Privacy Policy
1. Introduction
Overleaf Assistance ("we", "our", or "us") operates a Chrome browser extension that provides AI-powered writing assistance inside Overleaf. This Privacy Policy explains what data we collect, why we collect it, and how we handle it. By installing or using our extension, you agree to the terms of this policy.
2. Data We Collect
2.1 Account Information
When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. We use this solely to authenticate you and associate your usage with your account.
2.2 Document Content
To provide AI features (concept extraction, chat, writer mode, style learning), we process the text of the LaTeX document you are currently editing. This content is sent to our AI provider to generate responses. We do not store your document content beyond what is necessary to complete each individual request.
2.3 Style Profile
If you use the Style Learning feature, we store a style profile derived from writing samples you voluntarily provide. This profile describes writing characteristics (tone, formality, vocabulary level) and does not contain your raw text after processing.
2.4 Usage Data
We collect anonymised usage metrics (feature interactions, error rates, session counts) to improve the product. This data is not linked to identifiable information.
3. How We Use Your Data
- To authenticate you and maintain your session.
- To send your document content to the AI model to generate responses.
- To store and apply your style profile across sessions.
- To track free-tier token usage and enforce limits.
- To diagnose bugs and improve product reliability.
We do not sell your data to third parties.
4. Data Sharing
We share data only as necessary to provide the service:
- AI Provider (Google): Document text is sent to Google's Gemini API to generate AI responses. Google's data handling is governed by their own privacy policy.
- Authentication (Google): We use Google OAuth 2.0. Google's handling of your sign-in is subject to Google's Privacy Policy.
- Payment Processing (Stripe): If you upgrade to a paid plan, your payment is processed by Stripe. Stripe receives billing information necessary to complete your subscription. Stripe's handling of payment data is governed by Stripe's Privacy Policy.
- Infrastructure: We use cloud infrastructure providers (including Supabase) for database and authentication services. Data is stored in encrypted form.
5. Data Retention
Account and style profile data is retained until you delete your account. Document content sent for AI processing is not stored after the response is returned. Usage metrics are retained in aggregated, anonymised form indefinitely.
6. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Withdraw consent at any time by uninstalling the extension.
To exercise any of these rights, contact us at enquiries@weareproxie.com.
7. Security
We use industry-standard measures including TLS encryption in transit and encrypted storage at rest. We limit access to personal data to authorised personnel only.
8. Children's Privacy
Our service is not directed at children under 13. We do not knowingly collect personal data from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the extension after changes constitutes acceptance of the updated policy.
10. Contact
For questions about this Privacy Policy, contact us at:
enquiries@weareproxie.com