Privacy Policy

1. Overview

This Privacy Policy describes how Text Extractor Pro ("we," "our," or "us") collects, uses, and protects your information when you use our Chrome extension and related services. We are committed to transparency and your privacy rights under GDPR, CCPA, and other applicable laws.

2. Information We Collect

2.1 Data We Do NOT Collect

2.2 Data We Do Collect

2.3 Detailed Data Collection

Account Information:

• Email address (for authentication via Firebase)
• User ID (generated automatically)
• Subscription status and preferences
• Account creation and last access timestamps

Usage Analytics (Anonymous):

• Number of text extraction requests
• Feature usage counts (translation, summarization, etc.)
• Error rates and performance metrics
• Extension version and browser type
• General usage patterns (aggregated, non-identifying)

Technical Information:

• Error logs (without personal content)
• Performance metrics
• Extension crash reports
• API response times and success rates

3. How We Use Your Information

3.1 Service Provision

• Text Processing: Images are processed in real-time for text extraction
• AI Features: Content is sent to AI services for translation and summarization
• Usage Limits: Track requests to enforce free/premium limits
• Account Management: Maintain your subscription and preferences

3.2 Service Improvement

• Performance Optimization: Improve processing speed and accuracy
• Feature Development: Understand which features are most valuable
• Bug Fixes: Identify and resolve technical issues
• Security: Monitor for abuse and maintain service security

4. Data Processing and Third Parties

4.1 AI Processing Partners

We use trusted AI service providers to process your images and text. These services:

• Process your content in real-time for extraction, translation, and summarization
• Do not store your content beyond the processing session
• Are bound by strict data processing agreements
• Comply with GDPR and other privacy regulations

4.2 Service Providers

4.3 Payment Processing (Paddle)

All payment processing is handled by Paddle.com, our trusted payment processor and Merchant of Record. When you make a purchase:

• Data Sharing: We share your email address and subscription details with Paddle
• Payment Data: Paddle handles all payment information directly - we never see your card details
• PCI Compliance: Paddle maintains PCI DSS compliance for secure payment processing
• Tax Handling: Paddle calculates and collects applicable taxes based on your location
• Data Retention: Paddle retains payment data according to their privacy policy and legal requirements
• GDPR Compliance: Paddle maintains appropriate safeguards for EU customer data

For detailed information about how Paddle processes your payment data, please review Paddle's Privacy Policy.

5. Your Privacy Rights

Under GDPR, CCPA, and other applicable laws, you have the following rights regarding your personal data:

5.1 Exercising Your Rights

To exercise any of these rights, please contact us using the information below. We will respond to your request within 30 days (GDPR) or 45 days (CCPA) as required by law.

5.2 Account Deletion

You can delete your account and all associated data at any time through the extension settings. Account deletion will:

• Permanently remove your account and profile information
• Cancel any active subscriptions
• Delete usage statistics and preferences
• Remove you from our systems within 30 days

6. Data Security

6.1 Security Measures

• Encryption: All data transmitted is encrypted using HTTPS/TLS
• Access Controls: Strict access controls limit data access to authorized personnel
• Regular Audits: Security practices are regularly reviewed and updated
• Minimal Data: We collect only the minimum data necessary for service operation

6.2 Data Breach Response

In the unlikely event of a data breach affecting personal information, we will:

• Notify affected users within 72 hours
• Report to relevant data protection authorities as required
• Provide clear information about what data was affected
• Take immediate steps to secure the breach and prevent further incidents

7. International Data Transfers

Your data may be processed in countries outside your residence, including the United States. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) for GDPR compliance
• Adequacy decisions where available
• Privacy Shield frameworks where applicable
• Regular assessment of data protection laws in processing locations

8. Children's Privacy

Text Extractor Pro is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete such information immediately.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate for exercising privacy rights

9.1 CCPA Data Categories

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Email address, user ID
• Commercial Information: Subscription records, payment history
• Internet Activity: Usage statistics, feature interactions
• Professional Information: None collected

10. Cookie Policy

Text Extractor Pro uses minimal cookies and local storage for:

• Authentication: Keep you logged in to your account
• Preferences: Remember your settings and preferences
• Analytics: Understand usage patterns (anonymized)

You can control cookie usage through your browser settings. Disabling cookies may limit some functionality of the extension.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Notify users through the extension or via email
• Provide 30 days notice before changes take effect
• Maintain previous versions for reference
• Highlight key changes clearly

12. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Account management, subscription services
• Legitimate Interest: Service improvement, security, analytics
• Consent: Optional features, marketing communications
• Legal Obligation: Compliance with applicable laws