Privacy Policy

Booky ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our browser extension and associated services.

We collect the following types of information: - Account information: email address and Google profile data when you sign in. - Bookmark data: URLs, page titles, folders, tags and metadata of pages you bookmark. - Website content: the text of a page, read in your browser at the moment you choose to save it, and stored on your account so you can later find that bookmark by describing what it said. Pages are never read in the background, and no page is read unless you explicitly save it. - AI-generated data: categories, tags and search embeddings produced from your bookmarks. - Open tabs: when you choose Save Open Tabs, Booky reads the address and title of the tabs you have open so it can show them to you as a list. The list stays on your device. Only the tabs you confirm are saved, and they are saved as ordinary bookmarks. Private browsing tabs are never included. - Usage data: history shown inside the extension, feature usage and preferences. - Device data: browser type, extension version and operating system for compatibility and device limits.

We use your information to: - Provide and maintain the Booky extension and its features. - Categorize and tag your bookmarks using AI. - Sync your bookmarks across devices. - Improve our services and develop new features. - Communicate with you about updates and support. - Process payments and manage subscriptions.

When using built-in AI categorization and search, the bookmark's title, URL and captured page text are sent to AWS Bedrock for processing. Categorization uses DeepSeek V3.2 and search embeddings use Amazon Titan Text Embeddings V2. These run inside our AWS account. If you use the Bring Your Own Key (BYOK) feature, categorization requests go directly from your browser to the provider you selected using your personal API key, and we do not see that traffic.

We use the following third-party services: - Amazon Web Services: hosting, database and the AI models used for categorization and search. - Google: sign-in (OAuth). We receive your email, name and profile image. - Stripe: subscription and payment processing. - Optionally, with Bring Your Own Key: the AI provider you choose (OpenAI, Anthropic, Google, Groq or AWS Bedrock), contacted directly by your browser with your own key. Each of these services has its own privacy policy governing data handling.

We implement industry-standard security measures including: - Row-level security on every tenant table, scoped to your account. - Encrypted data transmission (TLS). - Sign-in through Google OAuth with state, nonce and PKCE validation, and rotating session tokens. - BYOK keys encrypted with AES-GCM and kept on your device; they are never uploaded to our servers. While we strive to protect your data, no method of electronic transmission or storage is 100% secure.

We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

You have the right to: - Access and download your bookmark data at any time via the export feature. - Request deletion of your account and associated data. - Opt out of AI categorization and use manual organization. - Update your personal information through your account settings. - Withdraw consent for data processing at any time.

The Booky extension uses browser local storage to cache bookmark data for offline access and performance. We do not use tracking cookies. Authentication tokens are stored securely in the browser's extension storage.

Booky is not intended for use by children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the extension or via email. Your continued use of Booky after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, please contact us through the contact form on our website or email us at support@getbooky.app.