Privacy Policy

1. Introduction

Welcome to Echoes Os ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including our web application at echoesos.com and our Chrome browser extension (collectively, the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide to Us

Account Information

• Name
• Email address
• Authentication credentials (managed through Clerk)
• Profile information you choose to provide

Content You Capture

• Web pages you choose to save using our Chrome extension
• URLs and metadata of captured pages
• Notes and tags you add to captures
• Search queries and interactions with the Service
• Messages you send to our AI chat feature

2.2 Information Automatically Collected

Usage Data

• Log data (IP address, browser type, operating system)
• Device information
• Pages visited within our Service
• Time and date of your visit
• Time spent on pages
• Unique device identifiers

Chrome Extension Data

• URLs of pages you capture (only when you actively click the capture button)
• Page content you choose to save
• Selected text when using the capture selection feature
• Extension version and error logs

2.3 Information We Do NOT Collect

• We do NOT automatically track your browsing history
• We do NOT capture pages without your explicit action
• We do NOT access your bookmarks, passwords, or other browser data
• We do NOT sell your personal information to third parties

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Create and manage your account
• Process and store your captured content
• Enable search and AI-powered features on your saved content
• Improve, personalize, and expand our Service
• Understand and analyze how you use our Service
• Communicate with you for customer service and support
• Send you updates and other administrative information
• Prevent fraud and ensure Service security

4. AI and Data Processing

4.1 AI Features

• We use OpenAI's API to provide AI chat and search features
• Your captured content may be sent to OpenAI to generate responses
• We do not use your data to train AI models
• AI interactions are associated with your account for context continuity

4.2 Data Processing

• Content is processed to create searchable embeddings
• Text extraction occurs locally in your browser when possible
• Processed data is stored securely in our Supabase database

5. Data Storage and Security

5.1 Where We Store Data

• Primary data storage: Supabase (PostgreSQL database)
• Authentication data: Clerk services
• All data is stored in secure data centers in the United States

5.2 Security Measures

• Encryption in transit using TLS/SSL
• Encryption at rest for sensitive data
• Regular security audits and updates
• Access controls and authentication requirements
• Regular backups to prevent data loss

5.3 Data Retention

• We retain your captured content until you delete it
• Account information is retained while your account is active
• After account deletion, we may retain certain information as required by law

6. Sharing Your Information

We may share your information in the following situations:

6.1 Service Providers

• Supabase: Database hosting and management
• Clerk: Authentication and user management
• OpenAI: AI-powered features (content sent only when you use AI features)
• Hosting providers: For serving our application

6.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred.

6.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

7. Your Rights and Choices

7.1 Access and Portability

You can access and export your captured content at any time through the Service.

7.2 Correction

You can edit or update your captures, tags, and profile information through your account settings.

7.3 Deletion

• Delete individual captures through the Service interface
• Request complete account deletion by contacting support@echoesos.com
• Upon account deletion, all your captured content will be permanently removed

7.4 Chrome Extension Controls

• Disable or uninstall the extension at any time through Chrome's extension management
• Control which sites can be captured through extension settings
• Clear local extension data through browser settings

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

10. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price

12. European Privacy Rights (GDPR)

If you are a European resident, you have the following rights:

• Right to access your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

To exercise these rights, contact us at privacy@echoesos.com.

13. Updates to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Posting the new privacy policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for material changes

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

15. Cookie Policy

We use cookies and similar tracking technologies to track activity on our Service and hold certain information.

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function
• Analytics Cookies: To understand how you use the Service
• Preference Cookies: To remember your settings and preferences

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.