Choicely Browser Extension Privacy Policy

1. Where the extension works

The extension only runs on these sites:

  • Choicely Studio (studio.choicely.com);
  • Apple’s App Store Connect (appstoreconnect.apple.com) and Apple Developer (developer.apple.com);
  • Google Play Console (play.google.com/console).

It has no access to any other website you visit, and it does not record your browsing. To do this, it asks your browser for access to these sites and to Choicely’s own services, and for two other permissions: to show its side panel, and to keep its own storage on your device. It does not ask for access to your browser’s cookies.

 

2. What the extension reads

Your Choicely sign-in. You sign in inside the extension’s panel with your Choicely account: your email address and password, plus a two-factor code if your account uses one. (Signing in with Google or Apple is not yet available in the extension.) Your email address, password and code are sent only to Choicely’s own servers, over an encrypted HTTPS connection, to sign you in. The extension never stores your password. Once you are signed in, the extension keeps your session on your device: a short-lived access token in the browser’s memory, which is cleared when you close the browser, and a longer-lived refresh token in the extension’s own storage on that device. Signing out deletes both. This session is separate from your Choicely Studio sign-in, and each can be ended on its own.

The page you have open, only if you allow it. The first time, the panel asks whether it may see the page you are working on. If you allow it, each time you send the assistant a message the extension reads that page (on the sites above only): its visible text, and for each form field its label and whether it is filled in, empty, required or showing an error. It never reads what you have typed into a field. Before anything leaves your browser, personal details that appear in the page’s text, such as email addresses, phone numbers, bank account and card numbers and identification numbers, are replaced with a description of what they are (for example “[redacted email address]”). At most about 8,000 characters of a page are read. You can turn page reading off at any time in the panel.

What it never reads from a page. Passwords, two-factor codes, payment card details, bank details, and tax and identity documents on the pages you have open. The extension itself excludes those fields; it does not rely only on instructions to the assistant.

 

3. What the extension sends, and to whom

When you sign in, the extension sends your email address, password and any two-factor code to Choicely’s sign-in service, as described above.

When you send a message, the extension sends to Choicely’s assistant service:

  • your message;
  • the app and Choicely account the conversation is about;
  • the page reading described above, if you allowed it.

Choicely’s assistant service runs on Google Cloud in the European Union (Finland). To write its replies it uses AI model providers that act as Choicely’s processors under written data-protection terms; the current providers are listed at choicely.com/subprocessors. Some of them process data in the United States, under the EU Standard Contractual Clauses. They do not use your data to train their models, and they may keep prompts and replies for up to about 30 days to monitor for abuse.

The extension sends nothing to anyone else. It contains no advertising, no analytics and no tracking.

 

4. What is kept, and for how long

  • Your conversation with the assistant (your messages, its replies and the cards it showed) is stored by Choicely with the app it concerns, in Google Cloud Firestore in the European Union, so you can continue it. Each message is deleted automatically 30 days after the conversation’s last message. To have a conversation deleted sooner, contact [email protected].
  • The page reading is not stored with your conversation. It is used for the reply it was sent with. It does appear in the diagnostic records Choicely keeps of how the assistant handled each message. These are held in the European Union by LangSmith (LangChain, Inc.), as Choicely’s processor, for up to 180 days, and are used only to investigate faults and improve the assistant.
  • In your browser, the extension keeps your sign-in session (see section 2) until you sign out, your page-reading choice and, when it fills in a form for you, a record of which fields it filled on which page and whether each succeeded: field names only, never the values. This stays in your browser and is removed when you remove the extension.

 

5. Filling in forms, only with your approval

The assistant can offer to fill in a console form with values Choicely already holds about your app, such as its name, bundle ID or language. It shows you exactly what it will type and where, and does nothing until you approve. It never presses a button that sends, saves, creates, pays or accepts anything: it shows you which button to press, and pressing it is always up to you. It never fills in personal, payment, identity or login details.

 

6. What we do not do

  • We do not sell or rent your data, or use it for advertising.
  • We do not use the extension’s data to decide your creditworthiness, or for any purpose unrelated to helping you publish your app.
  • People at Choicely read conversations or diagnostic records only to support you when you ask, to investigate a fault or abuse, or where the law requires it.

The extension’s use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

 

7. Legal basis and your rights

We process this data to provide the service you asked for (performance of our contract with you for Choicely Studio) and, for diagnostics and abuse prevention, on our legitimate interest in running a reliable and safe service (GDPR Art. 6(1)(b) and (f)).

You can ask to see, correct or delete the personal data Choicely holds about you, ask for a copy, and object to or restrict its processing, as described in the Choicely Privacy Policy. You can also complain to your data protection authority; in Finland, the Data Protection Ombudsman (tietosuoja.fi). Contact: [email protected].

 

8. Changes

If what the extension reads, sends or keeps changes, this policy changes first, with a new effective date above, and the extension asks you again before it reads anything new.