// OUR PRIVACY PHILOSOPHY
EveryGlide is engineered from the ground up on a local-first principle. Our browser extensions run 100% inside your own browser window. We never harvest your passwords, session cookies, or browsing history.
1. Information We Never Collect
To guarantee complete security and platform compliance, our software strictly excludes the following:
❌ Passwords & Credentials
We never request, read, or store your passwords or 2FA credentials for any social media account or third-party website.
❌ Third-Party Session Cookies
The extensions do not export or transmit your session tokens or authorization headers to our servers.
❌ General Web Browsing Activity
Our extensions only execute on specific URLs you actively inspect and never monitor your general internet browsing.
❌ Cloud-Based Scraping Proxies
All page rendering and DOM parsing happens directly on your machine through the browser engine.
2. Information We Process
We only process the minimal information necessary to deliver software licenses, customer support, and portal features:
- Account Information: When you register an account, we collect your name, email address, and a cryptographically salted password hash. If you sign in via Google OAuth, we receive your verified Google email and display name.
- Device Activation Telemetry: To validate your software seat license and enforce device limits, the extension transmits a cryptographic device hash, browser brand (e.g. Chrome, Edge, Firefox), and timestamp.
- Transaction Records: When you purchase an extension package, our payment processor (Polar.sh) shares a transaction identifier, customer email, amount paid, and package type. We do not store credit card numbers on our servers.
- Customer Support & Enquiries: If you submit an inquiry through our contact form or create a support ticket, we store your contact details and message to resolve your request.
3. How Your Extracted Data Is Handled
When you use an extension to scan public comments, profiles, or contact emails:
- Data is held in your browser's local sandbox (IndexedDB or LocalStorage).
- When you click export (CSV, XLSX, or JSON), the file is synthesized directly in your browser and saved to your computer.
- If you choose to sync leads or comments with your EveryGlide portal, that data is transmitted over encrypted HTTPS to your private account and is never sold, leased, or shared with third parties.
4. Third-Party Service Providers
We engage trusted third-party providers for essential operations under strict confidentiality:
| Provider | Purpose | Data Shared |
|---|---|---|
| Polar.sh | Billing & Merchant of Record | Payment info, tax location, email |
| Google OAuth | Optional Single Sign-On | Google email & name (read-only) |
| Google reCAPTCHA | Spam & bot protection on forms | Interaction telemetry, IP address |
| Optional support communication | Messages you send to our support number |
5. Your Rights (GDPR & CCPA Compliance)
Under applicable data protection laws (including the EU GDPR and California CCPA/CPRA), you have the right to:
- Access all personal data EveryGlide holds concerning you.
- Request rectification of inaccurate personal records.
- Request deletion of your portal account and associated telemetry data.
- Export your stored leads and transaction histories in standard portable formats.
To exercise any of these rights, simply email us at support@purpleslash.com or open a support ticket in your portal.
6. Data Security
We implement robust security practices including HTTPS/TLS 1.3 encryption in transit, strict database access controls, salted password hashing (Bcrypt), and automated token validation hashes.