Privacy Policy

The Extension collects data in two primary ways: information you provide directly and information collected automatically through your use of the Extension.

**1.1 User-Provided Data** When you use the RxByte Prompt Manager, you may provide the following types of data: • **Prompts and Notes:** Content you create, save, and manage within the Extension, including text, titles, categories, tags, and other metadata. This content may contain personal or sensitive information depending on your input. • **Account Information:** Your email address, password (for direct login), and potentially your first name, last name, and avatar URL if you create an account or log in via OAuth (Google/GitHub). We also collect your subscription plan information. • **AI API Keys:** API keys for third-party AI services (e.g., OpenAI, Gemini, DeepSeek, Claude, Ollama) that you configure within the Extension to enable AI-powered features.

**1.2 Automatically Collected Data** As you use the Extension, certain information is collected automatically: • **Usage Analytics:** We collect anonymized data on how you interact with your prompts and notes, such as the number of times a prompt is copied, inserted, or viewed, daily activity, and category usage. This data helps us understand feature popularity and improve the Extension. This data is stored locally within your browser. • **AI Feature Usage:** We track the number of daily AI calls made through the Extension to enforce subscription-based usage limits. This data is stored locally within your browser. • **Webpage Content:** The Extension runs on all web pages (<all_urls>) to provide its core functionality. This allows it to access and process selected text, text within input fields, and other content on web pages when you actively use features like "Save as Note," "Check Grammar," "Translate Selection," or "Save as Prompt." This processing occurs locally within your browser and is only transmitted to our backend or third-party AI providers when you explicitly initiate an action requiring it. • **Technical Information:** Your IP address is inherently transmitted as part of standard network requests when the Extension communicates with our backend servers or third-party AI providers.

**2.1 Local Storage (within your browser)** The following data is stored locally within your browser's chrome.storage.local or chrome.storage.sync (if sync is enabled in your settings): • **Prompts and Notes:** The content and metadata of your prompts and notes. • **Extension Settings:** Your preferences, such as theme, default category, allowed sites, and whether cloud synchronization is enabled. • **AI Provider Settings:** Your configured AI API keys and selected AI models. • **Authentication Session:** Your access token, user profile information (email, name, avatar URL, subscription plan), and session creation timestamp. • **Extension Token:** A unique token used to authenticate your Extension with the RxByte backend. • **Usage Analytics and AI Usage:** Anonymized usage statistics and daily AI call counts. • **License Information:** Details about your RxByte subscription license.

**2.2 RxByte Backend Storage** When you enable synchronization or use features that interact with our services, the following data is transmitted to and stored on RxByte's secure backend servers (api.rxbyte.com): • **Prompts and Notes:** The content and metadata of your prompts and notes are synchronized to our backend to enable cross-device access and backup. • **Account Information:** Your email, hashed password (if direct login), OAuth provider information, first name, last name, avatar URL, and subscription plan are stored to manage your account and provide personalized services. • **AI Provider Settings:** Your configured AI API keys are stored securely on our backend if you choose to sync them.

We share your data only in specific circumstances and with trusted third parties as described below:

**3.1 Third-Party AI Providers** When you use AI-powered features (e.g., grammar check, translation, prompt enhancement) within the Extension, the selected text or prompt content is sent to the AI provider you have configured (e.g., OpenAI, Gemini, DeepSeek, Claude, Ollama). This transmission includes: • **Selected Text/Prompt Content:** The actual text you wish to process. • **Your AI API Key:** Used by the AI provider to authenticate your request and bill your usage (if applicable). Each AI provider has its own privacy policy governing how they handle the data they receive. We encourage you to review the privacy policies of the AI providers you choose to use.

**3.2 RxByte Backend** As detailed in Section 2.2, your prompts, notes, account information, and AI provider settings are shared with and stored on RxByte's backend servers for synchronization, account management, and service delivery.

**3.3 Legal Requirements** We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations, protect our rights or property, or ensure the safety of our users or the public.

We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. This includes using secure communication protocols (HTTPS) for data transmission and storing sensitive information on secure servers. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide you with services. If you delete your account, we will delete your personal data from our servers, though some anonymized or aggregated data may be retained for analytical purposes. Local browser data is deleted when you uninstall the extension.

You have the right to access, correct, or delete your personal data. You can manage your prompts, notes, and account settings directly within the Extension or by contacting us at [email protected]. We will respond within 30 days. EU/UK users have additional rights under GDPR and UK GDPR.

For privacy questions, email [email protected] or write to RxByte Inc., 143 Bernardo Dist 3rd Ave Cabanatuan City Philippines.