LEGAL & COMPLIANCE

Privacy Policy

Effective Date: September 21, 2026  |  Last Updated: September 21, 2026

Our Core Privacy Commitment

ChatEngram is built upon a local-first privacy architecture. By default, your AI conversations, prompts, attachments, tags, and exported notes remain stored locally in your browser storage (IndexedDB) on your personal device.

We do not transmit your conversation transcripts to our servers, we do not sell your personal or sensitive data, we do not use your data for advertising or creditworthiness evaluations, and we do not use your content to train machine learning models.

1. User Data Collection

We collect and process only the minimal information strictly required to deliver, operate, and maintain ChatEngram's core functionality. We collect the following categories of data:

A. AI Conversation & Website Content (Stored Locally on Your Device)

What is collected: When you actively use supported AI platforms (including ChatGPT, Claude, Google Gemini, DeepSeek, Perplexity, Grok, and Microsoft Copilot) or import local coding-agent sessions (such as Claude Code, Codex, and Gemini CLI), ChatEngram captures conversation text, user prompt messages, assistant responses, code snippets, timestamps, conversation identifiers, custom titles, tags, and citations.

Collection method: Captured directly from your active browser tab via local content scripts and stored immediately into your browser's local IndexedDB database. This data never leaves your device unless you explicitly initiate an export or third-party sync.

B. Personally Identifiable Information (PII)

What is collected: When you register an account, sign in, or activate a license, we collect your email address and an encrypted user account identifier generated by our authentication infrastructure provider (Clerk).

Collection method: Provided directly by you during sign-up, sign-in, or license activation.

C. Authentication Credentials & User-Provided API Keys

What is collected: Session authentication tokens, license keys, and user-provided third-party API keys (e.g., Notion integration tokens, and personal API keys for OpenAI, Anthropic, Google Gemini, or DeepSeek for AI summary generation).

Collection method: Entered directly by you in the extension settings. All third-party API keys and Notion tokens are stored locally on your device in encrypted browser storage and are never uploaded to ChatEngram's servers.

D. Financial & Billing Information

What is collected: Payment transaction identifiers, subscription status, plan tier, and license activation state.

Collection method: Transactions are securely processed directly by Stripe. ChatEngram never collects, receives, processes, or stores your credit card numbers, debit card numbers, or bank account details.

E. Technical & Diagnostic Telemetry

What is collected: Anonymous, non-personally identifiable diagnostic information including extension version number, browser family/type, anonymous installation identifier, and crash error reports.

Collection method: Generated automatically during extension operation to diagnose software faults and maintain compatibility. This telemetry never contains conversation transcripts, prompts, or sensitive message contents.

F. What We Explicitly Do NOT Collect

  • We do NOT collect, record, track, or monitor your general web browsing history or web activity.
  • We do NOT monitor websites or web pages outside of the explicitly supported AI tools listed in our host permissions.
  • We do NOT record keystrokes, form submissions, login passwords, or search engine queries.
  • We do NOT collect biometric data, location data, or device hardware fingerprints.

2. User Data Handling and Use

We handle and use collected data strictly to execute the core single-purpose function of ChatEngram—saving, searching, organizing, and exporting your AI conversations. Specifically, your data is handled for:

Local Full-Text Search & Indexing

Building an in-browser search index (via MiniSearch/Dexie) so you can instantly search through your past prompts and answers offline without transmitting queries to remote servers.

Knowledge Base Export & Backup

Converting your saved conversations into Markdown, JSON, or plain text files on demand, and facilitating full database backup and restore on your local machine.

User-Initiated Integrations (Notion & Local Folders)

Transmitting selected conversation records to your Notion workspace or writing them directly to a local directory (such as an Obsidian vault) strictly when configured and initiated by you.

On-Demand AI Summary Generation

When you request an AI summary, the conversation text is sent directly from your browser to your selected AI provider (OpenAI, Anthropic, Google, or DeepSeek) using your personal API key.

Account & License Verification

Verifying license keys, validating active subscription tiers, and enabling Pro/Lifetime features across authorized devices.

Strict Handling Prohibitions

  • No Advertising: We never use or disclose your personal data or conversation content for personalized, targeted, or interest-based advertising.
  • No Credit Scoring or Lending: We never use or evaluate your data to determine creditworthiness or for lending purposes.
  • No AI Model Training: Your conversations and prompts are never used to train, retrain, fine-tune, or improve public or proprietary AI/ML models.
  • No Sale of Data: We never sell, rent, trade, or barter user data to third parties, data brokers, or commercial aggregators.

3. User Data Storage, Retention, and Security

A. Storage Locations

  • Local Browser Storage (Primary): All conversation content, prompts, AI responses, search indexes, custom tags, and third-party API keys are stored locally on your device inside browser-sandboxed IndexedDB and chrome.storage.local.
  • Cloud Database Storage (Minimal): Our secure cloud backend (managed through Supabase) stores only account authentication metadata (email address, user account ID), license records, and subscription tier status. Conversation transcripts are never stored on or transmitted to our cloud backend.

