Last updated: May 13, 2026
At AI Browsing Assistant, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, process, and disclose your information when you use our Chrome browser extension and associated services (collectively, the "Extension").
By installing and using the Extension, you agree to the collection and use of information in accordance with this policy.
We collect and store only the minimum information necessary to provide our service. Specifically:
AI Browsing Assistant authenticates using your own Google Account via OAuth 2.0. When you sign in, you grant the Extension the following specific permissions:
email scope: Allows the Extension to view your email address associated with your Google Account. This is used to identify your account.generative-language.retriever scope: Allows the Extension to access Google's Gemini API for AI processing. This is required for the AI features to function.The Extension never sees, accesses, or stores your Google Account password. Authentication is handled securely by Google's OAuth system. For more information about how Google handles your data, please review the Google Privacy Policy.
IMPORTANT: When you use the Extension's AI features, the following data is transmitted directly from your browser to Google's Gemini API servers for processing:
Key Fact: This AI-related data flows directly from the Extension to Google. Our backend server (Firebase) never sees, accesses, intercepts, or stores these prompts, webpage snippets, or AI responses. Google processes this data under their own Terms of Service and Privacy Policy. We encourage you to review Google's Terms of Service and Google Privacy Policy to understand how Google handles your AI processing data.
When you sign up for an account or subscribe to our Pro plan, we collect your email address. Your email is used to:
For Free-tier users, we maintain a simple integer counter of AI prompts submitted per day to enforce the daily usage limit. This counter is associated with your email address and resets automatically every 24 hours. No prompt content, webpage content, or AI responses are included in this usage data — only a numerical count. This data is not used for any other purpose.
We do not collect, store, or process your payment card details. All payment processing for Pro subscriptions is handled securely by our third-party payment processor, Stripe. We may receive a confirmation of your payment status (e.g., paid or declined) and your email address, but we never have access to your full financial details. For more information, review the Stripe Privacy Policy.
We do NOT collect, access, or store long-term any of the following on our systems:
We collect information in the following ways:
Your email address is collected when:
Important clarification about AI processing: As explained in Section 2.2, when you use AI features, prompts, webpage content snippets, and queries are transmitted directly from your browser to Google's Gemini API for processing. This data flows: Extension → Google API → Extension.
Our Firebase backend server never sees, intercepts, or stores this AI processing data. Our backend only receives and stores: (1) your email address and (2) a simple daily integer counter of prompt usage for free-tier usage limit enforcement.
If you are located in the European Economic Area (EEA) or the United Kingdom, our lawful basis for collecting and processing your email address is:
We take the security of your data seriously. Your information is stored in three distinct locations, each with appropriate security measures:
The following data is stored only locally on your device using browser storage mechanisms (localStorage or Chrome Extension storage):
This data never leaves your browser and is never transmitted to our servers or any third parties. It remains on your device until you uninstall the Extension or clear your browser storage.
The following data is stored by Stripe, our PCI-DSS compliant payment processor:
Stripe's security practices include encryption, access controls, and regular security audits. For more information, see the Stripe Privacy Policy and Stripe Security.
Our backend infrastructure is hosted on Firebase (Google Cloud Platform) in the European Union (EU). Only the following minimal data is stored here:
IMPORTANT: Our Firebase backend never stores any of the following: prompt content, webpage snippets, AI responses, browsing history, IP addresses, or any sensitive personal data. Only email + integer counter.
We implement appropriate security measures:
Data retention periods vary by storage location. We retain data only for as long as necessary:
Important: Prompts, webpage content snippets, and AI responses transmitted to Google's Gemini API are processed by Google. Retention of this AI data is governed by Google's Privacy Policy and data retention practices. We have no control over how long Google retains this data. Review Google's Privacy Policy for more information.
We do not sell, rent, or trade your personal information to third parties for advertising or marketing purposes. However, we do share data with third parties as necessary for the Extension to function. Below is a complete disclosure:
This is the most important data sharing relationship:
generative-language.retriever OAuth scope you grant when signing in.If you have questions about how Google handles your AI processing data, you should review Google's privacy documentation or contact Google directly.
email OAuth scope) and authentication tokens.We may disclose your information if required to do so by law or in response to valid legal requests (e.g., a court order, subpoena, or government investigation). We will notify you where legally permitted.
In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your data.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you (your email address and associated usage data).
You have the right to request that we correct any inaccurate or incomplete data we hold about you.
You have the right to request the deletion of your personal data. Upon verification, we will delete your email and all associated records within 30 days, subject to legal retention obligations.
You have the right to request that we restrict the processing of your data under certain circumstances (e.g., while a correction request is being evaluated).
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
If you are in the EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your data violates applicable law.
To exercise any of these rights, please contact us at kessawy.dev@gmail.com. We will respond within 30 days.
The Extension may contain links to third-party websites or services (e.g., payment processors, Google services). This Privacy Policy applies only to our Extension. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you interact with.
The Extension is not intended for use by individuals under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.
Data may be transferred between different countries depending on the service provider. Below is a breakdown by storage/processing location:
Good news for EU users: Our Firebase backend infrastructure is hosted in the European Union (EU). This means:
This is where most international transfers occur:
For more information about Google's international data transfer practices, please review the Google Privacy Policy and Google Cloud Data Processing Terms.
Where international data transfers occur (primarily through Google and Stripe), we and our service providers ensure appropriate safeguards are in place through:
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you by:
We encourage you to review this Privacy Policy periodically. Your continued use of the Extension after changes take effect constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will make every effort to address your concerns promptly.