Privacy Policy

1. Overview

Scroll ("the Extension") is a browser extension that helps you navigate AI chat interfaces. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

Local Data (stored on your device)

The Extension stores conversation metadata, bookmarks, and search indexes locally in your browser's IndexedDB. This data never leaves your device unless you opt in to cloud sync.

Cloud-Synced Data (if you create an account)

• Account information: Email address and hashed password (via Supabase Auth)
• Bookmarked conversations: Chat titles, content, and metadata for bookmarked conversations
• Usage data: Daily count of AI asks and cloud bookmark count (for plan limits)
• Subscription data: Plan type and billing period (via Stripe)

Data We Do NOT Collect

• We do not read or store your AI provider credentials (ChatGPT, Claude, Gemini passwords)
• We do not track your browsing history
• We do not collect analytics or telemetry by default
• We do not sell any data to third parties

3. How We Use Your Data

• Provide cloud sync for your bookmarked conversations
• Power AI search features (Ask your Library)
• Manage your subscription and billing
• Enforce usage limits for free and premium plans

4. Third-Party Services

• Supabase: Database and authentication hosting (EU region available)
• Stripe: Payment processing for premium subscriptions
• OpenAI: Powers the AI search features (conversation content is sent for processing)

We do not share your data with any other third parties.

5. Data Retention

Local data is retained on your device until you uninstall the Extension or clear your browser data. Cloud-synced data is retained as long as your account is active. Upon account deletion, all cloud data is permanently removed within 30 days.

6. Your Rights

• Access: View your data through the Extension or account page
• Export: Export your conversations in multiple formats
• Delete: Delete your account and all associated cloud data
• Local only: Use the Extension without an account for fully local-only operation

7. Security

All cloud communications use HTTPS encryption. Authentication tokens are stored securely in Chrome's extension storage with locking mechanisms. Passwords are hashed by Supabase Auth and never stored in plaintext.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Extension after changes constitutes acceptance.

9. Contact

For privacy-related questions or data requests, contact us at privacy@tryscroll.com.