is matched (by Gmail's id, or by sender, time and subject) and never stored twice, and pressing again on the same conversation adds only what is new.
The permissions it asks for
The extension asks for exactly three host permissions and no others.
https://www.linkedin.com/*: to place the icon on LinkedIn pages and, when you press it, to read the profile or the conversation on your screen; and, when you press Save to Andrew on a file in a conversation, to fetch that file from LinkedIn with your own signed-in LinkedIn session.
https://mail.google.com/*: to place the icon in Gmail and, when you press it on an open conversation, to read the messages of that conversation (who each is from, to and copied to, when it was sent, and its written text with quoted history removed), so they are logged on the tracker page of each person on it, and you can send one of those people to your tracker. It reads only the conversation on your screen, only when you press, never an attachment, never another conversation, never your inbox in the background.
https://app.agentandrew.ai/*: so that every request the extension sends to Andrew carries your own signed-in session cookies. The extension holds no token of its own, and each request puts personal data in its body, never in its address.
It asks for exactly one API permission and no others: no storage, no cookies, no tabs, no history, no identity.
downloads: to find the download that starts when you press Save to Andrew on a file in a LinkedIn conversation. Chrome describes this permission as "Manage your downloads". The extension uses it only to look, for a few seconds after that press, at downloads that started after the press and came from linkedin.com. It never looks at your downloads at any other time, and it never cancels, opens, moves, renames or deletes a download.
What it stores
One thing, in your browser only: where you dragged the icon on the page, so it stays where you put it. Nothing else is stored by the extension: no token, no credential, no copy of any page.
What it does not do
No data is sold. No data is shared with, or sent to, any third party. The extension sends what it reads to no service other than Andrew, and to Andrew only through your own signed-in session; the only thing it asks of LinkedIn is the file you press Save to Andrew on. Removing the extension removes it entirely; what you logged stays in your Andrew tracker, where you can delete it.
Questions
Write to hello@agentandrew.ai. This policy was last updated on 2026-11-12.