and.software browser extension — privacy policy

What the extension does

The and.software extension lets you save web content — pages, highlighted text, images, and annotated screenshots — into your studio's and.software workspace, create tasks, and see your running timer. Everything it captures is sent to your own studio workspace and nowhere else.

Data the extension handles

• Account credentials. Your studio name, email address, and password (or a Google sign-in authorization code) are sent to our backend (Convex) solely to authenticate you. Session tokens are stored locally in the extension and can be cleared by signing out or removing the extension.
• Content you explicitly capture.When — and only when — you invoke a save action (toolbar button, context menu, keyboard shortcut), the extension reads the relevant content: the page URL and title, the text you selected, the address of an image you right-clicked, or a screenshot of the visible tab including your annotations. This is stored in your studio's workspace together with who captured it and when.
• Tasks and timer data. Task titles you type into the extension are stored in your workspace; the extension reads your currently running timer to display it.

What the extension does not do

• No browsing history, page content, keystrokes, or any other data is read or transmitted outside of an explicit capture action.
• No analytics, tracking, or advertising code runs in the extension.
• Your data is never sold, rented, or shared with third parties. It is used only to provide the and.software service to your studio.

Where data lives

Captured content and account data are stored with our backend provider (Convex) and, for file assets, our storage/CDN provider (Bunny.net), encrypted in transit (TLS) and at rest. Data is scoped to your studio's workspace; studios are fully separated from one another.

Permissions, and why each is needed

• activeTab, scripting — read your selection or draw the markup overlay on the page you invoked the extension on, only at that moment.
• contextMenus— the right-click “Save … to &” entries.
• storage — your studio name, session tokens, and in-flight capture payloads.
• sidePanel— the extension's interface.
• identity — completing Google sign-in.

Retention and deletion

Captures remain in your studio's workspace until you or a teammate deletes them (deleting a capture also deletes its stored images). Signing out of the extension clears its local session. Workspace and account deletion are handled in your studio's settings, or by contacting us.

Limited use

The extension's use of data obtained through Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements: data is used only to provide the user-facing features described above.

Changes and contact

If this policy changes materially, the effective date above will be updated and the extension's store listing will reference the new version. Questions or deletion requests: garrett@spolialab.com.