Privacy Policy for PrivyAPI

Last Updated: January 22, 2025

Overview

PrivyAPI ("the Extension") is a privacy-first API testing tool designed to keep your data secure and private. This Privacy Policy explains how we handle information when you use our Chrome extension.

Our Privacy Commitment

PrivyAPI does not collect, store, or transmit any personal data to external servers. The extension is designed from the ground up with privacy as a core principle.

Data Collection

What We DO NOT Collect

• Personal information (name, email, address)
• Usage analytics or telemetry
• Browsing history
• API request/response content
• Authentication tokens or credentials
• Any data transmitted to our servers (we have no servers)

What Is Stored Locally

The following data is stored locally on your device only using browser's IndexedDB:

• User Settings — Ollama URL, model preferences
• API Projects — Imported OpenAPI/Swagger specs
• Environment Variables — User-defined variables (baseUrl, etc.)
• Selected States — Currently selected project/endpoint

This data never leaves your device and is only accessible by the extension.

Network Communications

PrivyAPI only makes network requests in the following scenarios:

1. Local AI Processing (Ollama) — To your local machine (127.0.0.1 or localhost) for AI processing. All AI processing happens on YOUR machine.
2. API Testing (User-Initiated) — Only triggered by your explicit action (clicking "Send").
3. OpenAPI Import (Optional) — Only when you explicitly enter a URL and click "Fetch".

Data Security

Before sending any data to the local AI (Ollama), the extension automatically redacts potentially sensitive information including: Authorization headers, passwords, API keys, tokens, email addresses, phone numbers.

Third-Party Services

PrivyAPI does not integrate with any third-party analytics, advertising, or tracking services. The only external software PrivyAPI interacts with is Ollama — a local LLM server that YOU install and run on YOUR machine.

Data Retention

Local Data: Stored until you uninstall the extension or manually clear it. Remote Data: None (we don't collect any).

Contact

If you have questions about this Privacy Policy, please contact us at: kenelite.sg@gmail.com