Privacy Policy

1. User Data Collection

We collect only the essential data required to provide AI-powered Reddit comment suggestions, post generation, and account authentication:

• Account Information & Credentials: Email address and hashed password collected upon user registration or account login to manage authentication and user subscriptions.
• On-Page Content & Reddit Context: Text from active Reddit post threads (post title, body description, top comments, and subreddit name) from *.reddit.com pages, captured only when you interact with the extension side panel.
• User Input Data: Custom draft text and prompts manually entered into the "Polish Draft" or comment generator tools.
• Local Preferences & History: Saved favorite comments, extension settings, and past suggestions stored locally on your browser device.
• Technical Usage Metrics: Anonymous API request counts, timestamp logs, and error metrics to enforce daily free/pro query allowances.

2. User Data Handling & Usage

We process collected information strictly for transparent operational purposes:

• Core AI Functionality: Reddit post context and draft text are processed to generate contextual, high-engagement comment recommendations and thread sentiment analyses via Gemini AI models.
• Account & Quota Administration: Email credentials are used to authenticate users and enforce daily usage allowances.
• Local Personalization: Local storage manages your saved favorites and comment history within the extension interface.

Strict Prohibitions:

• We do NOT track your web browsing activity outside active Reddit post threads.
• We do NOT sell, trade, or transfer user data to data brokers, advertisers, or third-party marketers.
• We do NOT use personal data for ad targeting, personalized advertising, or credit scoring.

3. User Data Storage & Security

We enforce rigorous security protocols to protect your information:

• Local Device Storage: Saved favorites and extension preferences reside locally on your device via chrome.storage.local. You can inspect or clear this data at any time via Chrome browser settings.
• Cloud Database Security: User credentials (hashed with secure salt algorithms) and usage quotas are stored in an encrypted database secured by SSL/TLS transport encryption and strict access controls.
• Transient In-Memory AI Processing: Reddit thread text and user draft inputs sent to our backend proxy server are processed transiently in-memory during API execution. They are NOT permanently stored on backend servers or utilized to train public AI models.

4. User Data Sharing & Disclosure

Karma Max does NOT sell, rent, lease, or trade personal data to third parties. Data is shared exclusively with necessary service providers required for core operation:

• AI Model Infrastructure (Google Gemini API): Receives Reddit post context and draft text over HTTPS strictly to perform real-time text generation.
• Backend Hosting & Database Providers (Vercel & Cloud Database): Host the secure backend server and user authentication databases.

Personal information may be disclosed only if mandated by law, court order, or formal legal process.

5. Cookies & Web Beacons

Our landing page uses minimal essential cookies to optimize visitor experience and remember user preferences. You may disable cookies in your browser settings if desired.

6. User Rights & Data Deletion

You have full control over your data:

• Clear Local Storage: You can clear your saved comments and extension preferences at any time by clearing browser data or uninstalling the extension.
• Account Deletion: You may request complete deletion of your account and associated data by contacting our support team at riteshchaurasiya86@gmail.com.

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data privacy practices, please contact us:

Email: riteshchaurasiya86@gmail.com
Website: https://karmamax.vercel.app/privacy.html