Privacy Policy

This Privacy Policy explains how Courage Creates Pinnacle Technology Co., Ltd. (“we,” “us,” or “our”) collects, uses, stores, and protects information when you use SusurElf (“the Service”), a Safari sidebar AI assistant. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information. When you log in with Google OAuth or Sign in with Apple, we receive your email address, profile name, and profile picture (as provided by the sign-in provider). We use this solely to identify your account and communicate with you.
• Usage data. We log the number of messages you send, the AI models you use, feature usage (e.g., summarize, translate, screenshot, mind map, podcast), and timestamps. This helps us enforce quotas, prevent abuse, and improve the Service.
• Prompts and AI requests. Your messages and selected web page content are sent to our backend gateway and then forwarded to third-party AI providers (primarily Aliyun DashScope) to generate responses.
• Technical data. We may collect browser type, extension version, IP address, and anonymized device identifiers for rate limiting, security, and debugging.
• Payment information. We do not collect or store your payment card details. Payments for purchases made through the Chrome/Web channel are processed by Paddle, our Merchant of Record. Purchases made through the App Store are processed by Apple and are subject to Apple’s terms. We receive only your subscription status, billing country, and transaction references from Paddle. If you subscribe through the App Store and agree at purchase, we may share with Apple how much of this plan you have used (credits remaining) so Apple can review a refund request. This is not App Tracking Transparency / advertising tracking.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate users and manage access to free and paid features;
• Enforce usage limits and prevent fraud or abuse;
• Process payments and manage subscriptions through Paddle;
• Communicate with you about your account, updates, or support requests;
• Improve product features and fix bugs.

3. AI Providers and Data Forwarding

To generate responses, your prompts and any attached context are forwarded to AI providers such as Aliyun DashScope. These providers have their own privacy policies and may process data according to their terms. We recommend reviewing their policies:

• Alibaba Cloud Privacy Policy

We do not use your prompts to train our own AI models. Whether a third-party provider uses prompts for model improvement is governed by that provider’s terms.

4. Cookies and Local Storage

The Extension uses browser storage APIs and local browser storage to keep you logged in and remember your preferences (such as theme and default model). We do not use tracking cookies for advertising purposes.

5. Data Retention

We retain account information and usage statistics for as long as your account is active or as needed to provide the Service. Message content is retained for a limited period to enable conversation history and debugging, after which it is deleted or anonymized. You can delete your account and associated personal data at any time directly in the app (Settings → Delete account); deletion is immediate and irreversibly anonymizes your personal data. You may also request deletion by contacting us.

6. Data Security

We implement industry-standard security measures, including HTTPS for data transmission, JWT-based authentication, rate limiting, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights under laws such as the GDPR or CCPA, including the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion of your personal data;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent.

You can delete your account directly in the app (Settings → Delete account) — this is the primary path and takes effect immediately. You may also contact us at support@susurelf.com to exercise any of these rights. We will respond within a reasonable timeframe.

8. International Data Transfers

Your data may be processed on servers located outside your country of residence, including in regions where our AI providers and cloud infrastructure operate. By using the Service, you consent to these transfers.

9. Children’s Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@susurelf.com.