Beaubot Chrome Extension Privacy Policy

1. Introduction

This Privacy Policy describes how BeyondBot.ai ("we," "our," or "us") collects, uses, and protects your information when you use our Beaubot Chrome extension for AI-powered document processing and form filling.

By installing and using the Beaubot Chrome Extension, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Extension Purpose and Functionality

Single Purpose Statement: Beaubot is designed exclusively for AI-powered document processing and automated form filling to help users efficiently complete online forms using information from their uploaded documents.

Core Features:

• Document upload and secure processing
• Form field analysis and identification
• Automated form filling using document data
• User authentication and access control
• Personal document management

3. Information We Collect

3.1 Personal Information

• Authentication Data: Email address and name through AWS Cognito authentication
• Account Information: User preferences and access permissions

3.2 Document Data

• Uploaded Documents: Files you voluntarily upload for processing (PDFs, images, forms)
• Extracted Information: Data extracted from your documents for form filling purposes
• Form Field Data: Information about form fields identified on web pages you choose to fill

3.3 Technical Information

• Extension Usage: Features used, processing requests, and error logs
• Authentication Tokens: Secure tokens stored locally in your browser
• Browser Data: Limited to active tab information when form filling is initiated

3.4 Information We Do NOT Collect

• Browsing history or websites you visit
• Content of web pages you don't actively use for form filling
• Personal information from other browser tabs or windows
• Any data from websites you don't explicitly interact with through our extension

4. How We Use Your Information

4.1 Primary Uses

• Document Processing: Analyze uploaded documents to extract relevant information
• Form Filling: Automatically populate form fields with appropriate data from your documents
• Authentication: Verify your identity and manage access to the service
• Service Improvement: Enhance AI accuracy and user experience

4.2 Data Processing Legal Basis

We process your data based on:

• Consent: You explicitly consent by installing and using the extension
• Legitimate Interest: Providing the document processing service you requested
• Contractual Necessity: Processing necessary to provide our services

5. Data Sharing and Third Parties

5.1 Limited Data Sharing

We do not sell, trade, or rent your personal information. Limited sharing occurs only in these circumstances:

• AWS Services: Secure cloud infrastructure for data processing and storage
• AI Processing: Third-party AI services (Claude, Gemini) for document analysis under strict data processing agreements
• Legal Requirements: When required by law, regulation, or valid legal process

5.2 Third-Party Service Providers

• AWS (Amazon Web Services): Cloud hosting, storage, and authentication services
• Anthropic Claude: AI document processing (data not used for training)
• Google Gemini: AI document processing (data not used for training)

All third-party providers are bound by strict data processing agreements and cannot use your data for their own purposes.

6. Data Storage and Security

6.1 Security Measures

• Encryption: All data encrypted in transit and at rest
• Access Control: Email-based authorization system
• Secure Authentication: AWS Cognito with industry-standard security
• Regular Audits: Security reviews and vulnerability assessments

6.2 Data Retention

• Uploaded Documents: Stored securely until you delete them or request removal
• Processing Data: Temporary processing data deleted after 24 hours
• Account Information: Retained while your account is active
• Logs: Technical logs retained for 90 days for debugging purposes

6.3 Data Location

Your data is primarily stored in AWS data centers in the United States with appropriate safeguards for international data transfers.

7. Your Rights and Control

7.1 Data Access and Control

You have the right to:

• Access: View all data we have about you
• Correction: Update or correct your personal information
• Deletion: Request deletion of your account and all associated data
• Export: Download your data in a portable format
• Restriction: Limit how we process your data

7.2 Managing Your Data

• Document Management: Delete uploaded documents anytime through the extension interface
• Account Deletion: Contact us to permanently delete your account
• Data Export: Request a copy of all your data
• Consent Withdrawal: Uninstall the extension to stop all data collection

8. Chrome Extension Permissions

8.1 Required Permissions and Justification

• storage: Store authentication tokens and user preferences securely in your browser
• activeTab: Access the current tab only when you initiate form filling
• scripting: Inject form analysis and filling scripts into pages you choose to use
• identity: Handle secure authentication with AWS Cognito
• sidePanel: Display the extension interface in Chrome's side panel

8.2 Permission Limitations

Our extension:

• Does NOT access all your tabs or browsing history
• Does NOT read data from websites unless you explicitly use form filling
• Does NOT modify websites except when filling forms you request
• Does NOT track your browsing behavior

9. GDPR and International Privacy Rights

9.1 Legal Basis for Processing (GDPR Article 6)

• Consent (Article 6.1.a): You consent to data processing by using the extension
• Legitimate Interest (Article 6.1.f): Processing necessary for our legitimate business interests
• Contract Performance (Article 6.1.b): Processing necessary to provide our services

9.2 GDPR Rights

Under GDPR, you have additional rights including:

• Right to be informed about data processing
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

10. Children's Privacy

Our extension is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Notify users of material changes through the extension interface
• Update the "Last Updated" date at the top of this policy
• Provide 30 days notice for significant changes
• Require renewed consent for material changes to data processing

12. Contact Information

13. Regulatory Compliance

13.1 Applicable Laws

This Privacy Policy and our data practices comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Chrome Web Store Developer Program Policies
• Google API Services User Data Policy
• Federal Trade Commission (FTC) guidelines

13.2 Data Processing Agreements

We maintain appropriate data processing agreements with all third-party service providers to ensure your data is protected according to applicable privacy laws.