# Privacy Policy for ThundAi Q/A Extension

**Effective Date:** September 11, 2025
**Last Updated:** September 11, 2025

## Overview

ThundAi Q/A ("we," "our," or "the Extension") is committed to protecting your privacy while providing AI-powered email search and question answering for Thunderbird. This Privacy Policy explains how we
collect, use, and protect your information.

## Information We Collect

### Currently Collected Information

**Local Data Processing:**
- Your email content is processed locally on your device for indexing and search functionality
- Email metadata (subject, sender, date, folder) is stored locally in IndexedDB for search purposes
- Your OpenAI API key is stored locally and encrypted in your browser's local storage
- Extension usage logs are generated locally for debugging purposes

**No Current Remote Data Collection:**
- We do not currently collect or transmit your personal information to our servers
- Your emails and personal data remain on your local device
- We do not currently track usage patterns or user behavior

### Future Data Collection

**We reserve the right to implement the following data collection in future updates:**

**Usage Analytics:**
- Extension usage frequency and patterns
- Feature utilization statistics
- Performance metrics and error reports
- General usage demographics (anonymized)

**Improvement Data:**
- Search query patterns (anonymized and aggregated)
- AI question types and success rates
- Feature adoption and user preferences
- Error logs and crash reports

**User Identification:**
- Unique user identifiers for analytics purposes
- Device and browser information
- Extension version and configuration data

## How We Use Information

### Current Use
- **Local Search:** Email indexing and search functionality
- **AI Integration:** Sending your questions and relevant email content to OpenAI's API
- **Debugging:** Local error logging for troubleshooting

### Future Use (if implemented)
- **Product Improvement:** Analyzing usage patterns to enhance features
- **Performance Optimization:** Identifying and fixing performance issues
- **Feature Development:** Understanding user needs for new features
- **Customer Support:** Providing better technical support
- **Marketing Insights:** Understanding user demographics and preferences

## Data Sharing and Third Parties

### Current Third-Party Services
**OpenAI API:**
- When you use AI question features, your questions and relevant email content are sent to OpenAI
- This data is subject to OpenAI's Privacy Policy: https://openai.com/privacy/
- Only occurs when you explicitly use AI features (questions starting with "?")

### Future Third-Party Sharing
We may share anonymized, aggregated data with:
- **Analytics Providers:** For usage tracking and user behavior analysis
- **Cloud Storage Providers:** For backup and sync features (if implemented)
- **Marketing Partners:** For user demographic insights and product marketing
- **Research Partners:** For email usage research and AI improvement studies

We will never sell your personal email content or identifiable information.

## Data Security

- **Local Encryption:** Your OpenAI API key is encrypted in local storage
- **Secure Transmission:** All API calls use HTTPS encryption
- **No Server Storage:** We do not currently maintain servers storing your data
- **Local Processing:** Email indexing occurs entirely on your device

## Your Rights and Choices

### Current Rights
- **Opt-out of AI Features:** Simply don't use questions starting with "?"
- **Data Deletion:** Clear the index through Settings → Clear Index
- **API Key Control:** Remove your OpenAI API key at any time

### Future Rights (if data collection is implemented)
- **Opt-out:** Disable analytics and tracking through extension settings
- **Data Access:** Request access to data we collect about you
- **Data Deletion:** Request deletion of your data from our systems
- **Data Portability:** Request export of your data in machine-readable format

## Changes to Data Collection

**Important Notice:** If we implement user tracking or data collection in future updates:

1. **Notification:** We will notify users through the extension update process
2. **Consent:** New data collection will require explicit user consent
3. **Opt-in:** Analytics and tracking will be opt-in, not enabled by default
4. **Settings:** Users will be able to control data collection through extension settings
5. **Transparency:** Clear indication when data collection is active

## Geographic Considerations

- **Data Location:** Currently, all data processing occurs locally on your device
- **Future Data Processing:** If implemented, data may be processed in various countries
- **Compliance:** We aim to comply with GDPR, CCPA, and other applicable privacy laws

## Children's Privacy

This extension is not intended for use by children under 13. We do not knowingly collect personal information from children.

## Updates to This Policy

We may update this Privacy Policy to reflect:
- Changes in our data practices
- New features or functionality
- Legal or regulatory requirements
- User feedback and requests

Significant changes will be communicated through:
- Extension update notifications
- Email notifications (if contact information is available)
- Prominent notices in the extension interface

## Contact Information

For privacy-related questions or concerns:

**Email:** chris@searchles.com
**Subject Line:** "ThundAi Q/A Privacy Inquiry"

**Response Time:** We aim to respond within 7 business days

## Technical Details

### Data Storage Locations
- **Email Index:** Local IndexedDB database on your device
- **API Keys:** Local browser storage (encrypted)
- **Settings:** Local browser storage
- **Logs:** Local browser console (not transmitted)

### Data Retention
- **Local Data:** Retained until you clear the index or uninstall the extension
- **Future Remote Data:** If implemented, will be retained according to user preferences and legal requirements

## Open Source and Transparency

- **Code Inspection:** Extension source code may be made available for security auditing
- **Third-Party Audits:** We may engage security firms to audit our privacy practices
- **Transparency Reports:** We may publish periodic transparency reports about data practices

---

**This Privacy Policy is designed to be transparent about our current practices and potential future changes. We believe in giving users control over their data and will always prioritize user privacy and
security.**

**For the most current version of this Privacy Policy, please check for updates when updating the extension.**