1.Who We Are
This Privacy Policy explains how BrainMark ("BrainMark", "we", "us", "our") collects, uses, and protects your information when you use the BrainMark Chrome extension and the website at brainmark-web.pages.dev (together, the "Service").
For questions about this policy or your data, contact us at klearx9@gmail.com. We act as the data controller for the personal data described below.
2.Data We Collect
2.1 Data stored locally on your device (always)
The following data is stored in your browser's local storage (IndexedDB / chrome.storage) and does not leave your device unless you explicitly enable cloud sync or use online features:
- Bookmark data: URL, title, AI-generated summary, tags, category, timestamps, and health-check status of pages you save.
- Preferences: language, sidebar layout, plan cache, and other extension settings.
- Local indexes: cached vector embeddings used for offline semantic search.
2.2 Data processed when you use AI features
When you save a bookmark, generate an AI summary, tags, or categorization, the text content of that page is sent to our backend to be processed by an AI model, then used to produce the summary/tags you see. The content is transmitted over HTTPS and processed to fulfill your request.
2.3 Data processed for link health checks
When you run a link health check, the URLs of the bookmarks being checked are sent to our backend, which tests whether the links are still reachable (including soft-404 detection). URLs are checked and the results (OK / dead) are returned to your browser.
2.4 Account data (only if you sign in)
If you sign in with Google, we receive your Google account identifier (the "sub" field), and we may receive your name and email address as provided by Google Sign-In. We use the identifier to associate your synced bookmarks with your account.
2.5 Cloud sync data (Pro, opt-in)
If you sign in and enable cloud sync, your bookmark data (as described in 2.1) is synchronized to our cloud database (Cloudflare D1) so your bookmarks follow you across devices. Synced data is stored under your account identifier.
2.6 Payment data (Pro subscribers)
Payments are processed by Creem, our payment provider. We do not receive or store your full card number. We receive and store order records (order ID, product, amount, status, timestamps) linked to your account identifier, which are needed to maintain your subscription and for accounting purposes.
3.How We Use Your Data
- To provide the core functionality: saving, organizing, summarizing, tagging, and searching your bookmarks.
- To perform link health checks you request.
- To sync your bookmarks across devices when you enable cloud sync.
- To manage your account, subscription, and entitlements (Free or Pro).
- To maintain the security and integrity of the Service (e.g., rate limiting and abuse prevention).
- To comply with legal obligations.
We do not use your bookmark content for advertising, profiling, or model training, and we do not sell or rent your personal data to anyone.
4.Legal Bases for Processing (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on the following legal bases:
| Purpose | Legal basis |
|---|---|
| AI summaries, tags, categorization, semantic search | Performance of a contract (providing the Service you requested) |
| Link health checks | Performance of a contract |
| Cloud sync for signed-in Pro users | Performance of a contract |
| Google Sign-In | Your consent, given when you choose to sign in |
| Subscription and order records | Performance of a contract and legal obligation (accounting) |
| Security and abuse prevention | Legitimate interests in operating a safe Service |
5.Cookies and Local Storage
The BrainMark website itself does not use tracking cookies or analytics trackers. The extension uses browser local storage to keep your bookmarks and preferences on your device. We do not use third-party advertising or tracking SDKs.
6.Third-Party Services
We rely on a small number of processors and sub-processors to operate the Service:
| Provider | Purpose | Data involved |
|---|---|---|
| Google (Sign-In) | Authentication | Account identifier, name, email |
| Creem | Payment processing | Billing details (handled by Creem per its own privacy policy) |
| Cloudflare (Workers & D1) | Backend API, database hosting | Synced bookmarks, order records (data stored in the EU/US per Cloudflare's location settings) |
| Hugging Face | Download of the on-device semantic model | Model files only — no personal data |
Semantic search itself runs on your device — your search queries and bookmark text are embedded locally and are not sent to us.
7.Data Retention
- Local data stays on your device until you delete it or uninstall the extension.
- Synced bookmarks are retained while your account is active. When you delete a bookmark, it is marked as deleted (tombstone) for sync consistency and permanently removed from your library.
- Account and order records are retained as long as required for accounting and legal obligations, then deleted or anonymized.
- Upon account deletion, we erase your synced bookmarks, account data, and order-linked personal data within 30 days, except where retention is legally required.
8.Your Rights
8.1 If you are in the EEA/UK (GDPR)
You have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
8.2 If you are a California resident (CCPA/CPRA)
You have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of any "sale" or "sharing" of personal information. BrainMark does not sell or share personal information as defined by the CCPA/CPRA. We do not use sensitive personal information for purposes beyond providing the Service.
8.3 How to exercise your rights
Email us at klearx9@gmail.com from the address associated with your account. We respond within 30 days. Most data is also directly under your control: you can export or delete bookmarks from the extension dashboard at any time.
9.International Data Transfers
Our backend infrastructure runs on Cloudflare's global network. If you use cloud sync or online AI features, your data may be processed in the United States or other countries where Cloudflare operates. Transfers from the EEA/UK rely on Cloudflare's Data Processing Addendum and Standard Contractual Clauses where applicable.
10.Security
All network communication with our backend is encrypted over HTTPS. Access to production databases is restricted and logged. Because your primary copy is local, you can additionally protect bookmarks with your device-level security (OS user account, disk encryption, browser profile locking). No system is perfectly secure, but we design so that even a full backend compromise would expose only synced data of Pro users who opted in — never the local libraries of other users.
11.Children's Privacy
The Service is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
12.Changes to This Policy
We may update this Privacy Policy to reflect changes in the Service or the law. Material changes will be announced in the extension or on the website, and the "Last updated" date above will be revised. Continued use after changes take effect constitutes acceptance of the updated policy.
13.Contact Us
Questions, requests, or complaints: klearx9@gmail.com. We aim to reply within a reasonable time and in the language required by applicable law where feasible.