Privacy Policy for Whoosh

Overview

Whoosh is a Chrome extension that enhances your Gmail experience by providing AI-powered profile cards when you hover over email addresses. This privacy policy explains how we collect, use, and protect your information.

Information We Collect

Email Addresses

• What: Email addresses you hover over in Gmail
• How: Detected through user interaction (hovering) within Gmail interface
• Purpose: To generate relevant profile information and insights

Usage Data

• What: Anonymous usage statistics (feature usage, response times)
• How: Collected through extension interactions
• Purpose: To improve extension performance and user experience

How We Use Your Information

Profile Enhancement

• Email addresses are processed through our secure API to generate profile cards
• We use third-party services to gather publicly available information
• All processing happens in real-time and data is not permanently stored

Third-Party Services

We use the following services to provide our functionality:

Supabase (Database & API)

• Purpose: Secure API hosting and temporary data processing
• Data: Email addresses (processed, not stored long-term)
• Privacy Policy: https://supabase.com/privacy

Tavily (Web Search)

• Purpose: Gathering publicly available information about email addresses
• Data: Email addresses for search queries
• Privacy Policy: https://tavily.com/privacy

OpenAI (AI Processing)

• Purpose: AI-enhanced profile information and insights
• Data: Email addresses and publicly available information
• Privacy Policy: https://openai.com/privacy

Data Storage and Retention

No Long-Term Storage

• Email addresses are not permanently stored in our systems
• Profile information is generated in real-time for each request
• No personal data is retained after the session ends

Local Browser Storage

• Extension preferences and settings may be stored locally in your browser
• This data never leaves your device
• You can clear this data by removing the extension

Data Security

Encryption

• All data transmission uses HTTPS encryption
• API communications are secured with industry-standard protocols

Access Controls

• Limited access to processing systems
• Regular security audits and monitoring

No Data Selling

• We never sell your personal information
• We never share email addresses with unauthorized parties

Your Rights

Control

• You can disable the extension at any time through Chrome settings
• Hover interactions are completely voluntary

Data Access

• Since we don't store personal data long-term, there's no persistent data to access
• Real-time processing means information is generated fresh for each interaction

Deletion

• Uninstalling the extension removes all local data
• No server-side data requires deletion as none is permanently stored

Supported Email Types

Our extension works with various email domains:

• Educational institutions (.edu domains)
• Corporate organizations
• Government entities (.gov domains)
• Personal email addresses

Chrome Extension Permissions

Required Permissions

• activeTab: To detect when you're on Gmail
• scripting: To inject hover functionality into Gmail pages
• tabs: To identify Gmail tabs for proper operation

Host Permissions

• mail.google.com: Required to operate within Gmail
• gmail.com: For Gmail access across different URLs
• Supabase API: For secure profile data processing

Updates to This Policy

We may update this privacy policy to reflect changes in our practices or for legal compliance. Updates will be posted with a new "Last Updated" date.

Legal Compliance

This extension and privacy policy comply with:

• Chrome Web Store Developer Program Policies
• GDPR (General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)
• CAN-SPAM Act (for email-related processing)

Third-Party Links

Our extension may display information from third-party sources. We are not responsible for the privacy practices of external websites or services.

By using the Whoosh extension, you acknowledge that you have read and understood this privacy policy and agree to the collection and use of information as described herein.

© 2025 Whoosh Extension. This privacy policy is effective as of January 31, 2025.