Privacy Policy

This Privacy Policy explains what information the Gethen Intelligence family of browser extensions — PrivIQ, ContextIQ, CartIQ, Culinairy, and Aissociate (collectively, the "Extensions" or the "Services") — collects, how it is used, and, just as importantly, what is deliberately never collected. If you have not already read it, see our Terms of Service, which governs your use of the Services alongside this Policy.

1. The Short Version

The Extensions are built around local, on-device AI. The content you're actually protecting, summarizing, tracking, or researching — the text on your screen, the documents you open, your clipboard, your browsing content — is analyzed on your device and is not uploaded to our servers as part of delivering that core functionality. What we do collect is limited to account and operational metadata: information needed to run your account, enforce subscription plans, keep the Services secure, and respond when you contact us.

2. What Is Processed Locally and Never Transmitted

Depending on which Extensions you install, this includes:

1. The text, forms, and structured content of the web pages you visit;
2. PrivIQ — Scans clipboard, screenshots, and typed text for API keys, tokens, and PII, and masks what it finds.
3. ContextIQ — Reads the page or PDF you’re viewing to summarize it, answer questions, and extract key information.
4. CartIQ — Watches prices on items you’re tracking and reasons about whether a deal is worth taking.
5. Culinairy — Parses recipe pages, scales servings, and scans pantry photos for ingredient substitutions.
6. Aissociate — Recognizes the kind of research you’re doing — investment banking diligence, private equity analysis, bond market research, and similar work — to build a local journey graph, score coverage, and draft memos.

This content is processed using models and logic that run in your browser or on your device. It is not sent to Gethen Intelligence, Gethen Capital Management LLC, or any third party for the purpose of providing this functionality, and we do not retain copies of it on our servers.

3. What We Do Collect

To operate accounts, subscriptions, and support, we collect:

1. Account information — the email address and authentication identifier associated with your Gethen Intelligence account.
2. Subscription and billing status — your plan tier, subscription status, and billing history, processed through our payment provider (Stripe). We do not store your full card number; Stripe handles payment details directly.
3. Usage metadata — feature usage counts and quota consumption (for example, the number of searches or curations used in a billing period), extension version, and general product-usage events needed to run free-tier limits and improve reliability.
4. Diagnostic and security data — error logs, crash reports, and technical information (such as browser and extension version) used to debug and secure the Services.
5. Support and contact-form submissions — anything you voluntarily submit through our contact form, including the content of your message and any information you choose to include in it.

We do not collect page content, browsing history, screenshots, clipboard data, or documents as part of this account and billing metadata — see Section 2.

4. How We Use What We Collect

1. To create, authenticate, and maintain your account across the Extensions you use;
2. To process payments, manage subscriptions, and enforce plan limits;
3. To respond to messages you send through the contact form;
4. To monitor, secure, debug, and improve the Services;
5. To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use the content described in Section 2 to train models, ours or anyone else's.

5. Third-Party Service Providers

We rely on a small number of infrastructure providers to operate the Services. These providers process account and operational metadata on our behalf and are bound by their own privacy and security commitments:

1. Cloud infrastructure and authentication — to host our backend, database, and sign-in system;
2. Payment processing — Stripe, to process subscription payments and manage billing;
3. Transactional email — Brevo, to deliver account, billing, and support-related emails, including replies to contact-form submissions;
4. Browser platform — the Chrome Web Store and your browser vendor, which govern how extensions are distributed and permissioned on your device.

Certain product features (for example, cross-site price or availability comparison) may query third-party websites or search providers on your behalf to complete that specific function. These queries are limited to what is needed to complete the feature and are not used to build a profile of your general browsing activity.

6. Data Retention

We retain account and billing metadata for as long as your account is active, and for a reasonable period afterward as needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Support and contact-form submissions are retained for as long as needed to address the inquiry and for our records. You may request deletion of your account and associated metadata as described in Section 8.

7. Data Security

We use commercially reasonable administrative, technical, and organizational measures designed to protect the account and operational metadata we hold. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Because the content described in Section 2 is processed locally and generally does not reach our servers, its security depends substantially on the security of your own device and browser.

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, export, or delete the account and operational metadata we hold about you, or to object to or restrict certain processing. You can exercise these rights, or ask any question about your data, by submitting a request through our contact form. We will respond within a reasonable time and may need to verify your identity before acting on a request.

9. Children's Privacy

The Services are not directed to, and are not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us through our contact form so we can delete it.

10. International Users

Our infrastructure providers may process account and operational metadata in the United States and other countries. By using the Services, you understand that your metadata may be transferred to, stored, and processed in a country other than your own, which may have data protection laws different from those of your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be reflected on this page; continued use of the Services after a revision becomes effective constitutes acceptance of the revised Policy.

12. Contact

Questions about this Privacy Policy, or requests concerning your data, should be submitted through our contact form. We do not accept privacy requests through any other channel.