Privacy Policy

1. Information We Collect

• Account information: email address and authentication identifiers.
• Subscription and billing metadata processed through Dodo Payments.
• Extension device-linking and license metadata needed for account access, device verification, and entitlement refresh.
• Optional feedback you submit (including uninstall survey responses).

2. Local Vault, API Keys, and On-Device Data

In BYOK mode, your provider API keys are stored locally inside the extension in an encrypted local vault. Those BYOK keys are not uploaded to or stored on our server as part of normal product operation.

The extension may also store local usage data such as estimated token counts, provider selections, and device-side settings to improve your experience. This local data is generally kept on your device unless you explicitly send feedback or use a feature that requires server interaction.

Local token-usage records inside the extension are intended as device-side usage history. When the selected provider returns explicit usage metadata, the extension prefers those values. Otherwise it may store an estimate. These local records are not represented as the authoritative billing invoice for your external provider account.

If you enable cloud settings sync, the extension stores an encrypted settings package in your browser's sync storage. That encrypted package is protected by a passphrase you provide. The passphrase is stored only on the browsers where you choose to save it, and it is not sent to or retained by our server.

BYOK API keys remain in the local extension vault during normal runtime. If you enable encrypted cloud sync, the extension may also store a separate encrypted BYOK snapshot in browser sync storage so another browser signed into the same sync profile can restore those keys after you enter the passphrase locally.

3. Translation Data and Third-Party Providers

When you use BYOK mode, translation requests are sent to your selected AI provider using your own API key. Your use of third-party providers such as OpenAI, OpenRouter, Google, Anthropic, DeepL, xAI, Alibaba Cloud, or DeepSeek is also subject to the terms and privacy policies of those providers.

We do not process billing for your direct BYOK provider usage. For product subscriptions, billing is handled separately through Dodo Payments.

The extension may periodically contact our backend to validate account status, refresh locally stored license entitlements, and maintain linked-device access. These refresh calls do not require your BYOK key.

4. How We Use Information

• Authenticate users and link browser devices securely.
• Provide subscription management and customer support.
• Detect abuse, protect service integrity, and improve reliability.
• Comply with legal obligations.

5. Data Sharing

We share data only with service providers required to operate the product (for example Supabase for auth/database, Dodo Payments for billing, and selected AI providers you choose to use). We do not sell personal information.

6. Data Retention and Security

We retain account and transaction data as long as needed to provide the service, meet legal requirements, and resolve disputes. We use industry-standard controls to secure data in transit and at rest.

For cloud settings sync, we provide client-side encryption tooling, but the practical security of the synced settings also depends on your browser profile security, local device security, and how you manage your passphrase. We do not receive the passphrase and cannot recover it for you. If you forget it, encrypted cloud settings may become unreadable.

Because cloud settings sync relies on browser-managed storage outside our direct custody, we disclaim responsibility for loss of access caused by forgotten passphrases, compromised browser accounts, insecure local devices, or unsupported third-party browser sync behavior.

7. Your Rights

You can request access, correction, or deletion of your personal data by contacting us. You may also stop using the service and remove the extension at any time.

8. Contact

For privacy requests, contact:[email protected]