Privacy Policy
Effective date: [Insert date]
Last updated: [Insert date]
This Privacy Policy explains how [Company/Product Name] (“we,” “us,” or “our”) collects, uses, stores, shares, and protects information in connection with our website, browser extension, licensing system, payment flow, support communications, and related services (collectively, the “Service”).
Plain-English summary: The browser extension is designed to be local-first. Your saved ChatGPT conversations and exports stay on your device unless you intentionally export, share, or later enable a separate sync/cloud feature. We use limited server-side data for licensing, purchases, security, support, coarse product analytics, and abuse prevention.
1. Who we are
The Service is operated by [Legal Name], located at [Business Address, if applicable]. You may contact us at [privacy/contact email].
2. Scope of this policy
This policy applies to the public website, license API, owner/admin dashboard, download tracking, payment-related records, support messages, and browser extension telemetry described below. It does not apply to third-party websites or services that we do not control, including OpenAI, ChatGPT, Chrome Web Store, Firefox Add-ons, Stripe, or other third-party platforms.
3. What the extension accesses
On supported ChatGPT pages, such as https://chatgpt.com/*, the extension may read the conversation page/DOM to generate an export or save the conversation to your local library. The extension is not designed to upload saved chat content to our licensing server.
Extension permissions may include:
storage, to store your local library, preferences, and license state.tabs and/or contextMenus, to communicate with the active ChatGPT tab and add right-click actions.- Content scripts on supported ChatGPT pages only, to read the page when you export or save.
4. Information we collect
| Category | Examples | Purpose |
|---|
| Purchase and licensing information | Email address, name if provided, Stripe customer/payment identifiers, license status, license plan, activation count, created date, renewal/refund/dispute references if applicable. | Process purchases, issue lifetime licenses, validate Pro access, provide support, prevent abuse, maintain business records. |
| License activation information | License key hash, purchase email, device hash, extension version, activation date, last validation date, activation status. | Activate licenses, enforce device limits, troubleshoot license issues, prevent key sharing and abuse. |
| Extension usage events | Download click, extension first run, free-user start, license activation, version number, anonymous identifier, coarse location if available. | Measure adoption, improve the product, understand free-to-paid conversion, debug product issues. |
| Coarse location information | Country and city inferred from IP address. | Understand product adoption by region, detect unusual abuse patterns, and improve support. We do not need or intentionally collect precise GPS location. |
| Technical and security information | IP address processed transiently, hashed IP, hashed user agent, browser type, timestamps, request metadata. | Security, fraud prevention, rate limiting, abuse detection, debugging, and server operation. |
| Support communications | Messages you send us, email address, screenshots or files you choose to provide. | Respond to support requests and maintain support history. |
| Website analytics | Page visits, referral pages, download button clicks, device/browser metadata. | Operate and improve the public website, measure campaigns, and understand demand. |
5. What we store locally
- Local library: saved chats are stored in
chrome.storage.local on your device.
- Preferences and license state: settings such as button position, filename templates, and license state may be stored in
chrome.storage.sync.
- Usage counter: free-plan counters or similar usage limits may be stored locally and reset according to the product rules shown in the extension.
6. What we do not collect from the extension
We do not intentionally collect saved chat content through the license endpoint. We do not sell saved chat content. We do not use saved chat content for advertising. We do not use saved chat content for model training.
The product may include limited website/download/license analytics, but those analytics are not intended to include the body of your saved conversations.
7. License checks and device identifiers
When you press Activate, Verify, or Re-check in the extension, the extension may contact our license endpoint with your license key, purchase email, a non-identifying device hash, and extension version. Device hashes are used to enforce activation limits and help manage authorized devices.
We store license keys as cryptographic hashes where practical. Because raw keys are not stored, lost-license recovery may generate a replacement key rather than resending the original key.
8. How we use information
We use information to operate the Service, process payments, issue and validate licenses, provide support, secure the system, prevent abuse, measure downloads and activation activity, improve product features, maintain business records, and comply with legal obligations.
9. How we share information
We do not sell your personal information. We do not share your saved chat content with advertisers. We may share limited information with service providers that help us operate the Service, including payment processors, email providers, hosting providers, analytics providers, fraud-prevention tools, and professional advisers.
We may disclose information if required by law, subpoena, court order, legal process, or to protect the rights, safety, property, and security of users, the Service, or others.
10. Payments
Payments are processed by Stripe or another third-party payment processor. We do not store full credit card numbers on our servers. Payment processors may collect and process payment information under their own privacy policies and terms.
11. Cookies and tracking
Our website may use cookies or similar technologies for login sessions, security, checkout, analytics, and product measurement. You can control cookies through your browser settings, but disabling some cookies may affect login, checkout, or admin functionality.
12. Data retention
We retain information for as long as reasonably necessary to operate the Service, provide licenses, maintain security, resolve disputes, comply with legal obligations, and maintain business records. License and transaction records may be retained for accounting, fraud prevention, tax, and support purposes. We may delete or anonymize analytics data when it is no longer needed.
13. Security
We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure. You are responsible for keeping your license key, browser profile, device, and exported files secure.
14. Your choices and requests
You may contact us to request access, correction, deletion, or other handling of your personal information, subject to verification and applicable legal exceptions. If you bought a license and lost the key, we may use your purchase email to help recover or replace it.
15. California, EU, UK, and other privacy rights
Depending on your location, you may have rights to know what information we collect, request access or deletion, correct inaccurate information, object to or restrict certain processing, request portability, or opt out of certain sharing or targeted advertising. We do not knowingly sell personal information or use saved chat content for cross-context behavioral advertising.
To make a privacy request, contact us at [privacy/contact email]. We may need to verify your identity before fulfilling a request.
16. Children
The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate action.
17. International users
If you use the Service from outside the country where our servers or service providers are located, your information may be processed in other jurisdictions. Those jurisdictions may have data protection laws different from your location.
18. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date will reflect the latest version. Material changes may be communicated through the website, extension, email, or another reasonable method.
19. Contact
Questions or requests may be sent to: [privacy/contact email].
Template note: replace bracketed placeholders and have counsel review before launch, especially if you serve California, EU, UK, children, schools, health/legal/financial users, or enterprise customers.
