Privacy Policy
Last updated: August 2026
1. What we collect
When you create an account we store your email address, a hashed password (never plaintext), your plan, account status and timestamps. When the extension contacts the server, we record basic activity timestamps and the extension's anonymous user identifier.
2. What stays on your device
Your API keys, extracted prompts, prompt library, history and saved chats are stored locally in your browser's extension storage. They are never uploaded to our servers.
3. How image analysis works
Images and videos are analyzed by third-party AI models you call with your own API key. The image content goes from your browser to the model provider you configured (for example OpenRouter) - it does not pass through our backend.
4. What we do with account data
Account data is used to resolve your plan, entitlements and access status when the extension authenticates. We do not sell or share your personal data with third parties for marketing.
5. Security
Passwords are hashed with PBKDF2-SHA256 (100,000 iterations) and never stored in plaintext. Sessions are short-lived, revocable tokens. Access decisions are enforced server-side.
6. Deleting your account
Account deletion is handled by our team on request - contact support from the email on your account and we will remove your account record and related data.
7. Changes to this policy
We may update this policy from time to time. Continued use of the product after changes constitutes acceptance of the updated policy.
8. Contact
For privacy questions, contact us from the email address you used to create your account.