Edda Chrome Extension — Privacy Policy

Last updated: 30 September 2026

This policy explains how the "Edda – VC & PE CRM" Chrome extension (the "Extension") collects, uses and shares data. The Extension is published by KUSHIM France (10 rue de Penthièvre, 75008 Paris, France) and Kushim, Inc. (2711 Centerville Road, Suite 400, Wilmington, Delaware 19808, USA), together "Edda", "we" or "us".

This policy is part of, and should be read together with, the Edda Privacy Notice (https://edda.co/privacy) and the Edda Terms of Use (https://edda.co/terms), which also apply to your use of the Extension, as does the agreement between Edda and your organisation. Where this policy is more specific about the Extension, it applies.

1. What the Extension does

The Extension is the browser companion of the Edda CRM. It lets signed-in Edda users find, create and update companies and contacts in their Edda workspace from the page they are on (professional profiles, Gmail, Google Calendar, company websites), and highlights companies that are already in their Edda pipelines ("Pipeline Radar"). The Extension only works for users with an Edda account.

2. Data the Extension processes

a. Your Edda account

When you sign in, your email address, password and, if enabled, your two-factor code are sent over HTTPS to Edda to authenticate you. The Extension never stores your password.
After sign-in, the Extension stores an access token, your selected workspace and your data region (EU, US or Asia) in your browser, so you stay signed in.

b. Professional profiles

When you are signed in and view a person’s professional profile page on a supported website, the Extension sends the main content of that page and the profile photo address to the Edda Contact API.
The service extracts structured professional information: name, headline, location, current company, experience, education, skills, languages, certifications, volunteering, summary and photo address.
This information is used to check whether the person is already a contact in your workspace, and to prefill or suggest updates to that contact.
The page’s raw content is not stored.

c. Gmail

When you open an email, the Extension reads the names and email addresses of the sender and recipients, and the subject line.
Names and email addresses are sent to Edda to look up matching contacts in your workspace. The subject line is only displayed in the side panel.
The Extension does not read email bodies or attachments, and does not store email data.

d. Google Calendar

When you open an event, the Extension reads the attendees’ names and email addresses, and the event’s title and time.
Attendee names and email addresses are sent to Edda to look up matching contacts and companies. The title and time are only displayed in the side panel.

e. Pages you visit

To show the company that matches the website you are on, the Extension reads the address and title of the active tab.
When you open the side panel or click the Edda button, the Extension sends only a company name derived from the page’s address or title, or the website’s domain, as a search query to your Edda workspace and to the Kushim company database. The full page address and page content are not sent.
The Extension does not record or store your browsing history.
Pipeline Radar reads the visible text of the pages you visit and compares it, inside your browser, with the list of companies in your own Edda pipelines. Page text is never sent to any server. You can turn Pipeline Radar off at any time.
If you use the "Add to Edda Pipeline" right-click menu, the selected text is used as a search query.

f. Information you enter

Companies, contacts, notes, tasks, comments and pipeline changes you create through the Extension are saved to your organisation’s Edda workspace.

3. How we use data

We use this data only to provide and improve the Extension’s features described above. We do not:

sell user data;
use or transfer it for advertising, profiling or unrelated purposes;
use it to determine creditworthiness or for lending purposes.

The Extension contains no analytics, advertising or tracking code.

4. Who we share data with

Edda platform (EU, US or Asia region, depending on your account): your workspace data and contact lookups.
Edda Contact API: operated by Edda and hosted by Akamai Technologies (Linode) in Frankfurt, Germany (European Union).
Anthropic, PBC: an AI model provider that extracts structured information from profile content on our behalf. Under Anthropic’s commercial terms, this data is not used to train its models.
Kushim company database (operated by Kushim Group): receives company search queries (company names or domains).
Google: the side panel loads website icons from Google’s favicon service, which receives the domain of the website being displayed.
Authorities: when required by law.

5. Where data is stored and for how long

In your browser: the access token, workspace, region and Pipeline Radar setting are kept in Chrome’s local extension storage. The Pipeline Radar company list is kept in memory only and is cleared when the browser closes. Signing out deletes your access token. Uninstalling the Extension deletes all of its browser data.
Contact API: extracted profile information is stored so the same profile is not reprocessed on every visit. It is kept for 12 months after it was last viewed, then deleted. Technical processing logs (Edda user and organisation identifiers, profile address, processing times, errors) are kept for 90 days.
Edda workspace: data saved to your workspace is kept according to your organisation’s agreement with Edda and the Edda Terms of Use.

6. Security

All communication uses HTTPS.
Every Contact API request is authenticated with your Edda session, which is checked against Edda.
AI provider keys are kept on our servers and never exposed to the browser.
The Contact API is rate-limited and offers no public endpoint for reading or listing stored profiles.

7. Limited Use

The use of information received by the Edda extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

8. Legal basis and your rights

Roles: for data saved to an Edda workspace, your organisation is the data controller and Edda acts as its processor.
Legal basis: we process account data to perform our contract with your organisation. We process professional information about third parties (profile pages, email correspondents, meeting attendees) on the basis of the legitimate interest of our users in managing their professional relationships.
Your rights: you may request access to, correction of, or deletion of your personal data, or object to its processing, by writing to nicolas@edda.co. This includes anyone whose profile has been processed by the Contact API. Your other rights are described in the Edda Privacy Notice. You may also complain to your data-protection authority; in France, this is the CNIL (3 place de Fontenoy, 75007 Paris).

9. Changes

We will update this page when the Extension’s data practices change, and update the "Last updated" date above.

10. Contact

nicolas@edda.co — KUSHIM France, 10 rue de Penthièvre, 75008 Paris, France.