Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Profile Information: Name, email address, phone number, student ID, and other form-filling details you choose to save.
• Account Information: If you sign in with Google, we receive your email address, name, and profile picture from Google.

1.2 Information Collected Automatically

• Form URLs: URLs of Microsoft Forms you choose to monitor.
• Activity Logs: Records of form fill attempts and their success/failure status.
• Security Events: Login attempts and security-related actions for account protection.

1.3 Information We Do NOT Collect

• Browsing history outside of Microsoft Forms
• Passwords or payment information
• Content from other websites or forms
• Personal files or documents

2. How We Use Your Information

• Form Auto-Fill: To automatically fill Microsoft Forms with your saved profile data.
• Form Monitoring: To check when forms become available and notify you.
• Account Management: To sync your settings across devices.
• Service Improvement: To understand usage patterns and improve the extension.

3. Data Storage and Security

3.1 Where Data is Stored

• Local Storage: Your profile and settings are stored locally in your browser.
• Cloud Storage: If you sign in, data is synced to Firebase (Google Cloud) for backup and cross-device access.

3.2 Security Measures

• All data transmission uses HTTPS encryption.
• Firebase security rules ensure you can only access your own data.
• Passwords are never stored - we use secure Google authentication.
• Rate limiting prevents abuse of the service.

4. Third-Party Services

We use the following third-party services:

• Google Firebase: For authentication and cloud data storage. Firebase Privacy Policy
• Google Sign-In: For secure authentication. Google Privacy Policy
• Google Gemini AI: For intelligent form field matching (processes form structure only, not your personal data). Google AI Privacy

5. Your Rights and Choices

5.1 Access and Export

You can view all your stored data in the extension's Profile tab.

5.2 Deletion

You can delete your data by:

• Clearing the extension's local storage
• Signing out and requesting account deletion
• Uninstalling the extension

5.3 Opt-Out

You can use the extension without signing in, keeping all data local to your browser.

6. Data Retention

• Local data is retained until you clear it or uninstall the extension.
• Cloud data is retained while your account is active.
• Activity logs are retained for 90 days.
• Upon account deletion, all cloud data is permanently removed within 30 days.

7. Children's Privacy

This extension is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the extension or by updating the "Last Updated" date.

9. Permissions Explained

The extension requests the following permissions:

• activeTab: To interact with the current Microsoft Forms page.
• storage: To save your profile and settings locally.
• notifications: To alert you when forms are filled or become available.
• identity: For Google Sign-In authentication.
• scripting: To inject form-filling scripts into Microsoft Forms pages.
• nativeMessaging: To communicate with the local Python backend for AI-powered form analysis.