Privacy Policy

The short version

• We never read your chats. On ChatGPT and Claude, the extension notices only that the AI is still working. It never reads, stores or sends your prompts or the AI’s replies.
• We collect what you choose to tell us: survey answers, profile answers, and, if you cash out, an email and payout details. You can start without an account.
• Brands never learn who you are. They see answers under a random pseudonym and breakdowns of groups of at least 5 people, never your name, email or account.
• We don’t sell your data or use it for advertising.
• You stay in control. You can pause offers, edit or clear your profile, and ask us to delete your data.

1. What the extension does on AI sites

The extension runs only on supported AI chat sites (currently chatgpt.com and claude.ai). It does nothing until you accept its welcome page, which summarises this section (consent version 3).

What it checks, to tell when you are waiting:

• whether the stop button is showing;
• when the site’s reply request starts and ends (timing only);
• whether the latest reply is still changing (whether page elements exist and their state, never their text or length);
• that you are typing in the message box, so it doesn’t interrupt you (used on your device only, never stored or sent).

What it never collects:

• the text of your prompts or the AI’s replies;
• anything on other websites;
• your browsing history, cookies, or AI account details.

If you import your profile from your AI assistant, you copy and paste that text yourself on your Beewhile account page. The extension never takes it from the AI site.

2. What we collect

From respondents

From brands: name, work email, company, survey content and uploaded media, orders, invoices and payment status (card details stay with our payment processor), and how you use results.

From website visitors: early-access and contact form entries, and the standard request logs our hosting provider keeps (IP address, browser, time). We store IP addresses only as keyed hashes, for rate limiting and abuse prevention.

We never ask about health, religion, politics, sexuality, ethnicity, union membership, precise location or detailed finances.

3. How we use it

We use data to:

• run the Service: offer surveys, match them to your profile, collect answers and deliver results;
• pay respondents and bill brands;
• check quality and prevent fraud, duplicate accounts and abuse;
• keep the Service secure and working, including spotting when an AI site’s changes break detection;
• send service emails (sign-in codes, order and results notices, cash-out updates);
• meet legal, tax and accounting obligations.

AI processing. We use an AI model provider (currently Anthropic) for a few tasks:

• Profile import (optional). We analyse the text you paste once, to suggest profile answers. The pasted text is then discarded, and only the answers you accept are saved.
• Job titles. We standardise the job title you enter, after you have accepted the consent that covers this.
• Brand tools. We draft surveys and summarise themes in open-text answers. Quotes are checked against real answers.

Our AI provider processes this data on our behalf and may not use it to train its models.

Legal bases (EEA/UK, if offered there): the contract with you (running surveys, paying you); legitimate interests (quality, fraud prevention, security, improving detection); consent (profile import, optional notifications and verification, which you can withdraw); and legal obligation (tax and accounting records).

We don’t sell or share personal data for advertising, we don’t build advertising profiles, and we don’t use data for credit or lending decisions.

4. What brands see

A brand sees only answers to its own survey, never your name, email, phone, account id, install id or payout details.

• Answers are shown under a random pseudonym that is different for every response, so a brand can’t link your answers across surveys.
• Profile breakdowns (for example, “engineers vs. founders”) are shown only for groups of at least 5 people, and smaller groups are hidden. Business surveys aimed at a list of companies are reported only in aggregate.
• Quality flags about individual responses stay with us. Responses that fail a check are never delivered.
• Brand rules. Brands must agree not to try to identify or contact respondents.

5. Who we share it with

We share data with brands as described in section 4, and with the service providers below. Each provider processes data only to provide its service to us.

We may also disclose data when the law requires it, to protect people’s rights and safety, or in a merger or sale of the business, under this policy.

6. How long we keep it

7. Your choices and rights

Controls you have:

• Pause survey offers from the wallet, or switch off the extension on Chrome’s Extensions page.
• Uninstalling the extension removes everything it stored in your browser.
• See, change or clear your profile answers on your account page.

Access and deletion. Email [privacy@domain] from your cash-out email, or include your install id (shown in the extension). We will respond within 30 days.

When we delete your account, we delete your profile, answers and wait events. Two things stay:

• answers already delivered to a brand under a pseudonym can’t be recalled, though they can’t be linked back to you;
• financial records are kept as section 6 describes.

US state privacy rights. Depending on where you live (for example California, Colorado, Connecticut or Virginia), you may have the right to know, access, correct and delete your personal information, and to opt out of its “sale”, “sharing” or targeted advertising. We don’t sell or share personal information for those purposes. We won’t treat you differently for using these rights. You can use an authorized agent.

EEA and UK (if offered there): you also have the rights to restrict or object to processing, to data portability, to withdraw consent, and to complain to your data protection authority.

Age. Beewhile is only for people 18 and older. We don’t knowingly collect data from anyone younger, and we delete it if we learn we have.

8. Security, transfers and changes

Security. We protect data with access controls on every database table, encryption in transit, and one-way hashes for phone numbers, work emails and IP addresses. Admin actions are recorded in an audit log, and the people who can see personal data are kept to a minimum. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

Where data is processed. Our providers process data in the United States. If you are outside the US, we transfer your data under appropriate safeguards, such as Standard Contractual Clauses.

Changes. If we change what the extension reads or stores, it asks you to accept the new version before it does anything else. For other material changes, we will notify you in the extension or by email, and we will update the date at the top of this page.

Contact. [Company], [address]. Email: [privacy@domain]. Beewhile is not affiliated with OpenAI, Anthropic or Google.