DeepTrail — Privacy Policy

Effective date: April 15, 2026 | Last updated: April 15, 2026

  Summary: DeepTrail is a Chrome extension that helps you build a personal knowledge graph from web pages. You can save pages manually (click or keyboard shortcut) or enable an optional auto-save feature in Settings. Your page content is sent to our backend server for AI processing (embedding and summarization), stored in our database, and never sold, shared for advertising, or used for any purpose beyond providing DeepTrail's core functionality. You can view, delete, or request export of your data at any time.

1. Who We Are

Developer: Tenzin Thinlay Bhutia (individual developer)
Extension name: DeepTrail
Contact email: tenthinlayofficial@gmail.com
Location: Kalimpong, West Bengal, India

This privacy policy applies to the DeepTrail Chrome extension (Item ID: gbfhehbnondmcbjfbakjopooknchcglg) and the associated backend services. If you have any questions about this policy or your data, contact us at the email above.

2. What Data We Collect

DeepTrail collects data when you save a page (manually or via auto-save) or perform a search. We categorize collected data as follows:

2a. Data collected when you save a page (manual or auto-save)

Web page content (text): The text content extracted from web pages saved to your knowledge graph. This is classified as "website content" under Chrome Web Store data types.
Page metadata: The URL, page title, and timestamp of each saved page. Used for node identification, deduplication, and display.

Manual save: Pages are saved when you click the save button in the side panel or use the keyboard shortcut (Ctrl+Shift+S / Cmd+Shift+S).

Auto-save (opt-in): If you enable the "Auto-Save Pages" toggle in Settings, DeepTrail will automatically save pages as you browse. This feature is disabled by default and must be explicitly turned on by you. You can disable it at any time from Settings. Auto-save skips non-content pages (e.g., Google accounts, email, Chrome Web Store) and deduplicates recently saved URLs.

2b. Data collected when you search

Search queries: Text queries you type into DeepTrail's search bar are sent to our backend to perform semantic search across your knowledge graph.

2c. Data collected for authentication

Email address: If you create an account, we store your email address to identify your account.
Authentication token: A session token stored locally via Chrome's chrome.storage API to keep you signed in.

2d. Data stored locally on your device

Authentication token: Stored in chrome.storage.local.
Extension settings/preferences: Including your auto-save toggle preference (on/off), stored locally via chrome.storage. These preferences are never sent to our servers.

3. What Data We Do NOT Collect

We do not collect your general browsing history. We only process pages you explicitly save (manually or via the opt-in auto-save feature).
We do not collect passwords, form data, financial information, or health information.
We do not track your activity across websites for advertising or profiling purposes.
We do not collect data when the extension is inactive and auto-save is disabled (the default state).
We do not collect personally identifiable information beyond your email address (if you create an account).
We do not collect your IP address for tracking purposes (though our hosting provider may log IP addresses in standard server logs as described in Section 6).
We do not use cookies or any browser-based tracking technologies.
We do not run any analytics or telemetry services.

4. How We Use Your Data

Your data is used exclusively to provide DeepTrail's core functionality — building and querying your personal knowledge graph. Specifically:

Data type	Purpose	Processing location
Web page content	Generate semantic embeddings for similarity search; generate summaries for knowledge graph nodes	Sent to Gemini API (embeddings) and Groq API (summarization), then stored on our database
Page metadata (URL, title)	Node identification, deduplication, display in knowledge graph	Stored on our database
Search queries	Semantic search across your knowledge graph	Sent to Gemini API (query embedding), compared against stored embeddings on our database
Email address	Account identification and authentication	Stored on our database
Authentication token	Keep you signed in across sessions	Stored locally on your device via chrome.storage

We do not use your data for any other purpose, including advertising, profiling, analytics, marketing, or training AI models.

5. Third-Party Services and Data Sharing

DeepTrail shares data with the following third-party services, solely to provide the extension's core functionality:

Service	What data is shared	Why	Their privacy policy
Google Gemini API	Page content text, search query text	Generate semantic embeddings (numerical vectors)	Gemini API Terms
Groq API	Page content text, search queries	LLM-powered summarization and RAG query responses	Groq Terms of Use
Neon.tech	All stored data (nodes, embeddings, metadata, account info)	PostgreSQL database hosting	Neon Privacy Policy
Render	All API requests transit through Render infrastructure	Backend API hosting	Render Privacy Policy

We do not sell, rent, or share your data with any other third parties. Data is sent to the services listed above solely to provide DeepTrail's functionality. We do not share data with advertising networks, data brokers, or analytics providers.

6. Data Storage, Retention, and Security

6a. Where your data is stored

Server-side: Your knowledge graph data (nodes, edges, embeddings, metadata, account info) is stored in a PostgreSQL database hosted on Neon.tech (cloud infrastructure). Our backend API runs on Render.
Client-side (your device): Authentication tokens and extension settings are stored locally via Chrome's chrome.storage API.

6b. How long we keep your data

Your data is retained for as long as you have an active DeepTrail account.
If you request deletion, all your data will be permanently removed from our servers within 30 days.
If you uninstall the extension, your server-side data is retained so you can reinstall and recover your knowledge graph. To delete server-side data, you must explicitly request deletion (see Section 8).
Locally stored data (authentication tokens, preferences) is removed automatically when you uninstall the extension.
Standard server logs (which may include IP addresses) generated by our hosting provider are retained per their default retention policies and are not used by us for any purpose.

