🔒 WorkVivo Chat Favorites Extension - Privacy Policy
🎯 Our Commitment: We collect minimal data and prioritize your privacy above all else. This extension is built purely to enhance productivity - we have no intention to sell data, show ads, or target users with marketing.
🌍 Jurisdiction-Aware Privacy
Smart Compliance: This extension automatically detects your jurisdiction and applies appropriate privacy protections based on your local laws. We respect and comply with privacy regulations including GDPR, CCPA/CPRA, LGPD, PIPL, and state-specific privacy laws.
Our privacy practices adapt to your location:
- EU/EEA (GDPR): Explicit consent required before any data collection
- California (CCPA/CPRA): Enhanced transparency and opt-out rights
- US States with Privacy Laws: Compliance with Virginia, Colorado, Connecticut, Utah privacy acts
- Other Jurisdictions: Privacy-first approach with clear opt-out mechanisms
📊 Google Analytics 4 Integration
🔍 How We Use Google Analytics 4
Purpose: Product improvement and feature optimization only - no advertising, targeting, data sales, or any commercial use beyond making this extension better.
Individual Developer: This extension is developed and maintained by an individual (not a company). Analytics data is used solely to understand how features are used and identify areas for improvement.
Google Analytics: We use Google Analytics 4 as our analytics platform. Google processes the anonymous usage data we send them. We have no formal agreements or business relationships beyond using their free analytics service.
Data Sharing: Only anonymous usage patterns are sent to Google Analytics. No personal information, chat content, or sensitive data is ever shared.
Your Control: You can opt out of GA4 data sharing at any time while still using all extension features.
Google's Privacy Policy: https://policies.google.com/privacy
📊 What We Collect
With Your Consent (Jurisdiction-Dependent):
- Usage Analytics: Which features you use, how often, and user interaction patterns
- Performance Metrics: Extension load times, search performance, database efficiency
- Feature Engagement: Which features are most/least used to guide development priorities
- Device Information: Device type (mobile/desktop), browser type, and general region
- Search Patterns: Anonymous search frequency and success rates (no search terms stored)
- Error Rates: Anonymous error frequency to identify stability issues
Always Collected (Essential for Functionality):
- Error Reports: Technical errors and crashes to ensure extension stability
- System Events: Extension startup/shutdown, critical failures for debugging
- API Failures: WorkVivo API integration issues to maintain compatibility
- Performance Issues: Database corruption, memory issues, or critical failures
🚫 What We DON'T Collect
- ❌ Personal conversations or chat content
- ❌ Precise location data (only general country/region)
- ❌ Login credentials, passwords, or authentication tokens
- ❌ Personal identity information beyond anonymous user IDs
- ❌ Screen recordings, screenshots, or clipboard content
- ❌ Files, documents, or any WorkVivo content
- ❌ Browser history or activities outside this extension
- ❌ Names, email addresses, or other personal identifiers
- ❌ IP addresses (beyond what's automatically included in web requests)
- ❌ Biometric data or device fingerprinting
🔒 How We Protect Your Data
- Privacy by Design: Analytics disabled by default in strict consent jurisdictions
- Local Processing: Most data stays on your device and is never transmitted
- Anonymous IDs: We use randomly generated IDs, never personal identifiers
- Data Minimization: We collect only what's necessary for product improvement
- Secure Transmission: All data transmission uses HTTPS encryption
- Retention Limits: Analytics data is retained only as long as needed for improvement
- Access Controls: Only authorized developers can access aggregated analytics data
- Regular Audits: We conduct regular privacy assessments and security reviews
🌍 Jurisdiction Detection Method
We detect your jurisdiction using privacy-friendly browser APIs without requiring any permissions:
- Browser Language: UI language settings (e.g., "en-US" indicates US)
- Timezone: System timezone (e.g., "America/New_York" indicates US Eastern)
- Locale Settings: Regional format preferences for dates and numbers
- Chrome i18n API: Browser's built-in region detection for extensions
- Multi-Method Consensus: We use multiple methods and consensus analysis for accuracy
Important Privacy Protection: No location permission required, no external API calls, no precise location tracking, and no GPS or network-based location detection.
⚖️ Privacy Tiers by Jurisdiction
🔴 Strict Consent Required
Jurisdictions: EU/EEA (GDPR), California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah
Default: Analytics disabled
Requirements:
- Explicit consent before any data collection
- Clear privacy notices with GA4 disclosure
- Easy consent withdrawal
- Enhanced data subject rights
🟢 Opt-In Permissible
Jurisdictions: Most US states, Canada, Australia, UK (post-Brexit)
Default: Analytics enabled with clear opt-out
Requirements:
- Clear notice of GA4 data sharing
- Easy opt-out mechanism
- Transparent privacy policy
- Purpose limitation (product improvement only)
🔵 Minimal Requirements
Jurisdictions: Countries with basic or no specific privacy laws
Default: Analytics enabled
Requirements:
- Basic privacy notice
- Clear purpose statement
- Contact information for privacy queries
- Respect for user preferences
📜 Your Privacy Rights
Depending on your jurisdiction, you may have enhanced rights including:
🇪🇺 GDPR Rights (EU/EEA):
- Right to Consent: Explicit consent required before data processing
- Right to Withdraw: Revoke consent at any time without penalty
- Right to Access: Request information about data we have about you
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
🇺🇸 CCPA/CPRA Rights (California):
- Right to Know: Know what personal information is collected and how it's used
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt out of the sale or sharing of personal information
- Right to Non-Discrimination: Not be discriminated against for exercising rights
- Right to Correct: Request correction of inaccurate personal information
🌍 Other State Privacy Laws:
Similar rights apply under Virginia CDPA, Colorado CPA, Connecticut CTDPA, and Utah UCPA.
⚙️ Your Controls
- Extension Settings: Modify all privacy preferences in real-time
- Consent Management: Grant or revoke consent with immediate effect
- Data Deletion: Request complete data deletion through support
- Data Export: Request copy of collected data in portable format
- Granular Controls: Choose exactly what data types to share
- Jurisdiction Updates: Automatic privacy protection updates when traveling
- Transparency Dashboard: View exactly what data has been collected
📤 Data Transfers
Analytics data may be processed by Google Analytics 4 servers which may be located outside your jurisdiction. Google provides appropriate safeguards for international data transfers:
- Google Analytics Terms: By using Google Analytics 4, we rely on Google's standard terms of service for data processing
- Data Protection: Google Analytics has built-in safeguards and complies with major privacy regulations (GDPR, CCPA)
- Limited Scope: As an individual developer, we use Google's free analytics service under their standard terms - no custom agreements or special data processing contracts