Privacy Policy for Dexicon Chrome Extension

Last Updated: 06/02/2025

Welcome to Dexicon! This Privacy Policy explains how Dexicon ("we," "us," or "our") collects, uses, shares, and protects information in relation to our Chrome browser extension (the "Service"). By installing and using Dexicon, you agree to the collection and use of information in accordance with this policy.

This policy is designed to comply with the Google Chrome Web Store Program Policies.

1. Information We Collect

We collect the following types of information to provide and improve our Service:

a. Personally Identifiable Information (PII):

• Email Address: When you sign up for an account, start a trial, or subscribe to Dexicon through our payment partner, ExtensionPay, your email address is collected to create and manage your account, process payments, and communicate with you about your subscription. Your email is also used in conjunction with your API key to authenticate your requests to our backend service.

b. Financial and Payment Information:

• Subscription Status: We receive information from ExtensionPay regarding your subscription status (e.g., active, trial, expired), plan type, and renewal or expiry dates. This is necessary to provide you with the appropriate level of service.
• Payment Processing: Dexicon uses ExtensionPay (https://extensionpay.com) for all payment processing. We do not directly collect, store, or have access to your full credit card numbers or detailed payment account information. This information is handled directly by ExtensionPay, which has its own privacy policy and security practices.

c. Authentication Information:

• API Key (extensionpay_api_key): When you subscribe or start a trial, an API key is generated by ExtensionPay and stored by the Dexicon extension. This key is used to authenticate your access to premium features and to validate your requests to our backend service.

d. Website Content (User-Selected Text):

• Selected Text and Surrounding Passage: For the core functionality of providing contextual explanations, Dexicon collects the text you select on a webpage and the surrounding passage of text. This content is sent to our secure backend service to generate relevant definitions and AI-powered explanations.

e. User Activity (Related to Extension Use):

• Interactions with Dexicon: We process information about your interactions with the Dexicon extension itself, such as which features you use (e.g., Dictionary Mode vs. AI Mode, specific AI response types), your customized settings (font, theme, shortcuts), text selections made for definition lookup, clicks within the Dexicon bubble or popup, and mouse/scroll position used to place the explanation bubble. This processing is primarily for the immediate operation of the extension's features; for instance, click data or mouse positions are used in real-time and not stored. Data such as your customized settings are stored locally as detailed in sections 1.g and 5.
• Keyboard Shortcuts: If you use keyboard shortcuts to activate Dexicon's features, we process those specific key combinations.

f. Location Information (Limited):

• IP Address: When the Dexicon extension communicates with our backend service (hosted on Cloudflare Workers), your IP address is automatically received by the server as part of standard internet communication. This may be used for general analytical purposes (e.g., aggregated regional usage) and for security measures like rate limiting or abuse prevention. We do not use it to precisely track your location.

g. Extension Settings:

• Your preferences for Dexicon, such as theme choice, font settings, AI mode enablement, and custom keyboard shortcuts, are stored locally using chrome.storage.sync and are synced across your signed-in Chrome browsers.

2. How We Collect Information

• Directly from You: When you provide your email for an account/trial via ExtensionPay, or when you configure settings within the Dexicon popup.
• Automatically When You Use the Service:
  • When you select text on a webpage for definition.
  • When the extension makes requests to our backend service (IP address, API key, selected text).
  • When you interact with the Dexicon interface (bubble, popup).
• From Our Payment Partner (ExtensionPay): We receive your email address and subscription status from ExtensionPay.

3. How We Use Your Information

We use the collected information for the following purposes, aligned with Dexicon's single purpose of providing contextual explanations:

• To Provide and Maintain the Service:
  • Authenticate your access to premium features using your email and API key.
  • Process your selected text and surrounding passage to generate definitions and AI explanations.
  • Display explanations in the Dexicon bubble according to your personalized settings.
  • Manage your account and subscription status.
• To Personalize Your Experience:
  • Remember your settings (theme, fonts, shortcuts) across sessions.
• To Communicate With You:
  • Send important notices regarding your subscription, service updates, or changes to our terms or policies (primarily via ExtensionPay's platform or the email you provided to them).
• For Security and Stability:
  • Protect against, investigate, and deter fraudulent, unauthorized, or illegal activity.
  • Monitor the health and stability of our backend services.

