Privacy Policy
1. Overview
Chisel ("we", "our", "the extension") is a Chrome extension that activates AI prompts. This policy explains what data we collect, how we use it, how we store it, and how we share it.
2. Data we collect
2a. Account Data
When you create a Chiseled account we collect:
- Email address (required for authentication)
- Subscription status (free or Chiseled)
- Stripe customer ID (for payment processing)
We do NOT collect your name, address, phone number, or any other personal identifying information.
2b. Usage Data
We collect:
- Number of prompt activations per day (stored locally on your device)
- Subscription tier and status
We do NOT collect the content of any prompt you write or activate. Your prompt text is sent to our API to generate an improved version and is never stored on our servers.
2c. Payment Data
Payments are processed by Stripe, Inc. We never see, store, or have access to your credit card number, bank account, or full payment details. We only store your Stripe customer ID to manage your subscription.
2d. Technical Data
When you use the inline activation tool our servers receive:
- Your IP address (used for rate limiting only, not stored long term)
- The prompt text you submitted (processed to generate an improved version, not stored after processing)
3. How we use your data
We use your data only to:
- Authenticate your account
- Verify your subscription status
- Enforce the daily usage limit for free tier users
- Process payments via Stripe
- Prevent abuse via rate limiting
We do NOT use your data for:
- Advertising or marketing
- Selling to third parties
- Training AI models
- Any purpose unrelated to operating the Chisel extension
4. How we store your data
Account data is stored in Supabase, a cloud database provider, on servers located in the United States. Daily usage counts are stored locally on your device using Chrome's built-in storage API and never transmitted to our servers. We retain your account data for as long as your account exists. You can request deletion at any time.
5. How we share your data
We share data with these third parties only as necessary to operate the service:
- Supabase — Stores your email address and subscription status. supabase.com/privacy
- Stripe — Processes payments and stores payment method information. stripe.com/privacy
- Anthropic — Processes prompt text to generate improved versions. Your prompt is sent to Anthropic's API and is subject to their privacy policy: anthropic.com/privacy
- Vercel — Hosts our API servers. Handles request routing only. vercel.com/legal/privacy
We do NOT sell your data to any third party. We do NOT share your data with any party not listed above.
6. Your rights
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your account and all associated data at any time via usechisel.co/account
- Opt out of any future marketing emails (we do not send marketing emails)
To exercise these rights email us at: privacy@usechisel.co
7. Data deletion
You can delete your account at any time by visiting usechisel.co/account and clicking Delete Account. This will:
- Permanently delete your account
- Cancel your Chiseled subscription
- Remove your data from our database within 30 days
8. Children
Chisel is not directed at children under the age of 13. We do not knowingly collect data from children under 13.
9. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of Chisel after changes constitutes acceptance of the new policy.