Privacy Policy

Your privacy matters. Learn how we collect, use, and protect your data.

Introduction

Welcome to ChatBridge AI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome Extension and related services.

By installing and using ChatBridge AI, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our extension.

Information We Collect

1. Google Account Information

When you sign in with Google OAuth, we collect:

  • Google ID: Your unique Google account identifier
  • Email Address: Your Google account email
  • Profile Information: Your name and profile picture (if available)

Purpose: This information is used for user authentication, account management, and to provide you with a personalized experience.

2. ChatGPT Conversation Content

When you use the migration feature, we temporarily process:

  • Chat Messages: The text content from your ChatGPT conversations (limited to the last 30 messages)
  • Message Metadata: Message roles (user/assistant), timestamps, and structure

Purpose: This content is processed by our AI to create an optimized context summary that you can migrate to a new ChatGPT conversation.

Important: We do NOT store your ChatGPT conversation content permanently. Messages are processed in real-time and discarded immediately after generating the migration summary.

3. Usage Data

We automatically collect certain information about your use of the extension:

  • Migration Count: Number of daily migrations performed
  • Feature Usage: Which modes you use (Auto, Coder, General)
  • Subscription Status: Your current plan (Free or PRO)
  • Extension Version: The version of the extension you're using

Purpose: To enforce usage limits, improve our service, and provide technical support.

4. Technical Information

We may collect:

  • Browser Information: Browser type and version
  • Extension Events: Installation, updates, errors (for debugging)
  • API Request Logs: Timestamps and response codes (no message content)

How We Use Your Information

We use the collected information for the following purposes:

  • Core Functionality: To provide ChatGPT conversation migration and context optimization
  • Authentication: To verify your identity and manage your account
  • Usage Tracking: To enforce free tier limits (3 migrations/day) and PRO tier benefits
  • Payment Processing: To manage subscriptions via Paddle (our payment processor and Merchant of Record)
  • Service Improvement: To analyze usage patterns and improve features
  • Technical Support: To troubleshoot issues and provide customer support
  • Security: To detect and prevent fraudulent activity or abuse

Data Storage and Security

Local Storage (Your Browser)

The following data is stored locally in your browser using Chrome's storage API:

  • JWT Token: For authenticating API requests (not encrypted by Chrome)
  • User Profile: Your Google ID, email, and subscription status
  • Pending Injection: Temporary storage for migration context (auto-deleted after 5 minutes)

Server Storage (Our Backend)

We store the following on our secure servers:

  • User Account: Google ID, email, subscription status, daily usage counters
  • Payment Records: Subscription history, transaction IDs (via Paddle)

We do NOT store: Your ChatGPT conversation history, message content, or any chat data. All conversation processing happens in real-time and is immediately discarded.

Security Measures

We implement industry-standard security practices:

  • HTTPS encryption for all data transmission
  • JWT-based authentication for API requests
  • Secure OAuth 2.0 flow for Google sign-in
  • Regular security audits and updates
  • Access controls and monitoring

Third-Party Services

We use the following third-party services to provide our functionality:

1. Google OAuth

  • Purpose: User authentication and sign-in
  • Data Shared: OAuth tokens (handled by Google)
  • Privacy Policy: Google Privacy Policy

2. Paddle

  • Purpose: Payment processing and Merchant of Record for PRO subscriptions
  • Role: Paddle acts as the Merchant of Record, meaning they handle all billing, tax compliance (VAT/GST), and payment processing on our behalf
  • Data Shared:
    • Email address (for receipts and subscription management)
    • Google ID (custom data to link your purchase to your account)
    • IP address and geolocation (for tax calculation)
    • Billing address (collected directly by Paddle)
    • Payment information (handled exclusively by Paddle, never stored by us)
  • Data Location: Paddle stores data in secure EU and US data centers
  • Privacy Policy: Paddle Privacy Policy
  • GDPR Compliance: Paddle is fully GDPR compliant and handles all data subject requests for payment-related data

Important: When you purchase through Paddle, Paddle becomes the data controller for payment-related information. We receive only subscription status updates and your Google ID for account linking.

3. OpenAI ChatGPT

  • Purpose: Source of conversations you choose to migrate
  • Data Shared: We scrape content from ChatGPT's DOM that you explicitly choose to migrate
  • Privacy Policy: OpenAI Privacy Policy

Note: We are not affiliated with OpenAI or ChatGPT. Our extension operates independently as a browser tool.

Data Retention

We retain your information for as long as necessary to provide our services:

  • Account Data: Retained while your account is active
  • Usage Statistics: Retained for 12 months for analytics
  • Chat Content: Never stored (processed and immediately discarded)
  • Payment Records: Retained for 7 years for legal/tax compliance

After account deletion, your data is permanently removed within 30 days, except where we are legally required to retain it.

Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and data
  • Portability: Request your data in a machine-readable format
  • Objection: Object to certain types of data processing
  • Withdraw Consent: Uninstall the extension at any time

To exercise these rights, please contact us at evgeniy.kalenichenko@zohomail.eu.

Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date below
  • Sending an email notification (for material changes)

Your continued use of the extension after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Last Updated: January 8, 2026

Effective Date: January 8, 2026