Privacy Policy

At AI ChatWorks ("we," "us," or "our"), we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use the AI ChatWorks browser extension (the "Extension").

By installing and using the Extension, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We prioritize a Local-First architecture. Most of your sensitive data, such as your actual conversation history with AI providers, remains on your device. However, to provide features like Cloud Sync, Marketplace, and Account Management, we collect specific types of data.

1.1. Personal Information

When you create an account or sign in (via Supabase Auth), we collect:

• Email Address: Used for authentication, account management, and important service notifications.
• User ID: A unique identifier (UUID) assigned to your account.

1.2. User Content (Cloud Data)

To enable synchronization across devices, the following data is securely stored on our servers (Supabase) with strict access controls:

• Prompts & Templates: The custom prompts you save in your Prompt Library.
• Folders: The names and organization of your folders.
• Marketplace Data: Content you explicitly downloaded from the Marketplace.
• Tags & Metadata: Any tags or organizational metadata you add to your prompts.
• Settings: Your Extension preferences and configurations.

All cloud data is protected by industry-standard security measures and accessible only through your authenticated account via Row-Level Security (RLS) policies.

1.3. User Content (Local Data)

The following data is stored locally on your device:

• Chat Content: The actual text of your conversations with AI providers (e.g., ChatGPT, Claude, Gemini). This data is never shared with us or synced to our servers, regardless of whether you have a cloud account. It remains strictly private on your device.
• Temporary Drafts: Temporary text generated during your interaction with the Extension.

1.4. Usage History (Optional User Feature)

When you use a prompt, we store:

• Prompt Usage Log: Which prompts you've used, when, and on which platform (ChatGPT, Gemini, Claude).

Purpose: This data helps you track your personal usage patterns and identify prompts you may want to delete. It is visible only to you within the Extension and is stored in your private cloud account.

1.5. System Data

To maintain Extension stability and security, we collect:

• Error Logs: Crash reports and technical errors
• Security Events: Failed login attempts, suspicious activity
• API Usage: Performance monitoring data

Note: We do NOT collect IP addresses as part of our security logging.

This technical data helps us fix bugs, prevent fraud, and improve reliability.

1.6. Browser History

To enable the Conversation Timeline feature, the Extension requires access to your browser history for AI chat platforms only (ChatGPT, Claude, Gemini).

• Purpose: The Timeline feature allows you to navigate through your past AI conversations by date. We use browser history to detect when you visited AI chat URLs and organize them chronologically.
• Scope: History access is limited exclusively to AI platform URLs (e.g., chatgpt.com/*, claude.ai/*, gemini.google.com/*). We do not access or process your general browsing history.
• Storage: Browser history data is read-only and remains in your browser. We do not copy, store, or sync your browsing history to our servers.
• Privacy: Only the URLs and timestamps of AI chat pages are used locally to build the timeline view. No actual conversation content from history is accessed or transmitted.

You can disable the Timeline feature at any time in Settings if you prefer not to use this functionality.

1.7. Cookies & Browser Storage

We use browser storage technologies for:

• Authentication: Session tokens (via Supabase Auth)
• Offline Access: Cached prompts and settings for offline use
• Local Features: Chat history and temporary drafts (stored locally only)

These are necessary for the Extension to function and remain on your device.

2. How We Use Your Information

We use the collected data for the following purposes:

• To Provide Service: Authenticating users and syncing your prompts/settings/folders across your devices.
• To Improve the Extension: Fixing bugs and improving stability through error logs.
• To Communicate: Sending updates regarding your account or critical security notices.
• Marketplace Functionality: Enabling you to browse and download prompts or templates from the Marketplace.

3. Data Storage and Security

3.1. Storage

• Cloud Data: We use Supabase, a secure and industry-standard backend-as-a-service provider, to store your synced data.
• Local Data: Your chat history and temporary drafts are stored in your browser's local storage (IndexedDB / chrome.storage).

3.2. Security

• Access Control: We implement strict access controls via Row-Level Security (RLS). Your private prompts and settings are accessible only by you (via your authenticated account).
• Encryption in Transit: All data transmitted between your browser and our servers uses HTTPS/TLS encryption.
• Infrastructure Security: Supabase provides enterprise-grade security, including encryption at rest at the infrastructure level.
• Account Security: Passwords are hashed using industry-standard algorithms. We never store plain-text passwords.

4. Third-Party Sharing

We do not sell, trade, or rent your personal identification information to others. We only share data with trusted third-party service providers necessary to operate the Extension:

• Supabase: For authentication and database hosting.
• Payment Processors: If you subscribe to a paid plan, payment is processed by a third-party provider (e.g., Stripe or LemonSqueezy). We do not store your credit card details.

We may disclose your information if required by law or in response to valid requests by public authorities.

5. User Rights

You have the following rights regarding your data:

• Access: You can view all your synced data directly within the Extension.
• Correction: You can update your settings and prompts at any time.
• Deletion: You can request the deletion of your account and all associated cloud data by using the account delete option within Settings (Cloud Data tab > Delete Account), or by contacting support. Local data can be deleted by uninstalling the Extension.
• Data Export: You can export your prompts and settings from the Extension at any time via Settings > Cloud Data > Export Data.

6. Data Retention

• Account Data: We retain your account data as long as your account is active.
• Deleted Accounts: Upon request for deletion, your account and all associated cloud data are permanently deleted from our databases within 24 hours. This deletion is immediate and irreversible—there are no backups or restoration options once the deletion is confirmed.
• Usage History: Stored as long as your account is active. Deleted with account deletion.
• Local Data: Data stored locally in your browser (chat history, drafts) is not affected by account deletion and remains on your device until you uninstall the Extension or clear browser storage.

7. Children's Privacy

AI ChatWorks is not intended for users under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal information, please contact us immediately at info@ai-chatworks.com.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes (if you've opted in)

We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

info@ai-chatworks.com