CRUX Privacy Policy

Account Information

• Email Address: We collect and store your email address when you create an account or sign in via Firebase Authentication.
• Password: Managed and stored by Firebase Auth; we do not store or process your password in our own servers.

Stripe Information

• We receive certain information via Stripe webhooks for billing and subscription management (e.g., subscription status, payment confirmations).
• This data is stored securely in our Firestore database for account and billing records.

Usage Information

• Token Count and Summary Count: We track how many tokens are used and how many summaries are generated in order to monitor usage, enforce plan limits, and provide analytics.
• Local Extension Settings: Certain settings or preferences might be saved locally in your browser to personalize your experience.

No Browsing Data

We do not collect or store your browsing history, visited URLs, or timestamps beyond what is essential for providing the service (such as capturing the text you want summarized).

No Sensitive Data

We do not knowingly collect any health, financial, or other sensitive personal data beyond the minimal Stripe billing data and email information required for service functionality.

Service Provision

• To authenticate you through Firebase and provide access to the Extension features.
• To generate AI-based summaries of web content or YouTube videos as requested by you.

Analytics & Usage Statistics

We track token and summary counts to monitor feature usage, optimize performance, and provide accurate billing or subscription information.

Billing & Account Management

We use Stripe information to manage subscriptions, handle payments, and keep track of billing history.

User Support

We may use your email to respond to support inquiries or inform you of account-related updates.

Service Improvements

Usage information, in aggregate form, helps us identify new features or improvements for our products and services.

Third-Party Service Providers

• Firebase: We rely on Firebase for authentication (storing and verifying user credentials) and as a database service (storing user profiles and usage metrics).
• Stripe: We receive subscription and billing updates from Stripe, which may include limited personal and financial information (e.g., payment status).
• OpenAI & Mistral: For text processing and summarization. The data sent for summarization does not include personally identifiable information.
• We do not share or sell your data to third parties for their own marketing purposes.

Legal Requirements

We may disclose your information to law enforcement or government officials if required to comply with a legal obligation, protect our rights, or prevent illegal activity.

Secure Storage

Personal data such as email addresses, usage data, and subscription information are stored in Firestore. Firebase enforces its own security measures, including encryption at rest and in transit. Our extension does not specifically target or store private communications or health data. However, if the user visits a web-based email client, a patient portal, or any site containing sensitive data, our summarization feature may process whatever text is present on that page. This data is transmitted to our summarization service solely for the purpose of generating a summary, then discarded. We do not retain or share this information beyond providing the summary.

Access Controls

Firebase Authentication is used to verify user identities. We issue JWT tokens that expire after a set period and automatically refresh them to maintain user sessions securely.

Local Storage

The Extension may store local settings and preferences in your browser. These do not include personal data beyond what is necessary for the Extension to function (e.g., extension-specific settings).

Account Deletion

If you wish to delete your account, please contact us at privacy@algol-ai.com. Deleting your account will remove all collected user data from our systems (e.g., Firestore, Stripe records).

Opt-Out

We do not offer an opt-out from essential data collection because it is required to provide the core functionality of the Extension. If you object to our data collection practices, the only option is to discontinue use and request account deletion.

Cookies & Local Storage

The Extension may rely on local browser storage or cookies to operate (e.g., storing user preferences). By using the Extension, you consent to the use of cookies or local storage.

Worldwide Regulatory Compliance

• Depending on your location, you may have rights under GDPR, CCPA, or other applicable privacy regulations, which may include: The right to access, correct, or delete your personal information, and the right to object or restrict certain data processing activities.
• Please contact us at privacy@algol-ai.com for any such requests.