The short version
Your tracked promises, settings and review items are stored in your own browser. We do not run analytics, advertising or tracking. We never sell data. If you use the optional hosted AI, the text of a message you send is processed to find the commitment and is not stored.
What the extension reads
Given Word looks only at messages you send, on the sites you enable (Gmail, Slack, WhatsApp Web). It does not read messages you receive, your inbox, your browsing history, other tabs, cookies or your files.
- Gmail: the compose box is read at the moment you click Send, and recorded only if Gmail then closes the composer because the email was sent. Unsent drafts are never read.
- Slack and WhatsApp Web: messages you send as they appear. Messages already on screen when you open a conversation are ignored.
Nothing is read until you accept the consent screen. You can withdraw consent, disable any site, or delete all extension data in Settings at any time.
What is stored, and where
- In your browser (chrome.storage.local): tracked promises, review suggestions, settings, consent and your account sign-in. This is not encrypted secret storage. It is deleted by Settings, Delete all data, or by removing the extension.
- On our servers, only if you create an account: your email address, your plan and trial status, your monthly AI usage count, and a Stripe customer identifier. We do not store the text of your messages or your promises.
Where message text can go
- Local rules: processed entirely in your browser. Nothing is sent anywhere.
- Hosted AI (trial and AI plan): the text is sent to our server, which forwards it to an AI model provider (currently through OpenRouter, which routes it to the underlying model) and returns the result. We do not store or log message text. We use free-tier AI models. Their providers can retain prompts or use them to improve their models, so do not rely on hosted AI for confidential messages; Local rules never leave your browser.
Message text is used only to find commitments for you. It is not used to train models by us, and we do not use or transfer it for advertising or any other purpose.
Payments
Payments are handled by Stripe. We never see or store your card number. Stripe's privacy policy applies to payment data.
Sign-in
Sign-in uses your email address and a password, handled by Supabase, our authentication and database provider. Passwords are stored hashed by Supabase and are never visible to us.
Retention and deletion
Account data is kept while your account exists. You can delete your account in the extension's Settings or on your account page; this cancels any subscription and removes your account record and usage history. Billing records may be retained by Stripe as required by law.
Chrome Web Store user data policy
The use of information received from your browser and the sites you use will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the features described here and is not sold, used for advertising, or used to determine creditworthiness or for lending.
Children
Given Word is not directed at children under 16.
Changes and contact
If this policy changes in a way that affects what the extension reads or where data goes, the extension will ask for your consent again. Questions: .