Privacy Policy
Last Updated: November 6, 2025
At LowFruit, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome Extension and related services.
1. Information We Collect
1.1 Personal Information
We collect the following types of personal information:
- Email Address: Used for account creation, authentication, and communication about your account and our services.
- Account Credentials: Securely stored authentication tokens for accessing your LowFruit account.
1.2 Usage Analytics
We collect analytics data to improve our service, including:
- Extension usage patterns and feature interactions
- Search queries and market research topics (anonymized)
- Browser type and version
- Time and date of usage
- Error logs and diagnostic information
1.3 Automatically Collected Information
- IP address (used for security and fraud prevention)
- Device information and browser fingerprints
- Extension version and update history
2. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, maintain, and improve LowFruit's market research capabilities
- Authentication: To verify your identity and secure your account
- Customer Support: To respond to your inquiries and provide technical assistance
- Product Improvement: To analyze usage patterns and develop new features
- Communication: To send service-related notifications, updates, and marketing communications (with your consent)
- Security: To detect, prevent, and address technical issues and fraudulent activity
- Legal Compliance: To comply with applicable laws and regulations
3. Third-Party Services
LowFruit integrates with the following third-party services to provide our functionality:
3.1 OpenRouter
We use OpenRouter to power our AI-driven market research analysis. When you perform market research queries:
- Your search queries are transmitted to OpenRouter's API
- OpenRouter processes the queries using various AI models
- Results are returned to LowFruit and presented to you
- OpenRouter's privacy policy applies to data they process: https://openrouter.ai/privacy
3.2 Stripe
We use Stripe for payment processing for premium features:
- Stripe handles all payment card information
- LowFruit does not store your complete payment card details
- We receive limited information about transactions (amount, date, success/failure)
- Stripe's privacy policy: https://stripe.com/privacy
3.3 SendGrid
We use SendGrid for transactional email delivery:
4. Data Storage and Security
We implement industry-standard security measures to protect your information:
- Data encryption in transit using TLS/SSL
- Secure password hashing using bcrypt or similar algorithms
- Regular security audits and vulnerability assessments
- Access controls limiting employee access to personal data
- Secure cloud infrastructure with automatic backups
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
5. Data Retention
We retain your information for as long as necessary to provide our services:
- Account Data: Retained while your account is active and for 90 days after account deletion
- Usage Analytics: Retained for up to 2 years for analysis purposes
- Transaction Records: Retained for 7 years to comply with financial regulations
- Support Communications: Retained for 3 years
6. Your Rights and Choices
You have the following rights regarding your personal information:
6.1 Access and Portability
- Request a copy of your personal data
- Receive your data in a machine-readable format
6.2 Correction and Updates
- Update your account information through the extension settings
- Request correction of inaccurate data
6.3 Data Deletion
- Request deletion of your account and associated data
- Delete your account through the extension settings or by contacting us
- Some data may be retained for legal compliance or legitimate business purposes
6.4 Account Cancellation
- Cancel your account at any time through the extension settings
- Subscription cancellations are effective at the end of your current billing period
- After cancellation, you can request complete data deletion
6.5 Marketing Communications
- Opt out of marketing emails by clicking "unsubscribe" in any marketing message
- Adjust email preferences in your account settings
- You will still receive transactional emails necessary for service delivery
6.6 Do Not Track
LowFruit respects browser "Do Not Track" signals. When enabled, we limit analytics collection to essential service functionality only.
7. Children's Privacy
LowFruit is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete such information.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
9. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to deletion of personal information
- Right to non-discrimination for exercising CCPA rights
10. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- Significant changes will be communicated via email or in-app notification
- Your continued use of LowFruit after changes constitutes acceptance
- You can review the policy at any time at https://lowfruit.me/privacy.html
12. Contact Us
13. Data Processing Lawful Basis
We process your personal data based on the following lawful bases:
- Contract Performance: Processing necessary to provide LowFruit services
- Consent: Where you have given explicit consent (e.g., marketing communications)
- Legitimate Interests: For service improvement, fraud prevention, and security
- Legal Obligation: To comply with applicable laws and regulations
14. Cookies and Tracking Technologies
LowFruit uses minimal tracking technologies:
- Authentication Cookies: To maintain your login session
- Preference Cookies: To remember your settings
- Analytics: Anonymized usage data to improve the extension
You can control cookies through your browser settings, though this may affect extension functionality.