Privacy Policy

Last updated: 5/27/2026

1. What We Collect

Answer Sync collects the following information when you sign in:

• Your Google account email address and name (via Google OAuth)
• Usage statistics (number of queries made)
• Your Gemini API key (if provided) — stored encrypted with AES-256-GCM

2. What We Do NOT Collect

• We do not read, store, or log the content of web pages you visit
• We do not store the questions or answers processed by the extension
• We do not track your browsing history
• We do not sell any data to third parties

3. How We Use Your Data

• To authenticate your account via Google OAuth
• To track daily credit usage for free tier users
• To securely store and retrieve your encrypted API key for Pro tier

4. Data Security

API keys are encrypted using AES-256-GCM with a server-side master key. Session tokens are managed by NextAuth.js with secure, httpOnly cookies. All data is stored in encrypted PostgreSQL databases.

5. Extension Permissions

• activeTab: To scan the currently active tab for questions when you click the extension
• storage: To store your authentication token locally
• scripting: To inject the question detection and answer filling scripts into web pages

6. Contact

For questions about this privacy policy, contact: adityapandey.dev.in@gmail.com