Privacy Policy

1. Introduction

This Privacy Policy explains how ChatGPT Pro Tools (browser extension) handles your data. We respect your privacy and are committed to being transparent about our data practices.

2. Data Collection & Usage

Outside of Pro license verification (section 3), optional Cloud Sync (section 4), and optional Cloud AI (section 5), the extension does not send your data to us or third parties — everything else stays in your browser.

• Access token – read ephemerally from outgoing ChatGPT requests; never stored or transmitted elsewhere. Needs to get users locale.
• Locale – read to adapt UI; not persisted beyond session state.

The extension itself uses no analytics and no tracking scripts, and we never sell or share your data. (Our website uses privacy-friendly, cookieless Vercel Analytics for aggregate visit counts only — never your extension data.) The site contact form (if used) is separate and optional.

3. Pro License Verification

If you purchase a Pro subscription, the extension contacts our license server (gptprotools.com/api/license) to verify and manage your license. This is the only case where the extension sends data to us:

• License key – sent to confirm your subscription is active (we check its status with our payment provider, Paddle).
• ChatGPT account email – sent so a Pro license can be tied to a single ChatGPT account (this stops one key being shared across many accounts). We store only a one-way salted hash of the email against your subscription — never the plain-text address — and use it solely to match your account on later license checks. Deactivating Pro releases this link.

Payments are handled by Paddle.com Market Limited (our Merchant of Record); we never receive or store your payment details. Free features never contact our server.

4. Cloud Sync Pro

Pro users can turn on Cloud Sync to back up and synchronize their extension data — AI tags, notes, highlights, saved messages, prompts, and settings — across devices. It is off by default and only runs after you explicitly turn it on.

• Encrypted. Your data is encrypted on your device before upload, with a key derived from your license key, and we store only the resulting ciphertext — it is never stored or transmitted in the clear, and a breach of the sync database alone cannot expose it. (Because we issue your license key, this is not zero-knowledge: we could technically derive the key. If we ever offer a user-set passphrase for full zero-knowledge sync, we will say so here.)
• What is stored. The encrypted blobs are kept on our infrastructure (Neon/Vercel), partitioned by your subscription. Your license key authorizes access; no separate account is created.
• Your control. Turning sync off stops further uploads. Your data also always stays in your browser, so disabling sync never loses it.

If you never enable Cloud Sync, none of this data leaves your browser.

5. Cloud AI Pro

Pro users can turn on Cloud AI to run the extension's AI features — AI tag classification and the Prompt Optimizer — on a faster cloud model instead of the on-device one. For Pro users it is on by default; you can turn it off at any time in Settings → Cloud, and every AI feature then runs fully on your device again.

• What is sent. Only the text each feature needs: your chat titles (for tagging) or the prompt you ask it to optimize, together with your license key for verification. Your chat message contents are never sent — tagging works from titles alone.
• Processed by Google Gemini. Our server passes that text to the Google Gemini API, which generates the result — the tags, or the rewritten prompt — and returns it. Google processes it only to produce that response and does not use it to train its models; Google's handling is governed by its own API terms.
• Not stored, not reused. We do not save your titles or prompts to any database, we do not log their contents, and we do not use them for anything other than returning your result. Each request is processed in memory and discarded as soon as the response is sent.

If you never enable Cloud AI, none of this text leaves your browser.

6. Data Retention & Your Rights

We hold the little data we do have only as long as it serves the feature you turned on:

• Cloud Sync data – your encrypted blobs stay on our infrastructure while your Pro subscription is active. They are deleted automatically when you unlink your ChatGPT account (Settings → Unlink) or when your subscription ends, and whenever you ask us to delete them. They are encrypted with a key derived from your license key, so they are unreadable to us regardless.
• Cloud AI – nothing to retain: the chat titles and prompts sent to Cloud AI are processed in memory to generate your result and are never written to our storage or logs.
• Email hash – the one-way hash used to bind a license to one ChatGPT account is kept only while that binding exists; unlinking Pro or cancelling your subscription releases it.
• Payments – handled and retained by Paddle under its own policy; we never receive or store your payment details.

Wherever you live, you can ask us to access, export, or delete any data associated with you, and we will act on it. You can also remove most data yourself at any time: turning off Cloud Sync stops uploads, Unlink in Settings releases the email binding and permanently deletes that account's synced data from our servers, and uninstalling the extension erases all local data from your browser. To make a request, use the contact form.

7. Changes to This Policy

We may update this Privacy Policy from time to time, especially as we add new features. We recommend reviewing this page periodically. Your continued use of the Extension constitutes your acceptance of any modifications.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, you can contact us through the contact form on our website.