Privacy Policy

Introduction

Welcome to AI Flow Pal ("we", "us", or "our"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we manage any information you provide while using our Chrome Extension.

Information We Do Not Collect

Our extension is designed to modify the layout and appearance of specific websites to enhance your browsing experience. We want to clarify that AI Flow Pal does notcollect, store, or transmit any personal data from its users EXCEPT FOR THE FOLLOWING PURPOSES:

What We Collect:

  • Authentication: When using Google Sign-In through Auth0, we receive basic profile information (name, email) required for account management
  • Subscription Management: For paid subscriptions, we process payment information through secure third-party providers (Lemon Squeezy)

What We Don't Collect:

  • Payment Details: Full payment information is handled exclusively by Lemon Squeezy
  • Browsing Data: We do not track or record your browsing history or website interactions beyond modifying layouts

Permissions

To function effectively, our extension requires certain permissions:

  • Storage: To save your prompt preferences and settings locally
  • Clipboard Access: To enable auto-fill functionality from clipboard
  • Identity: For secure Google Sign-In authentication
  • Website Access: Required for modifying layouts on:gemini.google.com, claude.ai, chat.openai.com, chatgpt.com, www.doubao.com, chat.deepseek.com, copilot.microsoft.com, yiyan.baidu.com, tongyi.aliyun.com

These permissions are strictly limited to the functionalities described and are essential for the extension to operate as intended.

Data Security

We implement multiple security measures:

  1. Encrypted Storage: All local data is encrypted using AES-256
  2. Secure Transmission: API communications use TLS 1.3 with PFS
  3. Third-Party Services: Payment processing via Lemon Squeezy (PCI DSS Level 1 compliant)
  4. Authentication: OAuth 2.0 with PKCE through Auth0
  5. Code Integrity: Regular security audits and automated vulnerability scanning

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Any changes will be communicated by updating this page. We encourage users to periodically review this Privacy Policy to stay informed about how we protect your information.

Contact Us

If you have any questions or concerns about this Privacy Policy, please feel free to contact us at [email protected].