WisePick — Privacy Policy

Effective date: April 8, 2026

WisePick ("we", "the extension") is a Chrome extension that provides AI-powered purchase verdicts. This policy explains what data we collect, why, and how we handle it.

1. Data We Collect

Account information. When you sign in with Google, we receive your email address and Google profile ID. We store these on our server to identify your account, manage your usage quota, and maintain your subscription plan.

Product page data. When you click "Analyze this page", the extension reads publicly visible product information from the current tab — such as the product name, price, and URL. This data is sent to our backend server to generate a verdict.

Usage metrics. We track the number of analyses you perform per billing period to enforce free-tier and paid-plan limits. We do not track which specific products you analyze over time.

2. Data We Do Not Collect

• We do not collect browsing history or monitor pages you visit.
• We do not read page content until you explicitly request an analysis.
• We do not collect passwords, payment card details, or financial information.
• We do not sell, rent, or share your personal data with third parties for advertising.

3. How We Use Your Data

• Generate verdicts. Product data is sent to our server, which queries external search APIs (Serper) and an AI model (Google Gemini) to produce a BUY / WAIT / SKIP verdict, pros/cons, and alternative suggestions.
• Cache results. We cache analysis results (keyed by a SHA-256 hash of the product URL) for up to 7 days so repeat queries are instant and free.
• Manage your account. Your email and plan are used to enforce usage limits and enable future paid features.

4. Third-Party Services

To generate verdicts, our backend server sends product-related search queries to:

• Serper API — web search results (Serper privacy policy)
• Google Gemini API — AI analysis (Google AI terms)

These services receive search queries derived from the product name — not your personal information.

5. Data Storage & Security

Your account data and cached results are stored in a PostgreSQL database on a server we operate (Hetzner, Germany). Communication between the extension and our server is encrypted via HTTPS. Authentication tokens (JWTs) are stored locally in chrome.storage.local and are never shared with third parties.

6. Data Retention

• Cached analysis results: automatically deleted after 7 days.
• Account data (email, plan): retained while your account is active. Contact us to request deletion.

7. Your Rights

You can:

• Sign out at any time — this removes your JWT from the extension.
• Request deletion of your account and associated data by contacting us.
• Uninstall the extension to stop all data collection immediately.

8. Permissions Explained

• <all_urls> host permission: Required to read product data from any shopping site. The extension cannot predict which retailer you will visit.
• identity: Used for Google sign-in via chrome.identity.
• storage: Used to store your authentication token and cached tab state locally.
• activeTab / scripting / tabs: Used to read product information from the current tab when you request an analysis.
• sidePanel: Used to display the WisePick verdict panel.

9. Children's Privacy

WisePick is not directed at children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.