Privacy Policy

Last updated: March 7, 2024

This Privacy Policy is designed to help you understand how Smudge.ai, a website and browser extension (collectively referred to as “the Service”), operated by Oceanic Labs, LLC (“we,” “us,” or “our”), collects, uses, and safeguards your personal information. Your privacy and trust are of utmost importance to us, and we are committed to protecting your data and ensuring transparency in our practices.

We encourage you to carefully read this policy to make informed decisions about using our Service. By accessing or using Smudge.ai, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this Policy, please do not use our Service.

Data Collected

Smudge.ai is committed to safeguarding your privacy and ensuring the secure handling of your data. This section outlines the types of data we collect and the purposes for which it is collected.

1. Email Address

When you sign up for our services, we collect your email address solely for the purpose of delivering a copy of your license key to you. In rare circumstances, we may reach out to you using your email address for critical account-related issues.

2. Payment Information

To facilitate transactions for subscriptions and credit top-ups, we partner with Stripe, a reputable third-party payment processor certified to PCI Service Provider Level 1. Stripe collects and handles the necessary payment information, such as credit card details and billing information. Rest assured that we do not store or retain this payment information on our servers. Your payment details are securely processed by Stripe, and we adhere to strict security protocols to protect your financial data.

3. No Other Personal Information Retained

We do not collect, store, or retain any additional personal information beyond your email address for license key delivery and the payment information required for transactions. Note that any custom prompts you create are stored locally on your browser’s on-device storage. These prompts are not saved as properties of your user record in our database.

Third-Party Access

We engage with trusted third-party service providers in order to provide our services. While we carefully select these trusted third parties, it’s essential to note that their practices and policies are separate from ours. We encourage you to review their respective Privacy Policies to understand how your data is handled when interacting with these services.

1. Stripe – Payment Processing

We use Stripe for payment processing. Stripe’s Privacy Policy can be reviewed online at https://stripe.com/privacy. We recommend familiarizing yourself with Stripe’s practices to understand how your payment data is handled.

2. Postmark – Transactional Email

We use Postmark for transactional email, in order to send you a copy of your license key. Their Privacy Policy is available online at https://postmarkapp.com/privacy-policy.

3. OpenAI – AI Workloads

We use OpenAI’s API to process AI workloads. This includes sending prompts and input text to their API. OpenAI’s Privacy Policy is available online at https://openai.com/policies/privacy-policy.

Tracking

No Tracking Cookies: We do not utilize tracking cookies on our extension.
No Analytics Products: We do not utilize any third-party analytics products, such as Google Analytics, which are often used to collect data on website usage and user interactions, within the extension.

Logging

What We Don’t Log

We do not log your text inputs or the response content generated by OpenAI.

What We Do Log

Transformation Details: When you submit text to processed, we record the name of the transformation applied and the command (prompt) used for that transformation. Importantly, we do not log the actual input text itself.
User Identification: We collect the user ID of the user who executed the command.
Technical Information: We log technical details, such as the temperature, number of tokens used, and the specific AI model used to compute the response.

Data Security

We apply industry-standard security measures in order to protect your personal information and ensure its confidentiality and integrity. Our commitment to data security includes, but is not limited to, the following safeguards:

1. Encryption

We employ industry-standard encryption protocols to secure data transmission between your device and our servers. This ensures that your data remains private and protected during transmission.

2. Access Control

Access to your data is strictly limited to authorized personnel who require it to perform their duties. We implement access controls and user authentication to prevent unauthorized access.

3. Secure Third-Parties

We do not store sensitive information on our servers. Instead, we rely on trusted third-party partners to handle and process certain data. For a comprehensive understanding of how your data is handled by these third parties, please refer to their respective privacy policies linked above.

Cookies

Session Cookies

When you are logged into our browser extension, we utilize a session cookie. This session cookie helps us connect your commands to your user account as long as you are logged in. It ensures that your interactions are associated with the correct user account.

No Third-Party or Tracking Cookies

We want to emphasize that we do not use any third-party cookies or tracking cookies of any kind. Your privacy is important to us, and we prioritize transparency and security in our cookie practices.

Rest assured that the session cookie is temporary and is automatically deleted when you log out or close your browser. It does not collect or store personal information beyond your current session.