Privacy Policy

1. Introduction

Idiosync ("we," "us," or "our") provides tools to improve prompts and highlight potentially sensitive information before you share content with third-party AI services. This Privacy Policy describes how we collect, use, store, and share information when you use our website, Chrome extension, and related services (collectively, the "Services").

Our data practices are guided by the principle of least privilege: we collect only what a given feature requires to function, retain it only as long as it serves that purpose, and limit access to it—by people and by systems—to what is strictly necessary.

By creating an account, you confirm that you have read this Privacy Policy and consent to the practices described here. If you do not agree, please do not use the Services or create an account.

2. Information we collect

We limit collection to the data each feature needs to operate. The categories below reflect that scope:

• Account data: Email address, password (stored securely by our authentication provider), name or display information you provide, and profile settings.
• Prompts and usage: Text you submit for analysis, improvement, or variant generation, along with metadata such as timestamps, feature used, and approximate usage counts.
• PII detection & preferences: We may process your text to flag information that could identify individuals (e.g., names, email addresses). You may mark specific terms as "not personal information" so we can store those preferences and reduce false positives.
• Extension / device: If you use our extension without signing in, we may use a locally generated device identifier to provide basic functionality; when you sign in, we associate activity with your account where applicable.
• Technical data: IP address, browser type, device type, and similar logs used for security, debugging, and service improvement.
• Payment (if applicable): Billing details are processed by our payment processors; we do not store full payment card numbers on our servers.

3. How we use information

• To provide, maintain, and improve the Services, including AI-assisted features.
• To authenticate you, enforce usage limits, and prevent abuse.
• To personalize suggestions and variants based on your settings and, where enabled, your history.
• To communicate with you about the Services, security matters, or policy updates.
• To comply with applicable law and to protect the rights, safety, and integrity of our users and the Services.

4. How we store and protect data

We rely on reputable infrastructure providers (including Supabase for authentication and database services) with industry-standard safeguards. No method of transmission or storage is completely secure; we work to protect your information but cannot guarantee absolute security.

Internal access to your data is governed by the principle of least privilege: employees and automated systems are granted only the access required to perform their specific function, access is scoped and logged, and permissions are reviewed periodically and revoked when no longer needed.

Certain product features store redacted or processed versions of prompts, designed to reduce retention of raw sensitive content. Other features may store original prompt text (for example, in session history) to provide continuity across your Services—see your account settings and in-product notices for details.

5. Sharing of information

We disclose information only where necessary, and only to the extent required for the purpose at hand. We may share information with:

• Service providers who assist us (e.g., hosting, authentication, AI APIs, analytics, email delivery), each bound by contractual obligations and granted access limited to what their service requires.
• Legal and safety: When required by law or legal process, or to protect Idiosync, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice where required.

We do not sell your personal information, as "sale" is defined under applicable U.S. state laws.

6. International users

If you access the Services from outside the United States, your information may be processed in the United States or in other countries where we or our service providers operate. Those jurisdictions may have data protection laws that differ from those of your home country.

7. Retention

We retain information only for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account, subject to applicable law and legitimate business needs (e.g., backups, financial records).

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access, correct, or delete certain personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with a supervisory authority (EEA/UK users).

To exercise these rights, contact us using the information below. We may verify your identity before responding.

9. Children

The Services are not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will take appropriate steps.

10. Third-party AI services

When you copy improved prompts into external AI tools, those services are governed by their own terms and privacy policies. We encourage you to review them before sharing content.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where required, notify you (e.g., by email or in-product notice). Continued use of the Services after such changes constitutes acceptance of the updated policy, except where prohibited by law.

12. Contact

For privacy questions or requests, please contact: casey@idiosyncai.com