Privacy Policy

Account information. When you sign in with Google or GitHub (via Supabase Auth), we receive your email address, display name, and profile identifier from the provider you choose. We use this to authenticate you and prevent unauthorized use of the service. We never see your passwords.

Page content, transiently. When you start a voice session, the extension reads the title, URL, and visible text of your active tab and sends it to your private session so the assistant can discuss it. This happens only while you are connected, and again if you switch tabs or press sync during a session. Page content is processed in memory to generate responses and is not stored by us after your session ends.

Voice audio, transiently. While connected, your microphone audio streams to the voice session so the assistant can hear you. Muting stops the stream immediately; ending the conversation closes the connection. We do not keep recordings of your conversations.

• We do not sell or rent your data to anyone.
• We do not use your data for advertising.
• We do not use your page content or voice to train AI models.
• We do not track your browsing history. Page content is read only when you are in an active session that you started.
• We do not collect data from Chrome when the side panel is closed.

Chrome Buddy is built on trusted infrastructure providers that process data on our behalf:

• Supabase — authentication (your account identity and session).
• LiveKit Cloud — real-time audio transport and AI inference (speech-to-text, language model, text-to-speech) for your voice session.
• Vercel — hosts our token server, which verifies your sign-in and issues short-lived session credentials.

Each provider processes data solely to deliver the service, under their respective privacy and security commitments.

Your account record (email, name, provider ID) is retained while you have an account. Session credentials expire automatically. Page content and voice audio are processed transiently during live sessions and are not retained by us afterward.

You can request access to, or deletion of, your account data at any time by emailing shwetasdhake16@gmail.com. Uninstalling the extension removes all locally stored data (your session and preferences) from your browser.

All communication between the extension, our servers, and our providers is encrypted in transit (HTTPS/WSS). API credentials are never shipped inside the extension; sessions are authorized server-side against your verified sign-in.

Chrome Buddy is not directed at children under 13, and we do not knowingly collect personal information from them.

If we make material changes, we will update this page and the effective date above. Continued use of the extension after changes means you accept the updated policy.

Questions about this policy or your data: shwetasdhake16@gmail.com