Privacy Policy

1. Information We Collect

1.1 Authentication Data

When you sign in with Google OAuth:

• Google Account Information: We receive your Google user ID and email address through Google's OAuth 2.0 authentication service
• Authentication Tokens: JWT tokens are stored locally in your browser to maintain your signed-in session

1.2 Usage Data

To provide AI-powered text rewriting features, we collect:

• Text Content: Sentences you choose to rewrite are sent to our API for processing
• Custom Prompts: Any custom instructions you provide for AI rewrites
• Token Usage: Count of API requests made to track daily limits (20,000 tokens for signed-in users, 100 for anonymous users)

1.3 Extension Settings

The following settings are stored locally in your browser:

• Typing speed preferences
• Accuracy settings
• Rewrite frequency preferences
• Custom prompt instructions
• Em dash replacement preferences

2. How We Use Your Information

2.1 To Provide Core Functionality

• Authenticate your identity via Google OAuth
• Process text rewriting requests through our AI service
• Track token usage to enforce daily rate limits
• Save your preferences across sessions

2.2 To Improve Our Service

• Monitor API usage patterns to optimize performance
• Identify and fix technical issues

3. Data Sharing and Third Parties

3.1 Third-Party Services

Your data is shared with the following third-party services:

• Google OAuth 2.0: For user authentication
  • Google receives authentication requests and provides user identity verification
  • Governed by Google's Privacy Policy
• Supabase: For backend API hosting and authentication management
  • Hosts our serverless functions that process rewrite requests
  • Stores authentication tokens and user session data
  • Governed by Supabase's Privacy Policy
• OpenAI API: For AI-powered text rewriting
  • Receives text content you choose to rewrite
  • Processes text through GPT models to generate rewrites
  • Governed by OpenAI's Privacy Policy

3.2 Data We Do NOT Share

• We do NOT sell your personal data to third parties
• We do NOT share your data with advertisers
• We do NOT use your text content for training AI models

4. Data Storage and Security

4.1 Local Storage

Most data is stored locally in your browser using Chrome's storage API:

• Extension settings and preferences
• Token usage history (per-user)
• Authentication tokens
• Typing progress (temporary)

4.2 Server Storage

Our backend servers store:

• User authentication records (Google user ID)
• Daily token usage counts (reset every 24 hours at midnight)

4.3 Data Retention

• Text Content: Not stored after processing; only used for immediate rewrite generation
• Token Usage: Reset daily at midnight UTC
• Authentication Data: Retained while you remain signed in; deleted when you sign out

4.4 Security Measures

• All API communications use HTTPS encryption
• Authentication tokens are stored securely in Chrome's storage API
• Rate limiting prevents abuse of the service

5. Your Rights and Controls

5.1 Data Access and Deletion

You have the right to:

• Sign Out: Remove authentication data by signing out in the extension
• Clear Local Data: Remove all locally stored data by uninstalling the extension
• Request Deletion: Contact us to delete your server-side authentication records

5.2 Optional Features

• Anonymous Usage: You can use basic features without signing in (100 tokens/day limit)
• Custom Prompts: Providing custom instructions is optional

6. Children's Privacy

Auto Typer is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

7. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting the new policy on this page

Your continued use of Auto Typer after changes are posted constitutes acceptance of the updated policy.

8. Data Processing Location

Your data may be processed and stored in:

• United States (Supabase backend servers)
• United States (OpenAI API servers)

By using Auto Typer, you consent to the transfer of your data to these locations.

9. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data is:

• Consent: You provide consent when you sign in with Google OAuth
• Contract Performance: Processing is necessary to provide the rewriting service you've requested
• Legitimate Interests: We process usage data to improve the service and prevent abuse