Privacy Policy

1. Introduction

CommentGenie ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Chrome extension and website.

2. Information We Collect

2.1 Personal Information

• Email Address: Required for subscription management and communication
• Payment Information: Processed securely through Stripe (we do not store payment details)
• Authentication Tokens: Unique identifiers for premium access

2.2 Usage Data

• LinkedIn Activity: We process LinkedIn post content only when you actively use our extension
• Device Information: Browser type, extension version, device fingerprint for security
• Usage Statistics: Number of comments generated, subscription status, usage patterns

2.3 Technical Data

• IP Address: For security and fraud prevention
• Browser Data: User agent, timezone, language preferences
• Extension Logs: Error reports and performance data

3. How We Use Your Information

3.1 Service Provision

• Generate AI-powered LinkedIn comments
• Manage your subscription and billing
• Provide customer support
• Ensure service security and prevent abuse

3.2 Communication

• Send subscription confirmations and receipts
• Notify about service updates or issues
• Respond to your inquiries

3.3 Improvement and Analytics

• Analyze usage patterns to improve our service
• Monitor system performance and reliability
• Develop new features and enhancements

4. Information Sharing

4.1 Third-Party Services

We share data with trusted partners:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• OpenAI: AI comment generation (post content only, no personal data)
• Railway: Infrastructure hosting (encrypted data storage)
• Namecheap: Email services (email communications only)

4.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal obligations
• Protect our rights and safety
• Prevent fraud or security threats
• Respond to government requests

5. Data Security

5.2 Data Retention

• Account Data: Retained while your account is active
• Usage Data: Stored for up to 2 years for analytics
• Payment Data: Managed by Stripe per their retention policy
• Deleted Accounts: Data permanently deleted within 30 days

6. Your Rights

6.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing for marketing purposes

7. GDPR Compliance (EU Users)

7.1 Legal Basis for Processing

• Contract Performance: Providing our service per your subscription
• Legitimate Interest: Service improvement and security
• Consent: Marketing communications (where applicable)