# CommentFusion Extension Privacy Policy

Effective Date: 17.10.2024

## 1. Introduction

Welcome to CommentFusion. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our CommentFusion browser extension ("the Extension").

## 2. Information We Collect

### 2.1 User-Provided Information
- Email address and password (for account creation and authentication)
- Username (optional)
- Comments and notes you create using the Extension

### 2.2 Automatically Collected Information
- URLs of websites you visit while using the Extension
- Comment and note counts associated with visited URLs

## 3. Legal Basis for Processing

We process your personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legitimate interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

## 4. How We Use Your Information

We use the collected information for the following purposes:
- To provide and maintain the Extension's functionality
- To authenticate users and manage user accounts
- To display comments and notes associated with specific URLs
- To improve and optimize the Extension's performance and user experience

We will not use your personal data for purposes other than those for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

## 5. Data Storage and Security

- User account information and user-generated content (comments and notes) are stored on our secure servers located within the European Economic Area (EEA).
- We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
- We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

## 6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- With other users of the Extension (only your username and public comments/notes)
- To comply with legal obligations
- To protect our rights, privacy, safety, or property

If we need to transfer your personal data out of the EEA, we will ensure that appropriate safeguards are in place to protect your data.

## 7. User Rights

Under GDPR, you have the following rights:
- The right to access your personal data
- The right to rectification of inaccurate personal data
- The right to erasure of your personal data
- The right to restrict processing of your personal data
- The right to data portability
- The right to object to processing of your personal data
- Rights in relation to automated decision making and profiling

To exercise these rights, please contact us using the information provided in Section 10. We will respond to your request within one month.

## 8. Cookies and Local Storage

The Extension uses local storage to store authentication tokens and other necessary data for its functionality. This data is stored locally on your device and is not transmitted to our servers.

## 9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. For significant changes, we will provide a more prominent notice or obtain your consent, as required by law.

## 10. Data Protection Officer and Contact Information

Our Data Protection Officer can be contacted at:

info@techie.fi

For any questions or concerns about this Privacy Policy or our data practices, please contact us at:

info@techie.fi

## 11. Right to Complain

If you are unsatisfied with our response to any data privacy concern you may have, you have the right to complain to your local data protection supervisory authority.