Privacy Policy

1. Introduction

Welcome to Curip ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Chrome extension and web application (collectively, the "Service").

By using Curip, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

Email Address: We collect your email address when you sign in using Google OAuth. This is used solely for account creation and authentication.

2.2 Authentication Information

OAuth Tokens: We receive temporary authentication tokens from Google OAuth to verify your identity. These tokens are handled securely and are not permanently stored in our extension.

2.3 User-Generated Content

• AI Prompts: Text prompts you capture from ChatGPT, Claude, Gemini, or manually enter
• Templates: Prompt templates you create with variables
• Tags: Tags you assign to organize your prompts and templates
• Workspaces: Workspace names and organization structure you create

2.4 Usage Information

• Prompt Count: Number of prompts and templates in your library (for display purposes)
• Template Usage: How many times you use each template (for sorting by popularity)
• Platform Detection: Which AI platform (ChatGPT, Claude, Gemini) a prompt came from

2.5 Technical Information

Local Cache: Our browser extension temporarily stores your most recent captured prompt locally in your browser for quick access. This is cleared when you save the prompt or close the browser.

3. How We Collect Information

3.1 Chrome Extension

Our Chrome extension uses content scripts that run on ChatGPT, Claude, and Gemini pages to:

• Detect when you send a prompt to these AI platforms
• Temporarily store the prompt text in your browser's local storage
• Display the prompt in the extension popup when you open it

Important: No data is transmitted to our servers until you explicitly click "Save Prompt" or "Save as Template" in the extension popup.

3.2 Web Application

Information is collected when you:

• Sign in with Google OAuth
• Save a prompt or template from the extension
• Create, edit, or delete prompts/templates in the web app
• Organize items with tags or workspaces

4. How We Use Your Information

We use your information solely for the following purposes:

• Account Management: To create and maintain your account
• Core Functionality: To store, organize, and sync your prompts and templates across devices
• Template Features: To enable variable replacement and template reuse functionality
• Organization: To provide tagging, workspace, and search capabilities
• Service Improvement: To fix bugs and improve our service (aggregate data only, never individual prompts)

We do NOT use your data for:

• ❌ Training AI models
• ❌ Advertising or marketing
• ❌ Selling to third parties
• ❌ Analytics or user tracking
• ❌ Any purpose unrelated to core prompt management

5. Data Storage and Security

5.1 Where Your Data is Stored

Your data is stored securely on Supabase (a SOC 2 Type II certified platform) with servers located in Mumbai, India (South Asia region).

5.2 Security Measures

• Encryption in Transit: All data transmitted between your browser and our servers uses HTTPS/TLS encryption
• Encryption at Rest: Your data is encrypted in our database
• Access Control: Row-Level Security (RLS) ensures you can only access your own data
• Authentication: Secure OAuth 2.0 authentication via Google
• No Plain Text Storage: Passwords are never stored (handled by Google OAuth)

5.3 Data Retention

We retain your data for as long as your account is active. You can delete individual prompts and templates at any time from within the application. You can also delete your entire account and all associated data from your account settings page.

6. Data Sharing and Third Parties

We do not sell, rent, or share your personal data with third parties except in the following limited circumstances:

6.1 Service Providers

• Supabase: Database and authentication infrastructure (SOC 2 Type II certified)
• Google OAuth: Authentication service (you control what data Google shares with us)
• Netlify: Web hosting and deployment

These providers are contractually obligated to protect your data and can only use it for providing services to us.

6.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests (e.g., court orders, subpoenas).

6.3 Business Transfers

If Curip is acquired or merged with another company, your data may be transferred to the new owner. We will notify you before this happens.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access: View all your prompts, templates, and account information anytime
• Edit: Modify or update your prompts and templates
• Delete: Remove individual prompts and templates at any time from the web application
• Export: Request a copy of your data by contacting us

7.2 Account Deletion

You can delete your account and all associated data at any time from your account settings page. When you delete your account, we will permanently remove:

• All your prompts and templates
• All your snippets and folders
• Your account information and authentication data

Account deletion is immediate and cannot be undone. If you need assistance with account deletion, please contact us at abdullahhaja0@gmail.com.

7.3 Opt-Out

You can stop using our service at any time by:

• Uninstalling the Chrome extension
• Stopping use of the web application
• Contacting us to request account deletion

8. Chrome Extension Permissions

Our extension requests the following permissions. Here's why we need each one:

• storage: To cache your last captured prompt locally for quick access and maintain authentication state across browser sessions.
• activeTab: To identify the current tab and communicate with content scripts running on AI platform pages. Does not grant access to read page content.
• notifications: To show non-intrusive notifications for successful captures and auth updates.
• Content Scripts (chatgpt.com, claude.ai, gemini.google.com): To automatically detect when you send prompts and temporarily store them for capture. No data is sent to our servers until you explicitly save.
• Host Permissions (*.netlify.app): To communicate with our web application API for authentication and data syncing.

9. Children's Privacy

Curip is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Users

Curip is operated from India. Your data is stored on servers located in Mumbai, India (South Asia region). If you are accessing our service from outside India, please be aware that your information may be transferred to, stored, and processed in India.

By using our service, you consent to the transfer and processing of your information in India.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if changes are significant
• Display a notice in the app for 30 days after changes

Your continued use of Curip after changes take effect means you accept the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

13. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at abdullahhaja0@gmail.com

14. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal data we collect and how we use it
• Right to Delete: Request deletion of your personal data
• Right to Opt-Out: Opt-out of the sale of your data (we don't sell data)
• Right to Non-Discrimination: We won't discriminate against you for exercising your rights

To exercise these rights, contact us at abdullahhaja0@gmail.com