6c. How we protect your data

All data transmission between the extension and our backend uses HTTPS/TLS encryption.
All data transmission between our backend and third-party APIs (Gemini, Groq) uses HTTPS/TLS encryption.
Authentication tokens are stored securely using Chrome's chrome.storage API.
Each user's data is isolated — you cannot access another user's knowledge graph.
Database access is restricted to authenticated API requests only.

7. Permissions Justification

DeepTrail requests the following Chrome extension permissions. Each is required for the extension's core functionality:

Permission	Why it's needed	What data is accessed
`activeTab`	Access the content of the currently active tab when you click "Save" or use the keyboard shortcut (Ctrl+Shift+S) to add a page to your knowledge graph	Text content of the active tab, only when you explicitly trigger the save action
`tabs`	Access the URL and title of tabs to capture page metadata for knowledge graph nodes. Required for both manual save (identifying which page you are saving) and the optional auto-save feature (detecting completed page loads when auto-save is enabled).	URL and title of tabs — accessed when saving a page manually or automatically (if auto-save is enabled)
`storage`	Store your authentication token and extension preferences locally on your device	Auth token and user settings — no sensitive data beyond what's needed to keep you signed in
`sidePanel`	Display DeepTrail's knowledge graph UI in Chrome's side panel	No data is accessed through this permission — it only enables the side panel UI

Host Permissions

DeepTrail declares a host_permissions entry in its manifest for https://deep-trial.onrender.com/* — our backend API server hosted on Render. This permission is required so the extension can send saved page content to the backend for processing, receive knowledge graph data, and perform search queries. This is the only external domain the extension communicates with directly. All communication uses HTTPS.

Remote Code

DeepTrail does not use remote code. All extension code is bundled locally with the extension package. No scripts are loaded from external servers at runtime.

We follow the principle of minimal permissions — DeepTrail only requests the permissions strictly necessary for its functionality. We do not request broad permissions like <all_urls>, history, cookies, or webRequest.

8. Your Rights and Controls

You have the following rights regarding your data:

Access: Your entire knowledge graph is visible in the extension's side panel UI. You can see all nodes, connections, and metadata at any time.
Deletion (individual): You can delete individual nodes from your knowledge graph at any time through the extension UI.
Deletion (full account): You can request complete deletion of all your data by emailing tenthinlayofficial@gmail.com. We will permanently delete all your data from our servers within 30 days.
Data portability / export: You can request an export of your data by contacting us at the email above. (An in-app export feature is planned for a future release.)
Opt out: You can stop using DeepTrail and uninstall the extension at any time. No data is collected while the extension is inactive.
Rectification: If any data we hold about you is inaccurate, contact us and we will correct it.

Additional rights for EU/UK users (GDPR)

If you are located in the European Union or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. Our legal basis for processing your data is your consent (you choose to save pages) and legitimate interest (providing the service you requested). To exercise any of these rights, contact us at tenthinlayofficial@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

Additional rights for California users (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at tenthinlayofficial@gmail.com.

9. Children's Privacy

DeepTrail is not directed at children under the age of 13 (or under 16 in the EU/UK). We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with their data, please contact us at tenthinlayofficial@gmail.com.

10. Chrome Web Store Limited Use Compliance

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

We limit data use to providing and improving DeepTrail's single purpose: building a personal research knowledge graph.
We do not transfer user data to third parties except as described in Section 5, which is necessary to provide DeepTrail's core functionality.
We do not use or transfer user data for personalized advertisements.
We do not sell user data to data brokers or information resellers.
We do not use or transfer user data to determine creditworthiness or for lending purposes.
We do not allow humans to read user data, unless: (a) the user has given explicit consent (e.g., for account support or data deletion requests); (b) it is necessary for security purposes such as investigating abuse; (c) it is required to comply with applicable law; or (d) the data is aggregated and anonymized and used for internal operations.

11. Prominent Disclosure

DeepTrail's single purpose is to build a personal knowledge graph from web pages you save. To provide this functionality, the extension collects website content (text from pages you save) and web browsing activity (URLs and titles of pages you save). This data collection is required for the extension's core user-facing feature, which is prominently described in the Chrome Web Store listing and in the extension's user interface.

Manual save (default): Data is collected only when you explicitly trigger a save via the side panel button or the Ctrl+Shift+S keyboard shortcut.

Auto-save (opt-in): If you enable the "Auto-Save Pages" toggle in the extension's Settings, DeepTrail will automatically save pages you visit to your knowledge graph. This feature is disabled by default. Enabling it constitutes your affirmative consent to the automatic collection of website content and browsing activity (URLs and titles) for pages you visit. You can revoke this consent at any time by disabling the toggle in Settings. Auto-save skips non-content pages such as email, authentication, and browser internal pages.

12. Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify you through the Chrome Web Store listing and/or within the extension. Continued use of DeepTrail after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy, want to exercise your data rights, or want to request data deletion, contact us:

Email: tenthinlayofficial@gmail.com

Developer: Tenzin Thinlay Bhutia

Location: Kalimpong, West Bengal, India

We aim to respond to all privacy-related requests within 30 days.