This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy has been created with the help of the Privacy Policy Generator.
For the purposes of this Privacy Policy:
Super Agent also uses AWS Cognito for authentication/authorization purposes. Cognito uses SSRP for secure authentication, so no passwords are ever sent to our servers.
Product Analytics and Error Tracking (PostHog)
Super Agent uses PostHog, a product analytics and error tracking service, for the following purposes:
Measuring how users move through onboarding, including the steps where the extension requests browser permissions, so we can identify where users get stuck.
Measuring conversion to paid plans, such as moving from installation to account registration, to a subscription, or to a Lifetime plan, and investigating payment issues.
Calculating aggregate usage figures such as daily, weekly, and monthly active users.
Detecting and diagnosing software errors, crashes, and other technical issues.
The data collected includes product events (such as onboarding steps viewed or completed, permissions granted, upgrade screens viewed, plans selected, and purchases completed), error reports (such as error messages and technical details of where in Super Agent the error occurred), and basic technical context (such as browser type, browser version, Super Agent version, operating system, and device model).
If you use Super Agent without an account, these events are linked only to a random identifier and are not associated with your identity. If you register or log in, we link these events, including events recorded before you logged in, to your account identifier. This allows us to understand the full path from installation to purchase and to resolve issues with your account or payments.
PostHog never receives payment details such as card numbers or billing addresses.
PostHog is never used to collect information about the websites you visit, your Cookie Preferences, or your Consent Trail.
PostHog processes this data on our behalf as a Service Provider. This data is stored in the United States. For more information, see PostHog’s privacy policy at https://posthog.com/privacy.
Subscription Management (RevenueCat)
Super Agent uses RevenueCat, a subscription management service, to manage purchases, subscriptions, and Lifetime plans across platforms, verify that purchases are valid, and determine which features your plan includes.
Payments are processed by the platform or payment provider you use to make the purchase, such as the Apple App Store. RevenueCat and Super Agent never receive your full payment details, such as card numbers or billing addresses.
RevenueCat receives the information needed to manage your subscription, including a user identifier, purchase receipts and transaction records, the product or plan purchased, subscription status, renewal, cancellation, and refund events, purchase dates, price, currency, country or storefront, and basic technical context such as platform, Super Agent version, operating system, and device model.
If you use Super Agent without an account, purchases are linked to a random identifier. If you register or log in, your purchases are linked to your account identifier so your subscription can be restored and used across your devices.
RevenueCat processes this data on our behalf as a Service Provider. This data is stored in the United States. For more information, see RevenueCat’s privacy policy at https://www.revenuecat.com/privacy.
All of your other data is stored in AWS DynamoDB, fully encrypted at rest. This data includes:
Your usage metrics include the number of websites Super Agent worked on, how many clicks it saved you and an estimate of how much time Super Agent has saved you.
We do not use this data in any way other than to aggregate it so we have global usage metrics.
Encryption Material
In case you enable your Consent Trail, Super Agent locally generates an encryption key randomly, together with an Initialization Vector (IV) and a salt.
We store the IV and salt, and we store an encrypted version of your encryption key, which only you can decrypt with your password.
We use PBKDF2, an industry standard, with 100 000 iterations, to derive a key from your password. All of our encryption uses AES256-GCM.
Consent Trail
If you enable your Consent Trail, you have access to a log of websites where Super Agent worked along with what actions it took in the specific website.
This data is stored in our servers encrypted end 2 end using your encryption material. This means we cannot decrypt it and can never know what websites you have visited.
Our model is similar to what industry standard Password Managers use to ensure your privacy is protected.
We never collect information on what websites you visit. Instead, the extension has a set of rules locally that it uses on websites and it never sends website information to our servers.
We do not store IP Addresses or other information that can be tied back to you directly.
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let update the “Last updated” date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.