Privacy Policy

1. Core Privacy Principles

Wisteria Software is committed to protecting your privacy. Our products, including browser extensions and local applications, are designed with a "local-first" philosophy:

• Localized Processing: All outline generation and content processing run locally in the user’s browser.
• Data Ownership: Your conversation content belongs to you; we do not access, store, or monitor your chat history.
• Transparency: We only collect the minimum information absolutely necessary to operate our services.

2. ChatGPT Gemini OutlineSave & Export

This section applies to Outlinesave on ChatGPT, Gemini, Claude, and DeepSeek:

Conversation Processing: Content read by the extension (to generate directories, outlines, or exports) is processed entirely locally in your browser and is not uploaded to our servers.

Exporting: When you export to Markdown or HTML, files are generated locally and saved by you. HTML exports may include a table of contents.

Google Account Authorization and Google Drive Backup: Google Drive backup is optional. The extension uses Chrome's identity permission only after you explicitly choose to connect your Google account and authorize access. Authentication is handled by Chrome and Google OAuth.

The extension uses the resulting authorization token only for the user-requested Google Drive feature. When you choose to back up an export, the selected Markdown content is uploaded directly from your browser to your own Google Drive and is not routed through or stored on Wisteria Software servers.

After authorization, the extension may retrieve your Google account email address and display name to identify the connected account. This account information, Drive connection state, and related folder identifiers are stored locally in Chrome storage and are not sent to Wisteria Software servers. Google OAuth authorization tokens are used only to communicate directly with Google services and are not sent to Wisteria Software servers. Google may process account and uploaded file data according to Google's own privacy policy and terms.

Data We Collect: To manage your subscription and license, we may collect the following when paid features are enabled:

• Email address
• License activation status
• Payment-related identifiers provided by Paddle (Merchant of Record)
• Support communication data when you contact us

This data is used solely for license verification, billing management, and providing customer support. We do not use this data or your exports for advertising or profiling.

Minimal growth statistics: OutlineSave sends only event names, random event identifiers, a random local installation identifier for install, HTML export and directory-open counts, and timestamps to our own API. Directory activity counts only an explicit user action to open the outline; automatic display, individual outline-row clicks, page loads and background updates are not counted. Shortcut actions such as J/K are not tracked. Directory opens are recorded at most once per local reporting segment (00:00–06:00, 06:00–20:00, 20:00–24:00 Beijing time); the server counts unique installation identifiers for each day or report window. These counts represent browser installations, not identified people. Search usage counts one session after a non-empty search is explicitly closed and cleared; it does not imply a successful result or navigation. Each completed search also includes only its supported platform name (ChatGPT, Gemini, Claude or DeepSeek); no page URL or search text is sent. Platform counts represent usage sources, not installation or acquisition sources. A separate random token deduplicates uninstall-page visits; payment popup loads use event identifiers without an installation identifier, plus the purchase page language and a coarse operating system category (no OS version or raw User-Agent). HTML counts mean a file was generated and a download triggered, not that saving completed. Purchases are counted from existing verified payment records, without linking them to installation identifiers. We do not send conversation content, questions, answers, titles, page URLs, search terms, highlights, notes, bookmarks, exported content or filenames, browsing history, or Google/Chrome account information as analytics. We do not build profiles or use third-party analytics services for these counters. Usage event records are retained for up to 90 days and then removed by daily maintenance; minimal install/uninstall deduplication records and aggregate daily totals are retained to prevent repeat counting. Analytics failure does not interrupt product functions. Network infrastructure necessarily processes connection information; analytics records do not store IP addresses, User-Agent, or Referer headers.

3. Inbox Capture

Inbox Capture is designed to capture user-selected browser content and send it into a local Inbox workflow. The content you capture is processed primarily on your device.

If local integration is enabled, Inbox Capture may connect from the browser to a service running on the same device, such as a local endpoint like 127.0.0.1 or localhost, in order to pass captured content into your local Inbox environment.

We do not route captured page content through our servers merely because you use the capture flow locally. If a future feature introduces cloud handling for captured content, that feature should state so clearly at the point of use.

4. Inbox Local / Wisteria Inbox

Inbox Local / Wisteria Inbox is intended to run as a product installed and operated on the user's own device. In this local-first model, your notes, imported content, screenshots, Markdown files, and related working data are stored and processed on your own machine rather than being routed through our servers.

If you configure AI settings, API keys, model preferences, or local integrations for Inbox Local / Wisteria Inbox, those settings are intended to remain in your own local environment unless a future feature explicitly states otherwise.

In other words, the product itself acts as a local server or local service on the user's own device. We do not provide a general cloud storage service for the user's local Inbox content through this site.

5. Payments, Support, and Third-Party Services

We use selected third-party service providers to support payments, hosting, content delivery, security, and infrastructure operations.

Payments are processed by Paddle as Merchant of Record. Paddle may process billing, checkout, and transaction information under its own privacy and compliance framework.

Hosting providers, CDN services, and related infrastructure vendors may process standard technical request data as needed to serve this website securely and reliably.

If you contact support, we may process the information you provide to respond to your request, diagnose issues, and maintain customer support records where reasonably necessary. For Outlinesave bug reports, the feedback page accepts a required problem description and optional contact email and screenshot, and may attach limited diagnostic information such as the extension version, browser/system information, and browser language. It does not automatically submit your AI conversation content, current conversation URL, or a screenshot; screenshots are sent only when you choose to attach them.

6. Legal Basis for Processing

Where applicable under UK GDPR or EU GDPR, we process limited personal data under one or more of the following bases:

• Performance of a contract – to provide paid features, checkout-related services, licensing, and support
• Legitimate interests – to secure our services, prevent fraud and abuse, diagnose issues, and operate the website
• Legal obligations – where we must retain or disclose information to comply with applicable law

7. Data Retention and Security

Local product data remains primarily under your control on your own device. Uninstalling a product, clearing local browser storage, or removing local application data may remove locally stored data, depending on how you use the product.

Server-side logs, licensing records, checkout-related identifiers, and support records are retained only for as long as reasonably necessary for security, fraud prevention, legal compliance, payment administration, and service operations.

We implement reasonable technical and organizational measures designed to protect data against unauthorized access, alteration, disclosure, or destruction.

8. International Data Transfers

Our service providers may process relevant data in the United Kingdom, the European Union, or other jurisdictions, depending on the provider and technical delivery path, in accordance with applicable data protection law.

9. Your Rights and Contact

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, objection, or other information about how your personal data is handled.

To make a privacy-related request or ask a question about this policy, please contact: [email protected]