Privacy Policy

Extension: Buddy AI | Last updated: March 2026

  Summary: Buddy AI does not collect, store, or sell any personal data.
  All data stays on your device or is sent directly from your browser to the AI API provider you configure.
  We never see your data.

1. What Data Is Involved

Data Type	Where It Goes	Who Can See It
API Key (OpenAI / DeepSeek / other)	Stored locally in `chrome.storage.local` on your device	Only you, on your device
API Base URL & Model name	Stored locally in `chrome.storage.local`	Only you, on your device
Page content & user instructions	Sent directly from your browser to the AI API endpoint you configured	The AI API provider you chose
Saved prompts (favorites)	Stored locally in `chrome.storage.local`	Only you, on your device
Language preference, max-steps setting	Stored locally in `chrome.storage.local`	Only you, on your device

2. How We Collect and Use Data

The extension operates entirely client-side. Specifically:

API Key and settings – entered by you in the extension settings panel and stored in your browser's local storage. They are never transmitted to any server controlled by us.
Page content – when you ask the extension to perform a task, the current page's text and interactive element information is read from the DOM in your browser and sent to the AI API endpoint you configured (e.g., https://api.deepseek.com/v1 or your own endpoint). This transmission happens directly from your browser to that API provider. We do not proxy, log, or intercept this data.
User instructions – the task description you type is sent together with page content to the AI API provider as part of the API request.
Chat history – kept in memory only for the duration of your session. It is not persisted to disk or any remote server.

3. Data Sharing

We do not share any data with third parties.

The extension has no backend server of its own.
The only outbound network request the extension makes is the API call to the endpoint URL you provide in settings (default: https://api.deepseek.com/v1). This goes directly from your browser to that provider.
If you use a third-party AI provider (OpenAI, DeepSeek, etc.), their own privacy policy governs how they handle the data you send them.

4. Data Storage

All settings are stored using the Chrome storage.local API, which keeps data on your local device and is not synced to Google's servers unless you have Chrome Sync enabled for extensions.
We do not use cookies, analytics SDKs, or any tracking technology.
No data is ever written to an external database by us.

5. Permissions Explained

Permission	Why It Is Needed
`activeTab`	To read and interact with the page you are currently viewing when you initiate a task.
`tabs`	To detect when a click opens a new tab and follow it automatically.
`storage`	To save your API key, settings, and saved prompts locally on your device.
`sidePanel`	To display the assistant interface in Chrome's side panel.
`scripting`	To inject the content script that reads page elements and performs actions on your behalf.
`host_permissions: <all_urls>`	Required so the extension can operate on any website you visit when you ask it to. No data is collected passively; the script only activates when you send a task.

6. Children's Privacy

This extension is not directed at children under 13. We do not knowingly collect any data from children.

7. Changes to This Policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. Continued use of the extension after changes constitutes acceptance of the updated policy.

8. Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository.