📜 Privacy Policy Version History

Comprehensive compliance update with full sub-processor list, security measures, enhanced CCPA disclosures, and regulatory compliance improvements.

• Added complete Sub-Processor List (Section 4) with all vendors, locations, and data processed
• Added Google (OAuth, Fonts), Apple (Sign-In), Resend (email), Cloudflare Pages disclosures
• Replaced Netlify with Cloudflare Pages as hosting provider
• Added new Security Measures section (Section 5) with technical and organizational controls
• Added Automated Decision-Making & AI Processing disclosure (Section 3.3)
• Enhanced CCPA section with categories table, sources, "Do Not Sell" statement
• Added verification process and authorized agent procedures for data requests
• Added specific supervisory authorities for GDPR complaints
• Added EU Representative contact information
• Browser Extension data flow integrated into sub-processor section

Added browser extension data handling and storage disclosures for Chrome Web Store compliance.

• Added Section 2.6: Browser Extension - data collection, permissions, and data flow
• Added Section 6.3: Browser Extension Storage (chrome.storage.local usage)
• Explained activeTab, storage, and contextMenus permissions
• Clarified what the extension does NOT access (browsing history, passwords, etc.)

Added feedback collection, admin notifications, and analytics disclosures.

• Added Section 2.4: Feedback Data collection (ratings and optional comments)
• Added Section 2.5: Feature Access Requests (Viewsifier™ approval process)
• Added Section 3.1: Internal Analytics disclosure
• Added Section 3.2: Admin Notifications disclosure
• Updated data retention table to include feedback and feature requests
• Updated Supabase data sharing to include feedback storage

Minor clarifications and formatting updates.

• Clarified authentication provider data collection for social logins
• Added Viewsifier™ feature usage to collected data list
• Minor formatting and readability improvements

Initial Privacy Policy establishing our data practices and user rights.

• Defined data collection practices for account information, usage data, and payments
• Established data sharing relationships with Anthropic, Supabase, RevenueCat, and Netlify
• Outlined user rights under GDPR (EU/UK) and CCPA/CPRA (California)
• Specified data retention periods for different data types
• Described cookie usage and management options
• Clarified that message content is NOT stored in our database
• Set minimum age requirement at 16 years