B. Data Security Safeguards

We implement robust technical and organizational security measures to protect your information:

  • Encryption in Transit: All communication between the extension and backend services or external APIs is encrypted using modern TLS/HTTPS (Transport Layer Security).
  • Browser Sandbox Isolation: Local conversation databases are isolated within your Chromium browser profile sandbox, preventing unauthorized access by external websites or untrusted scripts.
  • Zero Server-Side Access to Credentials: Your Notion integration tokens and AI provider API keys remain exclusively on your device in browser storage.

C. Data Retention Policy

  • Local Conversation Data: Retained in your local browser storage indefinitely until you explicitly delete individual conversations, clear the database, or uninstall the extension.
  • Account & License Data: Retained for the duration of your active account to maintain access to paid features. If you delete your account, this data is permanently purged within 30 days.

D. Data Deletion and Destruction

You have immediate, direct control to delete all stored data:

  • Delete Individual Chats: Delete single or batch conversations directly from the ChatEngram Dashboard.
  • Complete Local Wipe: Clear all local IndexedDB data and settings with one click via the extension settings panel.
  • Extension Uninstallation: Uninstalling ChatEngram from Chrome immediately and automatically destroys all local IndexedDB data and stored credentials.
  • Account Deletion: Send an account deletion request to [email protected] to permanently erase your email and account metadata from our cloud systems.

4. User Data Sharing, Disclosure, and Third Parties

We do not sell, rent, trade, or transfer your personal or sensitive user data to third parties. We share data only with the following service providers (subprocessors) and user-directed destinations:

Clerk (Authentication Infrastructure)

Subprocessor

Processes user sign-in, session authentication, and account verification. Receives user email and generates encrypted account IDs.

Stripe (Payment Processing)

Subprocessor

Handles payment card transactions, billing subscriptions, and tax compliance. Receives payment information directly under Stripe's privacy policy.

Supabase (Cloud Database Infrastructure)

Subprocessor

Provides secure database infrastructure hosting user account records, license keys, and subscription plan metadata.

User-Configured Services (Notion & AI Summary Providers)

User-Directed

When you explicitly configure Notion sync or AI summary features, data transfers occur directly from your browser to the designated provider (Notion, OpenAI, Anthropic, Google, or DeepSeek) using your own personal API key. Transfers occur strictly under your instruction and are governed by the respective provider's privacy policy.

Legal Disclosures

We will disclose information only if required to do so by applicable law, regulation, legal process, or governmental request, or to protect the safety, rights, or property of ChatEngram, our users, or the public.

5. Chrome Web Store User Data Policy & Limited Use Compliance

ChatEngram strictly complies with the Chrome Web Store Developer Program Policies, including the User Data Privacy Policy and Limited Use requirements:

  • Single Purpose: ChatEngram has a single, clearly defined purpose: to save, search, organize, and export your personal AI conversation history locally. All permissions requested are strictly required to execute this single purpose.
  • Limited Use Disclosure: The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
  • No Data Sale: We do not transfer or sell personal or sensitive user data to third parties, data brokers, or information resellers under any circumstances.
  • No Unrelated Transfers: We do not use or transfer user data for purposes that are unrelated to ChatEngram's single purpose.
  • No Credit Scoring: We do not use or transfer user data to determine creditworthiness or for lending purposes.
  • No Advertising: We do not use or transfer user data to serve personalized, re-targeted, or interest-based advertisements.

6. Chrome Extension Permissions Justification

ChatEngram requests only the minimal permissions required to deliver its functionality:

storage & unlimitedStorage

Required to store your saved conversations, tags, search indexes, and user preferences locally in browser IndexedDB without hitting browser storage quota limits.

alarms

Required to schedule periodic background tasks such as license validation checks and auto-sync queue processing.

tabs

Required to open the dashboard, spotlight overlay, and settings tabs, and to detect when you are actively viewing supported AI chat tabs.

Host Permissions (*://chatgpt.com/*, *://claude.ai/*, etc.)

Required to detect and parse active conversation DOM elements and API stream responses on supported AI websites so your chats can be captured and saved locally.

7. User Rights and Data Deletion

Under applicable data protection laws (including GDPR, CCPA/CPRA, and other global privacy frameworks), you have the following rights:

  • Right of Access & Portability: You can export your entire conversation library into standard Markdown, JSON, or text files at any time via the dashboard.
  • Right to Rectification & Erasure: You can edit conversation titles and notes, delete individual chats, or execute a complete local database wipe in settings.
  • Right to Account Erasure: To request permanent deletion of your account credentials and associated email records from our server database, email [email protected]. Requests are verified and fulfilled within 30 days.
  • Right to Withdraw Consent: You can stop data capture at any time by turning off capture toggles in the extension or uninstalling the extension.

8. Children's Privacy

ChatEngram is not directed to children under the age of 13. We do not knowingly collect or solicit personal data from children under 13. If you believe a child under 13 has provided personal data to us, please contact us immediately at [email protected] so we can remove the information.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in extension functionality, changes in applicable laws, or updates to Chrome Web Store policies. When changes are published, we will revise the "Last Updated" date at the top of this document. We encourage users to periodically review this page.

10. Contact Us

If you have any questions, inquiries, or requests regarding this Privacy Policy, our data practices, or your privacy rights, please contact our team:

Email: [email protected]

Website: https://chatengram.com

Privacy Policy URL: https://chatengram.com/privacy

Product: ChatEngram Chrome Extension (ID: nfmijlbnbnmpkfbekcoeclbkjcpbgfgj)