Privacy Policy

This Privacy Policy describes how Olivia ("we", "us", or "our") collects, uses, and stores information when you use the Olivia web application and the Olivia browser extension (collectively, the "Service").

1. Information We Collect

We collect only the information necessary to provide the Service:

• Account information. When you create an account via Clerk (our authentication provider), we receive your email address and a unique user identifier.
• Onboarding data. Profession, creative mediums, and influences you voluntarily provide during onboarding to personalise your experience.
• Captured references. URLs, page titles, descriptions, thumbnail images, and selected text you explicitly choose to save using the extension or web app.
• Authentication tokens. The extension reads and stores your Clerk session JWT locally in the browser to authenticate requests to our API. The Instagram session cookie is read solely to enable Instagram content capture when you initiate it — it is never transmitted to our servers.

2. How We Use Your Information

• To operate and provide the Service — storing and displaying your saved references and projects.
• To personalise your creative intelligence feed based on your stated preferences and saved references.
• To authenticate your requests securely.
• To sync your data across devices via our API.

We do not use your data for advertising, profiling for third parties, or any purpose unrelated to the Service.

3. Data Storage

Captured references and project data are stored on our servers (hosted on Railway). Authentication tokens are stored locally in your browser's extension storage (chrome.storage.local) and are never sent to third parties.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

• Clerk — for authentication and session management.
• Railway — as our infrastructure provider for hosting the API and database.
• As required by law or to protect our legal rights.

5. Browser Extension Permissions

The Olivia browser extension requests the following permissions and uses them exclusively to provide the Service:

• activeTab & scripting: To extract page metadata and inject capture tools on the current tab when triggered by you.
• contextMenus: To provide right-click capture options on images, links, and text.
• storage: To cache your projects and queued captures locally for offline use.
• cookies (instagram.com): To read your Instagram session solely for Instagram content capture, on your explicit request.
• sidePanel: To display the Olivia side panel UI alongside your browser.
• alarms: To periodically refresh your authentication token in the background so you remain logged in.

The extension does not monitor your browsing history, keystrokes, or any activity beyond what you explicitly trigger.

6. Data Retention

Your data is retained for as long as your account is active. You may delete individual references, projects, or your entire account at any time. Upon account deletion, all associated data is permanently removed from our servers.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect data from children under 13.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, please contact us at hello@olivia.tools.