AI Chat Handoff privacy policy

The extension’s content script loads on chatgpt.com, chat.openai.com, and claude.ai, but it reads the conversation only when you click Read current chat. It does not run on other websites and does not access your browsing history.

Conversation extraction, preview, and editing happen locally in your browser. Your preamble text and daily transfer count are stored in chrome.storage.local on your device. The extracted conversation and your edited draft are kept in chrome.storage.session, which Chrome clears when you close the browser; you can also clear them at any time with Clear saved draft. Nothing is synced or uploaded.

Uninstalling the extension removes all of its stored data. The extension writes to your clipboard only when you click Copy draft; clear your clipboard separately if needed, since clipboard history is managed by your operating system.

We do not sell, share, or transmit your conversation, draft, preamble, or usage count. The extension makes no network requests at all: no servers, no analytics, no AI APIs, and no remote code.

When you click Open with draft, the extension opens a new ChatGPT or Claude chat and places your draft in its message box. It never presses Send. Once the text is in that site’s message box, the site (OpenAI or Anthropic) can see it even before you send it, and its own privacy policy applies. If you prefer, use Copy draft and paste the text yourself.

This extension policy does not describe website analytics. The tacko.io website loads Google Analytics and optional Tacko page-view telemetry only after analytics consent. It also uses cookieless Vercel Web Analytics and Speed Insights. Those website integrations can send visit and performance data to their providers; they are not part of the extension’s local processing. See our website privacy notice.

The extension does not send conversation content to these website analytics services. If you contact support by email, your email provider and ours process the message to handle your request. We handle email correspondence based on our legitimate interests in answering inquiries and support requests (GDPR Art. 6(1)(f)). See the website privacy notice for your rights.

Website purchases are processed by Stripe. Stripe Checkout collects cardholder name, email, card details, billing address (at least country and postal code) and, optionally, a business VAT ID. Stripe uses the billing country to calculate VAT and issues an invoice/receipt. Stripe handles card details; we never see full card numbers. Tacko receives your name, email, billing country/postal code, amount, and purchase ID to fulfill your purchase and handle refunds (GDPR Art. 6(1)(b), contract). Payment records are retained by Stripe and as required by applicable tax law (Art. 6(1)(c)). We use your email and our SMTP email provider to send requested restore links, valid for 30 minutes, under the same contract basis. We store a lowercase email in Stripe customer metadata for restore lookup (Art. 6(1)(b), contract). For fraud and duplicate-payment review, we record purchase session IDs in Stripe customer metadata and send a notice to info@tacko.io (Art. 6(1)(f), legitimate interests). To prevent abuse, transient in-memory rate limits use IP addresses and email hashes; these are not persistently stored (Art. 6(1)(f), legitimate interests). The signed license key contains no personal data. License verification happens offline; the extension itself still makes no network requests.

For privacy questions or requests, contact info@tacko.io. Please avoid including private conversations in your message.

We will update this page if the extension’s data practices change.