Privacy Policy

What we collect

The extension runs no Factotum backend and we do not receive or sell your workspace data. It has no product telemetry, analytics, or advertising identifiers. This static website does not use forms, analytics, or cookies; its hosting provider may process ordinary request data such as IP address, user agent, requested URL, and timestamp to deliver and secure the site.

Where your data lives

• Saved posts, explicitly included visible comments, scores, drafts, and local logs: your browser's OPFS (Origin Private File System).
• Configuration, verified BYOK connection, Companion opt-in, and activation state: chrome.storage.local — this machine only.
• The user-selected Markdown directory handle: browser IndexedDB. Files already written to Obsidian or downloaded as ZIP are outside the extension and are not deleted by its Clear action or uninstall.
• API keys are stored in plaintext on your machine (Chrome extension storage has no secure enclave). The key is never filled back into the settings page; use a restricted sub-key from your provider.

Network requests — the complete list

1. Public review build: no Reddit request, host permission, content script, or model-endpoint permission. BYOK controls are a non-network preview in this fixture-only artifact.
2. Private pilot Companion: after explicit opt-in, the content script reads only the already-loaded main post on a qualifying active, visible Reddit detail page and saves it to extension storage. Capture does not make an additional Reddit page request and does not call an AI model. A separate “Grab current post” button performs the same main-post-only extraction solely when the user explicitly clicks it on the exact active post, even if automatic Companion capture is off.
3. Your configured AI endpoint (optional, BYOK): only after you click Score, Generate draft, or Regenerate, relevant post content and content you explicitly included are sent directly to that endpoint. Chrome requests only the exact origin you entered.
4. Developer patrol-lab: an isolated, non-public artifact may request www.reddit.com / old.reddit.com for active experiments. It is not the review or private Companion build.

The extension does not send workspace data to a Factotum server. Browser and extension-store infrastructure may separately perform normal update and security checks.

Third-party services

• Reddit: the private pilot's content source, governed by its own terms and privacy policy. Local storage is not Reddit authorization or an account-safety guarantee.
• Your chosen AI provider: receives content handled by the scoring and drafting workflow. Pick a provider you trust and review its terms.
• Cloudflare Pages: hosts this public website and processes standard request metadata to deliver and protect it.
• Paddle: currently used only in Sandbox and seller/domain review. There is no live checkout and this website does not collect payment details. If sales open, Paddle will process checkout as merchant of record under its own privacy terms.

Your controls

• Turn Companion off at any time; no new page is read or saved automatically after it is disabled. The separate “Grab current post” action remains an explicit, one-post user command.
• Export the workspace as JSON, date-organized Markdown ZIP, or sync managed notes to a user-selected folder.
• Use the double-confirmed Clear action to delete OPFS, indexes, logs, adoption data, and the saved Vault handle. The UI reports partial failures; exported files remain.
• Change or delete the API key at any time; changing or disconnecting a provider revokes its no-longer-needed origin permission.

Contact

The planned support address is support@getfactotum.com. It is not yet active or monitored; this page will be updated before any live checkout opens.

Related documents

See the Pilot Terms and Refund Policy.