BYO//AI BringYourOwnAI
Legal

Privacy Policy

This Privacy Policy explains how BringYourOwnAI handles information when you visit bringyourownai.vwapster.cloud or use the BringYourOwnAI browser extension.

Last updated: April 13, 2026 Applies to the Site and extension Zero-telemetry product model

At a glance

  • We do not currently run advertising, behavioral tracking, or product analytics on the Site.
  • The extension stores user-entered API keys, settings, prompt templates, and local history on the user's device.
  • When you use the extension, prompts and selected page content are sent directly to the LLM provider you choose, not to a BringYourOwnAI relay server.
  • A minimal BringYourOwnAI licensing endpoint verifies the 2-day trial and paid access. It is not used to relay prompts or page content to an AI model.
  • If you contact us directly, we receive the information you choose to send.

1. Scope

This Privacy Policy applies to the BringYourOwnAI marketing site and related pages hosted at bringyourownai.vwapster.cloud (the "Site"), and to the BringYourOwnAI browser extension and related support channels (together, the "Services").

2. Information We Collect or Process

Information you provide directly

If you email us, open a GitHub issue, or otherwise contact us, we receive the information you include in that message, such as your name, email address, and the contents of your request.

Site technical data

Like most websites, the Site may generate standard technical log data through the hosting or infrastructure provider, such as IP address, browser type, requested URL, referrer, and timestamps. We use this type of data only for security, operations, and basic troubleshooting.

Extension data stored on the user's device

The extension is designed to keep operational data on the user's device. Depending on how the extension is used, it may store the following in local browser extension storage:

  • API keys entered by the user
  • Provider and model preferences
  • Prompt templates and settings
  • Conversation history and user-created content
  • Session-level network transparency data

API keys and any saved license key are encrypted at rest in a local vault stored in chrome.storage.local. The vault passphrase is kept only for the current browser session.

Provider-bound content initiated by the user

When a user actively uses the extension, the extension may send prompts, selected text, page context, transcript data, and model parameters directly to the user's chosen LLM provider. The provider then returns model output directly to the extension.

Licensing and trial verification data

To support the extension's 2-day free trial and lifetime purchase model, the extension may contact a BringYourOwnAI licensing endpoint with an anonymous install identifier, license key, license instance identifier, and related access status metadata. This endpoint is not used to relay prompts, selections, or page content to an AI provider.

3. How We Use Information

We use information we control to:

  • operate, secure, and improve the Site
  • respond to support or legal inquiries
  • maintain records of communications and policy changes
  • enforce our Terms and protect the Services
  • verify trials, purchases, refunds, and license activations

We do not use extension prompts, page context, or API traffic to build advertising profiles or analytics about user behavior.

4. How Information Is Shared

We may share information in the following limited situations:

  • With the user's chosen model provider when the user initiates an LLM request using the extension. This may include prompt content, page context, and related request metadata.
  • With infrastructure or support providers that help host the Site, send email, or manage support operations.
  • For legal or security reasons if required by law, legal process, or a good-faith belief that disclosure is necessary to protect rights, users, or the Services.
  • As part of a business transfer such as a merger, acquisition, or asset sale, subject to applicable law.

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

5. Chrome Web Store Limited Use Disclosure

For the browser extension, BringYourOwnAI uses page content, browsing context, prompts, templates, chat history, and user-supplied API credentials only to provide the user-facing features the user requests, such as page summarization, highlight actions, side-panel chat, and template execution.

Extension data is transferred only to the AI provider selected by the user, or when required for legal compliance or security. It is not sold, used for advertising, or used to build behavioral profiles.

6. Cookies and Similar Technologies

We do not currently use advertising cookies, third-party analytics cookies, or session replay on the Site. If that changes, we will update this Privacy Policy before using those technologies.

7. Third-Party Services

If you use the extension with OpenAI, Anthropic, Google Gemini, DeepSeek, Qwen, MiniMax, Kimi, or another supported provider, your data will be processed under that provider's own privacy policy and terms. We encourage users to review the policies of every provider they choose to use.

If you purchase the product, checkout and payment processing are handled by Lemon Squeezy under Lemon Squeezy's own privacy policy and terms.

The Site may also link to third-party properties, such as GitHub or payment providers. Those third-party sites and services have their own rules and privacy practices.

8. Data Retention

Site-side information that we control is retained only for as long as reasonably necessary for the purpose it was collected, including support, security, and legal compliance.

Extension data stored locally remains on the user's device until the user deletes it, clears browser extension storage, or uninstalls the extension.

9. Security

We use reasonable administrative and technical measures to protect information we control, but no system is perfectly secure.

Because the extension is a bring-your-own-key product, users are responsible for safeguarding their own provider credentials and for setting provider-side usage limits or billing alerts. Saved API keys and any saved license key are encrypted at rest, but an already-unlocked browser session may still expose those credentials to someone with local device access.

10. Your Choices and Privacy Rights

Users can control locally stored extension data directly from the extension settings, browser storage tools, or by uninstalling the extension.

Depending on where you live, you may also have legal rights to request access to, correction of, deletion of, or information about personal data that we control directly. To make a request, contact us using the details below.

11. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be reflected on the Site or in the Services, as appropriate.

13. Contact

For privacy questions or requests, email vwapster@gmail.com or use the support page.