Privacy Policy

← Back to Home

1. Introduction

This Privacy Policy describes how GraspIt ("we," "us," or "our") collects, uses, and protects your information when you use our browser extension and related services. By using GraspIt, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Authentication Information

When you create an account or sign in, we collect:

• Email address and basic profile information from your OAuth provider (Google, etc.)
• Authentication tokens to maintain your session
• Account creation and last login timestamps

2.2 Website Content

When you use the summarization feature, we temporarily process:

• AI assistant responses from ChatGPT, Claude, and similar platforms
• Your written summaries of these responses
• Comparison data between your summaries and AI-generated summaries

2.3 Usage Data

We collect non-personal usage information including:

• Extension usage statistics and feature interactions
• Session duration and summary completion rates
• Error logs and performance metrics
• Browser type and extension version

2.4 Local Storage

We store data locally on your device including:

• Your personal summaries and session data
• Extension settings and preferences
• Temporary cache for improved performance

3. How We Use Your Information

3.1 Core Functionality

• Summarization Features: Process AI responses to enable summary comparison and learning analytics
• Account Management: Authenticate users and sync data across devices
• Progress Tracking: Maintain your learning history and session metrics

3.2 Service Improvement

• Analytics: Understand usage patterns to improve our features
• Support: Diagnose and resolve technical issues
• Security: Detect and prevent abuse or unauthorized access

4. Data Sharing and Third Parties

We work with trusted third-party services to provide our functionality:

4.1 Supabase (Database & Authentication)

• Stores your account information and summaries
• Provides secure authentication services
• Data is encrypted and stored in secure data centers

4.2 OAuth Providers (Google, etc.)

• Handle secure login without us storing your passwords
• We only receive basic profile information you authorize

4.3 AI Services (for comparison features)

• Temporarily process content to generate AI summaries for comparison
• No personal information is included in these requests
• Content is not stored by AI providers

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict authentication and authorization systems
• Regular Audits: Security reviews and vulnerability assessments
• Data Minimization: We only collect what's necessary for functionality

6. Data Retention

• Account Data: Retained while your account is active
• Summaries: Stored until you delete them or close your account
• Usage Logs: Automatically deleted after 90 days
• Cached Data: Cleared when you uninstall the extension

7. Your Rights and Choices

7.1 Access and Control

• View and download your personal data through your account dashboard
• Edit or delete your summaries at any time
• Update your account information and preferences

7.2 Data Deletion

• Delete individual summaries from your dashboard
• Close your account to remove all associated data
• Uninstall the extension to clear local storage

7.3 Communication Preferences

• Opt out of non-essential communications
• Control notification settings within the extension

8. Children's Privacy

GraspIt is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Users

GraspIt is operated from the United States. If you are accessing our service from outside the US, please be aware that your information may be transferred to, stored, and processed in the US where our servers are located and our central database is operated.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top of this policy
• Sending notifications through the extension for significant changes

11. Legal Compliance

We comply with applicable data protection laws including:

• GDPR: For users in the European Union
• CCPA: For users in California
• Chrome Web Store Policies: Google's developer program requirements