SECURITY &
DATA ARCHITECTURE
Our security philosophy is simple: minimize data intake, process ephemerally, and never request privileges beyond what is strictly necessary to analyze public text.
Encryption in Transit
All client-to-server traffic is encrypted using modern TLS (HTTPS) protocols. API tokens and verification hashes are sent over protected headers.
Credential Isolation
AI Feed Lens never interacts with password fields, login cookies, or session secrets. We operate exclusively on rendered public post containers.
Ephemeral Memory Evaluation
Post text is evaluated in volatile memory for feature extraction and immediately garbage-collected. We do not maintain historical archives of post bodies.
Least Privilege Permissions
Our extension manifest explicitly bounds execution to https://*.linkedin.com/*. It cannot read or execute on any other website in your browser.
Responsible Vulnerability Disclosure
We welcome security researchers and community feedback. If you discover a potential vulnerability or security issue in our extension or backend API, please contact us immediately at security@aifeedlens.com.
Please include detailed reproduction steps and do not publicly disclose the issue until our engineering team has verified and deployed a patch.