Privacy Policy

We may collect personally identifiable information that you voluntarily provide to us, including but not limited to:

• Account Information: Name, email address, phone number, and password
• Profile Information: Professional title, organization, and profile picture
• Payment Information: Billing address and payment method details (processed securely through third-party payment processors)
• Communication Data: Information you provide when contacting our support team

We automatically collect certain information about your device and how you interact with our services:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, and referring URLs
• Performance Data: Error logs, crash reports, and performance metrics

Our Chrome extension may collect specific information to provide its functionality:

• Browser Activity: URLs visited, tab information, and browsing patterns (only as necessary for extension functionality)
• Extension Settings: User preferences and configuration
• Synchronization Data: Data synced across your devices through our services

Note: We only collect browser data necessary for the extension to function. We do not track your general browsing history beyond what is required for our service.

Your data is stored on secure servers located in [TODO: SPECIFY REGION/COUNTRY]. We use industry-standard cloud infrastructure providers with SOC 2 Type II certification and ISO 27001 compliance.

Our security measures include:

• Encryption: Data in transit is protected using TLS/SSL encryption; sensitive data at rest is encrypted
• Access Controls: Role-based access control (RBAC) and principle of least privilege
• Authentication: Multi-factor authentication options for user accounts
• Monitoring: Continuous security monitoring and regular security audits
• Incident Response: Procedures for detecting and responding to security incidents

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

• Infrastructure Providers: Cloud hosting and database services (e.g., Vercel, Supabase)
• Analytics: Usage analytics and performance monitoring (e.g., PostHog, Sentry)
• Payment Processors: Secure payment processing (e.g., Stripe)
• Communication: Email delivery and customer support tools (e.g., SendGrid, Intercom)
• Authentication: Identity verification and authentication services

[TODO: Update this list to reflect your actual third-party services]

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our services
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To enforce our terms, protect our rights, or ensure user safety
• With Consent: When you have given explicit consent for a specific purpose

• Essential Cookies: Required for the operation of our services (e.g., authentication, security)
• Functional Cookies: Enable enhanced functionality and personalization (e.g., language preferences)
• Analytics Cookies: Help us understand how users interact with our services
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can control and manage cookies in various ways. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, if you disable or refuse cookies, some features of our services may not function properly.

For more information about managing cookies, visit: www.allaboutcookies.org

• Storage: To save your preferences and settings locally and sync them across devices
• Active Tab: To interact with the current tab and provide context-specific features
• Host Permissions: To access specific websites where our extension provides functionality
• Identity: To authenticate your account and sync data securely

[TODO: Update this list based on your actual extension permissions in manifest.json]

Some features require additional permissions that you can grant or revoke at any time:

• Notifications: To send you alerts and updates about important events
• Clipboard: To enable copy-paste functionality for specific features

You can review and revoke permissions at any time through Chrome's extension settings (chrome://extensions/).

If you are located in the European Union or European Economic Area, you have the following rights:

• Right to Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request restriction of processing your personal data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of your personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights

To exercise any of these rights, please contact us at privacy@company.com. We will respond to your request within 30 days (or as required by applicable law).

You may also access, update, or delete certain information directly through your account settings.