PurchaseDot Browser Extension — Privacy Policy

Draft. Review with your own legal/DPO, fill the [PLACEHOLDER] items, and host it at a public URL to link from the Chrome Web Store listing and your app.

Effective date: [DATE] Data controller: [PurchaseDot legal entity, address] Contact: [privacy@purchasedot.com]

The PurchaseDot browser extension (“the extension”) helps PurchaseDot users turn an online shopping cart into a purchase request. This policy explains what the extension accesses, why, and who it is shared with.

What the extension accesses

Account / sign-in. You sign in with your PurchaseDot account through Amazon Cognito’s hosted login. The extension never sees your password — Cognito handles authentication and returns access tokens, which are stored locally in your browser (chrome.storage.local) and sent only to PurchaseDot’s own API to authorise your requests.

Cart contents (only when you ask). When you click Turn cart into a purchase request on a shopping-cart page, the extension captures a screenshot of that page and sends it to PurchaseDot’s servers, which read the items, quantities, and prices to pre-fill your purchase request. This happens only on that click — the extension does not capture pages in the background, and does not capture any page until you press the button.

Product analytics. The extension sends anonymous usage events (e.g. “signed in”, “cart captured”, “extraction failed”) to PostHog to help us improve the product. These events contain no page content, no keystrokes, and no screenshots — only which action occurred, timestamps, the extension version, and an identifier (your PurchaseDot user id when signed in, otherwise a random id). The extension does not use session replay and does not record what you type or browse.

What the extension does NOT do

• It does not read, collect, or track your browsing history.
• It does not capture pages other than the cart page you explicitly submit.
• It does not log keystrokes or read form fields.
• It does not sell your data or share it for advertising.

How the data is used

• Cart screenshot → processed to extract line items and create your purchase request. [State retention: e.g. “not retained after the request is created” — confirm with your backend team.]
• Account tokens → to authenticate your API requests.
• Analytics events → aggregate product usage and reliability.

Who we share it with (subprocessors)

• Amazon Web Services — Cognito (authentication) and, via our backend, Amazon Bedrock (the AI model that reads the cart screenshot). Region: EU (eu-west-1).
• PostHog — product analytics. Region: EU.

We do not share your data with any other third parties.

Permissions and why

• identity — to run the secure sign-in flow.
• activeTab / scripting / tabs — to capture the cart page you are on when you press the button, and to read its address so the request links back to the source.
• storage — to keep you signed in and briefly hold the captured cart data while the request is prepared.
• host access to app.purchasedot.com, api.purchasedot.com, the Cognito login domain, and the analytics endpoint — to sign in, submit cart data, and open your request. The extension does not request access to arbitrary websites.

Your choices

• Sign out from the extension popup to clear your tokens from the browser.
• Uninstall the extension to remove it and its locally stored data.
• Contact [privacy@purchasedot.com] to exercise data rights under GDPR.

Changes

We may update this policy; material changes will be reflected here with a new effective date.