PRIVACY POLICY FOR NOVETOFY BROWSER EXTENSION

Last updated: April 27, 2026

This Privacy Policy describes how the Novetofy browser extension
("the Extension," "we," "our") collects, uses, and protects your
information.

1. INFORMATION WE COLLECT

a) Account Information
When you sign in, you provide your email address and password.
These credentials are sent over HTTPS to our authentication server
at https://api.novetofy.com to verify your identity. We do not
store your password locally.

b) Authentication Token
After successful login, our server returns an authentication
token. This token is stored locally on your device using the
browser's storage API (browser.storage.local) so you remain
signed in. The token is sent with subsequent API requests to
authorize your account.

c) Active Tab URL
When you click the Novetofy icon, the Extension reads the URL of
your currently active tab to detect whether you are on a
supported brand's website. This URL is processed locally in your
browser and is not transmitted to our servers.

d) Affiliate Link Requests
When you generate an affiliate link, the Extension sends the
identifier of the detected brand (not the full URL or page
content) to our server, which returns a short affiliate link.

1. INFORMATION WE DO NOT COLLECT

We do not collect:
- Your browsing history
- Web page content
- Cookies from websites you visit
- Personal information beyond your account email
- Location data
- Information from tabs you have not actively interacted with
through the Extension

1. HOW WE USE INFORMATION
2. To authenticate your account
3. To generate affiliate links on your behalf
4. To track commissions associated with your account
5. To improve the Extension's functionality and user experience
6. DATA SHARING

We do not sell, rent, or share your personal information with
third parties for marketing purposes. Information is only shared
with affiliate networks as required to attribute commissions to
your account.

1. DATA SECURITY

All communication between the Extension and our servers occurs
over HTTPS (TLS encryption). Authentication tokens are stored
locally in browser storage and are removed when you sign out.

1. DATA RETENTION

Your account data is retained for as long as your account is
active. You may request deletion of your account and associated
data by contacting us at support@novetofy.com.

1. THIRD-PARTY SERVICES

The Extension communicates only with the Novetofy API at
https://api.novetofy.com. The Extension also loads brand favicons
from Google's public favicon service
(https://www.google.com/s2/favicons) for display purposes only;
no personal information is shared with this service.

1. CHILDREN'S PRIVACY

Novetofy is not intended for users under 16 years of age. We do
not knowingly collect personal information from children.

1. YOUR RIGHTS

You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent at any time by uninstalling the Extension and
signing out

1. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Updated
versions will be reflected in the Extension's listing and on our
website.

1. CONTACT US

If you have questions about this Privacy Policy or how your data
is handled, contact us at:

Email: contact@novetofy.com
Website: https://novetofy.com

By installing and using the Novetofy Extension, you consent to
this Privacy Policy.