PromoPilot Chrome Extension — Privacy Policy

1. Who we are

The extension is operated by BuyReadySite, the owner and operator of the PromoPilot platform (promopilot.link). Contact: [email protected] or the contact form. The platform-wide policy is available at promopilot.link/public/privacy.php and applies in addition to this document.

2. What is processed locally (never leaves your browser)

• Page content of the active tab. When you open the popup or enable the on-page overlay, the extension reads the current page's DOM (title, meta tags, headings, links, images, structured data, performance timings) to compute the SEO report. This analysis runs entirely inside your browser. The page content itself is never transmitted to our servers.
• Scan history. Previous scores per page are stored in your browser's extension storage to show score changes. Stored locally, removable by uninstalling the extension.
• Interface language preference.

3. What is sent to PromoPilot servers

• Account data (only if you sign in). Your login/e-mail and password are sent over HTTPS to authenticate you; we then store a revocable access token in your browser. If you use "Sign in with Google", authentication happens on promopilot.link — the extension never sees your Google password.
• Session pickup. If you are already signed in on promopilot.link, the extension may exchange that active session for an extension token, so you don't have to re-enter credentials. This request goes only to promopilot.link.
• Scan telemetry. After an X-Ray scan we send aggregate metrics: the page's hostname and path, the numeric score, counts of issues and words, load-speed timings (TTFB/LCP), the page language, interface language, and the extension version. We use it to improve the checks and, for signed-in users, to show scan activity in the account. We do not send page content, screenshots, form data, cookies or browsing history.
• Feature requests you make. Actions you explicitly trigger (creating a project, adding a page, requesting Search Console potential, launching a promotion) send the URL of the current page and your input to your PromoPilot account, exactly as if you did it on the website.

4. What we do NOT do

• No selling or renting of data to third parties.
• No advertising or ad-tech trackers inside the extension.
• No reading of pages in the background: analysis happens only when you open the popup, press the shortcut, or use the context menu on a page.
• No collection of browsing history, keystrokes, form input, or credentials from web pages.

5. Permissions explained

• activeTab + scripting — inject the analyzer into the current tab when you request a scan or the overlay.
• storage — keep your session token, language and local scan history.
• alarms — periodic refresh of the unread-notifications badge.
• contextMenus — the right-click "SEO X-Ray" and "add link" items.
• Host access to promopilot.link — API calls to your PromoPilot account.

6. Storage, retention and your rights

Server-side data (account, projects, scan telemetry) is stored on PromoPilot infrastructure in the EU and retained as described in the platform policy. Extension tokens can be revoked at any time by signing out in the extension; local data is deleted when you uninstall the extension. You may request access, correction or deletion of your data via [email protected] — deletion requests are honored within 30 days (GDPR/CCPA).

7. Changes

We will update this page when the extension's data practices change; the "Last updated" date above always reflects the current version.