Privacy Policy

a. Website

When you use our Website, we may collect:

• Information you provide: such as your email address when you join our waitlist, contact us for support, or submit inquiries through forms on the Website.
• Automatically collected information: such as your IP address, browser type and version, operating system, referring URLs, pages viewed, and visit timestamps.
• Cookies and similar technologies: used to improve the Website, analyze traffic, and enhance user experience. You can control cookies through your browser settings.

b. Chrome Extension

The Extension is designed to operate primarily on your device. We do not operate a backend service that receives, stores, or processes your prompts, API keys, or browsing activity for AI inference.

When you use the Extension, the following data is stored locally in your browser via Chrome extension storage and IndexedDB:

• API keys you configure for AI providers (OpenAI, Anthropic, Google AI Studio, xAI, etc.)
• Extension settings and preferences (such as model choices, theme, and pinned prompts)
• Conversation history and chat messages, if you enable history
• Basic client metadata (such as a locally generated client ID, extension version, browser, and operating system)

To perform automation tasks, the Extension may capture screenshots, page content, and interaction data from web pages you ask it to work with. This information is sent directly from your browser to the AI provider you configure. Waffy does not proxy, log, or store these requests on our servers.

The Extension requests browser permissions (including access to tabs, active pages, storage, and page interaction capabilities) solely to provide its automation features. You can review and manage these permissions in chrome://extensions.

a. Website

We may use Website information to:

• Operate, maintain, and improve the Website
• Manage waitlist sign-ups and communicate updates about Waffy
• Respond to inquiries and provide customer support
• Monitor usage trends and detect technical issues or abuse
• Comply with legal obligations

b. Chrome Extension

Locally stored Extension data is used to:

• Authenticate requests to your chosen AI providers using your API keys
• Execute browser automation tasks you request in natural language
• Save your settings, preferences, and optional conversation history

We do not use Extension data for advertising, profiling, or resale. Because AI requests are sent directly to third-party providers you choose, those providers' privacy policies govern how they handle your data.

We do not sell, rent, or trade your personal information.

We may share information in the following circumstances:

• AI providers you configure: When you use the Extension, prompts, screenshots, and related page data are transmitted directly from your browser to the AI provider whose API key you supply. We do not receive or store this data.
• Service providers: We may use vendors for Website hosting, email delivery, analytics, and similar services related to the Website only.
• Legal requirements: We may disclose information if required by law or in response to valid requests by public authorities.

Website data is retained only as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements.

Extension data (including API keys, settings, and conversation history) remains on your device until you delete it, uninstall the Extension, or clear the Extension's browser storage. We do not retain copies of Extension data on our servers.

We implement appropriate technical and organizational measures to protect Website data. API keys and Extension data are stored locally in your browser; you are responsible for securing your device and not sharing your browser profile or storage exports.

No method of transmission or storage is completely secure. You use the Extension and Website at your own risk, and you should review the security practices of any AI provider you connect.

Depending on your location, you may have rights under applicable data protection laws, including:

• The right to access, update, or delete personal information we hold about you through the Website
• The right to object to or restrict processing of your personal data
• The right to data portability
• The right to withdraw consent where processing is based on consent

For Extension data stored locally on your device, you can delete it at any time through the Extension settings, by clearing extension storage, or by uninstalling the Extension.

To exercise rights related to Website data, contact us using the details below.

The Extension integrates with third-party AI providers that you configure independently. Those providers are not controlled by us, and their handling of your data is governed by their own terms and privacy policies.

Our Website may contain links to third-party websites (such as GitHub, social media, or documentation). We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing information to them.

Waffy is open source and available under the Apache License 2.0. You may inspect, modify, and distribute the Extension source code in accordance with that license. The open-source repository is available at github.com/upzare/Waffy.

Our Website and Extension are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the Effective Date above. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or our data practices, contact us at support@waffy.io.