Privacy Policy

1. The short version

• The extension runs inside your browser on the AI assistant sites you use and reads the chats your own signed-in session can already see.
• Your chats never reach our servers. Chat text, titles, images, artifacts and files are turned into the file you download, on your computer. There is no endpoint on our side that would accept them.
• What we do receive is limited to running your plan and keeping the tool working: an install ID, your Chrome profile email if you are signed in to Chrome, how many chats an export saved, and product analytics without content or location.

2. What the extension reads, and how

On the assistant sites listed in section 5, the extension reads the conversation you have open, from the data the page has already loaded or, failing that, from the page itself. For a chat list, a backup, or a selection of chats, it repeats the site's own read requests from inside the page, signed in as you, at a measured pace and stopping if the site asks it to slow down.

It never sends a message, and never edits, deletes, archives, shares or moves anything on those sites. It does not read your password or session cookies, and it cannot reach anything your own account cannot reach.

When you click the toolbar icon on a site that is not a supported assistant, the extension uses Chrome's activeTab permission to show a small card on that page saying there is nothing to export there. It reads nothing from that page, and the access ends when you leave the tab.

3. What stays on your device

Everything you export. The files are built in your browser and saved through your browser's ordinary download (downloads), written into a folder you pick, or copied to your clipboard when you ask. "Switch to another AI" builds its pack the same way: it opens the destination assistant's website for you and uploads nothing there; you import the files yourself.

Kept in the extension's local storage on your computer:

• your settings and the plan meter;
• the progress of a backup, so an interrupted one can resume, and the chats it has read so far (in the browser's IndexedDB) until you download them or discard the run;
• an index of the chats a backup already saved (their IDs and last change dates), so the next backup fetches only new and changed ones;
• the memories an assistant shows you, if you export them, so they can go into a "Switch to another AI" pack.

Removing the extension removes all of it. The one exception is the install ID, which is also kept in Chrome's sync storage so that a reinstall keeps your plan; it syncs only to your own Chrome profile.

4. What we receive

Your plan and usage

Our licence service at aichatexport-api.mastros.workers.dev (Cloudflare Workers) keeps one record per installation containing:

• A random install ID, created by the extension.
• Your Chrome profile email, if you are signed in to Chrome. The extension reads it through Chrome's identity.email permission so your plan follows you to a reinstall or another computer. It is used for that and for billing, and for nothing else: no marketing, no profiling, no sharing.
• Your plan and how many chats you have saved in the current cycle. These are counts, not content: the usage call carries the number of chats about to be saved, never their titles, IDs or text.

If you move a paid plan to a new device, you can type your billing email into the extension and we email you a six-digit code to confirm it is you. Paid plans, when offered, are billed by Stripe; we hold the Stripe customer and subscription identifiers and your billing cycle dates, never card details. During the beta every feature is free and nothing is charged.

Product analytics

We use PostHog, hosted in the EU (eu.i.posthog.com), to see whether the tool works. Events are restricted by a strict allow-list in the extension itself: any event or property not on the list is dropped before the request is built, and long text values are refused, so a future change cannot leak content by accident. Every event asks PostHog not to derive a location from your IP address, and the daily "opened" event is sent at most once a day.

What is sent: the event name, a random analytics ID, and only these kinds of properties:

• product, plan, extension version, interface language;
• which assistant and which kind of export (for example "one chat" or "backup"), the file format, how many chats or messages, how long it took, and why a run stopped;
• failure causes when an assistant's site changes.

What is never sent: chat text, titles, chat or project IDs, file names, URLs, memories, your email address, or your location. Counts and causes only.

5. Permissions, and why each one exists

• The assistant sites (chatgpt.com, claude.ai, gemini.google.com, grok.com, x.com/i/grok, perplexity.ai, chat.deepseek.com, copilot.microsoft.com, chat.mistral.ai, kimi.com): to read the chats you export, as described in section 2.
• storage: settings, the plan meter and resumable backups, kept locally (section 3).
• alarms: refreshes your plan every few minutes and checks once a day whether a backup reminder is due.
• identity and identity.email: the Chrome profile email described in section 4.
• downloads: saves the files you ask for.
• activeTab and scripting: the "nothing to export here" card, only on the tab where you click the toolbar icon.
• aichatexport-api.mastros.workers.dev and eu.i.posthog.com: the licence service and analytics described in section 4.

The extension also declares optional access to other https sites. It is not granted at install and not used today; it lets a newly supported assistant be switched on for that one site, with your click, when we add one. There is no tabs, cookies, webRequest or history permission.

6. Processors

• Cloudflare: hosting for this site and the licence service (Workers, D1, KV).
• PostHog (EU region): product analytics, as scoped above.
• Resend: sends the six-digit device code, only if you request one.
• Stripe: payments, if you choose a paid plan. Card details go to Stripe directly; we never see or store them.
• SplitForms: the contact and uninstall-feedback forms on this website. It retains submissions in its own dashboard.
• Google: distribution through the Chrome Web Store.

The AI assistants themselves (OpenAI, Anthropic, Google, xAI, Perplexity, DeepSeek, Microsoft, Mistral AI and Moonshot AI) are not our processors: your chats are between you and them, under their terms and privacy policies. The extension sends them nothing beyond the read requests their own pages already make.

7. Other people in your chats

Your chats may contain personal data you typed or pasted, about you or about other people, and shared chats or projects may contain other people's words. For the files you export, you are the controller, not us. We never receive them and cannot act on them for you. Store and share them with the same care as the conversations themselves.

8. Retention and your rights

Your licence record is kept while you use the extension, and billing records, if any, for as long as tax and accounting rules require. Analytics events are retained by PostHog under its own retention settings and cannot be tied back to you by name, because no name or email is ever sent there.

If the GDPR or a comparable law applies to you, you may request access to, correction of, or deletion of the data we hold about you, and you may object to processing or ask for a portable copy. Write to admin@mastros.online from the email of your Chrome profile, or include your billing email, so we can find your licence.

When you uninstall, Chrome opens a short feedback page. Its address carries your plan, when you installed the extension, how many chats you exported and the extension version, so we can read the feedback in context. Nothing else.

9. Children

The Service is not directed at children under 16, and we do not knowingly create accounts for them.

10. Changes

If what the extension collects changes, this page changes with it and the "last updated" date above moves. Material changes will be called out in the extension or on this site rather than made quietly.

Questions: admin@mastros.online