Privacy Policy
Effective Date: June 17, 2026
At OptiPrompt AI ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, where it is stored, how long we keep it, and when we share it while you use the OptiPrompt AI Chrome extension.
1. User Data Collection
We collect and process the following categories of data to provide and improve our services:
A. Personally Identifiable Information (PII)
When you sign in to the extension via Google Authentication or make purchases, we collect:
- Identity Data: Name, email address, and profile picture URL. This is used to create and manage your account and identify you across devices.
- Authentication Tokens: Secure tokens used to maintain your session, managed via Supabase Auth.
- Transaction & Billing Data: When purchasing credit packs, transaction records (amount, payment reference ID, purchased plan) are collected. Note: Payment credentials (e.g. credit/debit card numbers or bank details) are processed directly by our payment gateway (Razorpay) over secure, PCI-DSS compliant connections. We never store raw banking details on our servers.
B. Sensitive User Data
To perform its core function, the extension processes:
- User Prompts: The text you input into AI platforms (like ChatGPT or Claude) that you explicitly choose to optimize. This text is sent to our processing server.
C. Technical & Usage Data
- Extension Settings: Configuration preferences (e.g., API keys, theme settings) stored locally via
chrome.storage. - Usage Metrics: Number of optimizations performed, timestamps of activity, and user ID. This is used to enforce usage limits and prevent abuse.
D. What We Do Not Collect
- We do not collect your full web browsing history.
- We do not collect keystrokes outside prompts you explicitly submit for optimization.
- We do not store payment card numbers or CVV details.
2. Data Handling and Processing
We handle your data with the highest security standards:
- Encryption: All data transmitted between the extension, our backend, and third-party AI providers is encrypted using Industry-standard SSL/TLS (HTTPS).
- Prompt Processing: When you request an optimization, your prompt is sent to a secure Supabase Edge Function. This function acts as a bridge to the Google Gemini API.
- No Permanent Storage of Prompts: The content of your prompts is processed "in-memory." We do not store the text of your prompts in our permanent databases after the optimization is returned to you.
3. Data Storage and Retention
We store data only as long as necessary for the purposes described:
| Data Type | Storage Location | Retention Period |
|---|---|---|
| Account Profile | Supabase (US Regions) | Until account deletion |
| Transaction Records | Supabase & Razorpay | 7 years (legal accounting tax limits) |
| Usage Logs | Supabase DB | Rolling 12 months |
| Local Settings | Browser Storage | Until uninstalled |
| Prompts | Ephemeral (RAM) | Immediate disposal |
5. Your Rights and Control
You have the following rights regarding your data:
- Access & Export: You can request a copy of the personal data we hold about you.
- Rectification: You can update your profile information at any time.
- Deletion: You can request the deletion of your account and all associated data by contacting our support team.
- Revocation: You can stop all data collection by uninstalling the extension.
6. Chrome Web Store Policy Compliance
In accordance with the Chrome Web Store User Data Policy:
- We use data only for the primary purpose of providing and improving the prompt optimization feature.
- We do not sell, rent, or trade user data to third parties.
- We do not use user data for credit scoring or for any purpose unrelated to the extension's stated functionality.
7. Prominent Disclosure and User Consent
To comply with the Chrome Web Store Prominent Disclosure Requirement:
- Purpose: Before sign-in and use, the extension discloses that selected prompt text and account-linked usage data are processed to provide optimization.
- Affirmative Consent: In the extension UI, users must check a consent box before continuing sign-in and use.
- Control: You may revoke this consent at any time by uninstalling the extension or contacting us for account deletion.