Privacy Policy for Gemini Toolbox

Last updated: August 16, 2025

1. Introduction

Gemini Toolbox ("the Extension") is a Chrome browser extension that enhances Google Gemini with additional features including folder organization, prompt library, word counter, and chat export capabilities. This privacy policy explains how we collect, use, store, and protect your data.

2. Information We Collect

2.1 Automatically Collected Information

• Anonymous User ID: A randomly generated identifier created on first install (stored locally)
• Analytics Events: Feature usage statistics (e.g., "folder_created", "chat_exported", "prompt_used")
• Extension Version: The version of Gemini Toolbox you're using
• Timestamp Data: When certain features are used (for usage analytics only)

2.2 User-Created Content (Stored Locally)

• Folder Names and Structure: Custom folders you create to organize chats
• Chat-to-Folder Mappings: Which chats you've assigned to which folders
• Custom Prompts: Prompts you create in the prompt library
• Extension Settings: Your preferences (e.g., word counter enabled/disabled)

2.3 What We DO NOT Collect

• Your actual chat content with Google Gemini
• Personal information (name, email, address)
• Browsing history outside of gemini.google.com
• IP addresses
• Device identifiers
• Google account information

3. How We Use Information

3.1 Analytics Data

Anonymous analytics are used to:

• Understand which features are most popular
• Identify and fix bugs
• Improve extension performance
• Plan future features based on usage patterns

3.2 Local Data

Your folders, prompts, and settings are used solely to:

• Provide the organizational features you've configured
• Sync your settings across devices (via Chrome sync storage)
• Export your data when you request it

4. Data Storage and Security

4.1 Local Storage

• Chrome Local Storage: Temporary data and cache
• Chrome Sync Storage: Folders, settings, and prompts (synced across your devices)
• localStorage: User preferences and custom prompts

4.2 Remote Storage

• Analytics Server: Anonymous usage events at api.geminitoolbox.com
• Database: PostgreSQL database hosted on Railway (US region)
• Encryption: All API communications use HTTPS

4.3 Data Retention

• Local data: Retained until you uninstall the extension or clear browser data
• Analytics data: Retained for up to 12 months
• No personally identifiable information is ever stored

5. Data Sharing

We do not sell, trade, or share your data with third parties.

The only external communication is:

• Analytics events sent to our own server (api.geminitoolbox.com)
• No data is shared with Google (beyond Chrome's sync storage)
• No advertising networks or tracking services are used

6. Your Rights and Controls

6.1 You Can:

• Disable Analytics: Set CONFIG.FEATURES.trackAnalytics to false (requires technical knowledge)
• Export Your Data: Use the backup feature to export all folders and settings
• Delete Your Data: Uninstall the extension to remove all local data
• Reset Settings: Clear extension data via Chrome's extension settings

6.2 Data Portability

The extension includes built-in backup and restore features, allowing you to:

• Export all your folders, settings, and prompts as a JSON file
• Import your data to another browser or device

7. Children's Privacy

Gemini Toolbox is not directed at children under 13. We do not knowingly collect information from children under 13. The extension requires access to Google Gemini, which has its own age restrictions.

8. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted at this URL, and the "Last updated" date will be revised. Continued use of the extension after changes constitutes acceptance of the updated policy.

9. Open Source Transparency

Gemini Toolbox's privacy practices are transparent. While the extension code is not open source, this privacy policy accurately describes all data collection and usage.

10. Compliance

This extension complies with:

• Chrome Web Store Developer Program Policies
• Chrome Extension Manifest V3 requirements
• General Data Protection Regulation (GDPR) principles
• California Consumer Privacy Act (CCPA) requirements