Small GPT – Privacy Policy

Effective: 23‑12‑2025 • Contact: talhaansari1606@gmail.com

1) What this extension does

Small GPT lets you select or copy text on a webpage (including PDFs) and request an AI explanation or summary. The extension sends only the text you choose (plus minimal context) to the backend to generate the response and shows it in the popup.

2) Data we collect (after your action)

• Selected text and a small surrounding snippet
• Page metadata: URL and content type (e.g., article, code)
• PDFs: a short text slice around the copied selection when you click “Use clipboard”
• YouTube watch pages: title, channel, description, and up to 50 visible comments (when used there)

Not collected: passwords, payment info, device/ads IDs, keystrokes, browsing history, or background page crawling.

Local storage: only lightweight UI settings (e.g., theme). No user text is stored by the extension.

3) How we use the data

App functionality only—to generate the AI answer you requested. We do not sell your data and do not use it for advertising or analytics.

4) Where processing occurs

• In your browser: selection, PDF anchoring, YouTube details, and UI rendering.
• Backend: your selected/copied text (with minimal context) is sent via HTTPS to the backend solely to generate the answer.

5) Sharing

We do not disclose data to third parties except to the Small GPT backend to fulfill your request.

6) Retention

The extension itself does not retain your selected text. No retension is done on the Small GPT backend as well.

7) Security

• Data is transmitted over HTTPS.
• Strict CSP; no remote code is executed.
• Assistant output is sanitized before rendering (markdown is sanitized to remove scripts).

8) Permissions use

• activeTab: read your selection and a small context slice only after you open the popup or click a quick action.
• clipboardRead: used only when you click “Use clipboard,” primarily for PDFs where selection is blocked; never monitored continuously.
• Host permissions (<all_urls> and optional file://): needed to read your selection on pages you choose and to support local PDFs (if you enable “Allow access to file URLs”).

9) Children’s privacy

Not directed to children under 10. If you believe a child provided data, contact us at the email above.

10) International transfers

If your backend is hosted outside your region, your selected text may be processed there to fulfill your request.

11) Your choices & controls

• Use the extension only on pages you choose; you control when text is sent.
• For PDFs, copy text then click “Use clipboard”.
• Remove the extension or clear its site data to reset local settings.

12) Changes

We may update this policy. The effective date will change and the latest version will appear at this URL.