Privacy Policy

The Short Version

• We collect only what we need to provide the service (your email, Slack workspace info, and which Chrome extensions you want to monitor)
• We never sell your data to anyone
• We use industry-standard encryption to protect your information
• You can delete your account and data at any time

1. Information We Collect

Account Information

When you create an account, we collect your email address and name (if provided through Google OAuth). This is used to identify your account and communicate with you about the service.

Slack Workspace Data

When you connect your Slack workspace, we receive an OAuth access token that allows us to post messages to channels you specify. We store this token securely using AES-256 encryption. We only request the minimum permissions needed: chat:write to post reviews and channels:read to list available channels.

Chrome Extension Information

We store the Chrome Web Store extension IDs you choose to monitor. We scrape publicly available review data from the Chrome Web Store for these extensions. This includes reviewer usernames, star ratings, review text, and review dates—all of which is public information.

Payment Information

Payments are processed by Stripe. We never see or store your full credit card number. We only receive confirmation of payment status and a customer ID from Stripe.

Usage Data

We collect basic usage analytics to improve the service, including pages visited and features used. We don't track you across other websites.

2. How We Use Your Information

We use your information to:

• Provide the Chrome Review Bot service (monitoring and notifications)
• Process payments and manage your subscription
• Send service-related emails (password resets, important updates)
• Improve the product based on usage patterns
• Respond to support requests

We will never use your information to send marketing emails without your explicit consent, sell to advertisers, or share with third parties except as described in this policy.

3. Data Sharing

We share data only with the following third parties, and only as necessary to provide the service:

• Supabase - Database hosting and authentication
• Stripe - Payment processing
• Slack - To post notifications to your workspace

We may also disclose information if required by law or to protect our rights, but we'll notify you if legally permitted to do so.

4. Data Security

We implement industry-standard security measures:

• All data is encrypted in transit using TLS
• Sensitive data (like Slack tokens) is encrypted at rest using AES-256-GCM
• Database access is protected by Row Level Security policies
• We use secure, httpOnly cookies for authentication

5. Data Retention

We retain your data for as long as your account is active. Review data (the reviews we've scraped) is stored to prevent duplicate notifications. If you delete your account, we will delete all your personal data within 30 days. Some anonymized, aggregated data may be retained for analytics purposes.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Disconnect your Slack workspace at any time

To exercise these rights, contact us at privacy@chromereviewbot.com.

7. Cookies

We use essential cookies only—specifically for authentication and session management. We don't use tracking cookies or third-party advertising cookies.

8. Children's Privacy

Chrome Review Bot is not intended for use by children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we'll notify you by email or through the service. Continued use after changes constitutes acceptance of the new policy.

10. Contact Us

Questions about this policy? Email us at privacy@chromereviewbot.com.