4. Information Sharing and Disclosure

We do not sell or transfer your personal data to third parties except in the limited circumstances described below, which are essential for providing the Dexicon service:

a. ExtensionPay:

We share your API key with ExtensionPay to validate your subscription. ExtensionPay collects your email and payment details directly to process payments and manage your subscription. We encourage you to review ExtensionPay's privacy policy.

b. Cloudflare Workers (Our Backend Infrastructure):

Your selected text, surrounding passage, email, and API key are sent to our backend service hosted on Cloudflare Workers. This service processes your request, validates your subscription, and (for AI features) forwards necessary data to an AI service provider. Cloudflare may log IP addresses for security and operational purposes.

c. OpenAI (AI Service Provider via Cloudflare AI Gateway):

For AI-powered features (Contextual Explanation, Etymology, Author's Intent, AI-selected dictionary definitions), the selected text and surrounding passage are sent from our Cloudflare Worker to OpenAI's API via Cloudflare's AI Gateway. We only send the text content necessary to generate the explanation. Your email or API key is not directly sent to OpenAI by us; our worker authenticates you before making its own authorized call to OpenAI. Cloudflare's AI Gateway, which facilitates these requests, provides functionalities such as logging of request metadata (e.g., timestamps, error codes) for monitoring and security, rate limiting to protect the service, and potentially caching of AI responses to enhance performance and reliability. The handling of any data by the AI Gateway is subject to Cloudflare's policies. The use of data by OpenAI is governed by their policies.

d. Legal Compliance and Protection:

We may disclose information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, act in urgent circumstances to protect the personal safety of users of the Service, or protect against legal liability.

5. Data Storage and Security

• Local Storage: Your extension settings, including your extensionpay_api_key, are stored locally in your browser using chrome.storage.sync.
• Backend Storage: Our Cloudflare Worker may temporarily cache API key validation status (linked to email) in Cloudflare KV storage to improve performance and efficiency. Selected text and passages are processed in memory and are not permanently stored by our worker beyond what is necessary for the immediate request to OpenAI and response to you.
• Security Measures: We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no internet-based site or system can be 100% secure, so we cannot guarantee absolute security. Data is transmitted to our backend using HTTPS.

6. Data Retention

• Extension Settings: Stored locally as long as the extension is installed or until you clear them.
• Account Information (via ExtensionPay): Your email and subscription details are managed by ExtensionPay according to their data retention policies. If you delete your ExtensionPay account, your information will be handled by them.
• Cloudflare Worker Data: IP logs may be retained by Cloudflare for a limited period for security and analytics. Cached API key validation status is set with an expiration time (e.g., 1 hour). Selected text data is ephemeral.

7. Your Rights and Choices

• Accessing and Correcting Your Information: You can manage your subscription details, including your email address, through the ExtensionPay platform. You can modify your Dexicon settings (themes, fonts, shortcuts) directly within the extension popup.
• Disabling the Extension: Dexicon is designed with user control in mind and is disabled by default for each new tab. You must explicitly enable it for a tab before it can process any selected text or send information to our backend services (and, by extension, to OpenAI). You can easily toggle the extension's active state for the current tab, which is a core feature. Furthermore, you can disable or uninstall Dexicon entirely at any time through your browser's extension management page.
• Deleting Your Data:
  • To delete your extensionpay_api_key and locally stored settings, you can clear the extension's storage or uninstall the extension.
  • To delete your account and associated data held by ExtensionPay (email, subscription history), you will need to follow ExtensionPay's account deletion procedures.
  • Data passed to OpenAI is subject to OpenAI's policies.

8. Children's Privacy

Dexicon is not intended for use by children under the age of 13 (or a higher age threshold if applicable in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the extension or on our website/listing page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.