Privacy Policy

This Privacy Policy describes how DigiCovai ("we", "us", or "our") collects, uses, and shares information in connection with the Flashwriter browser extension (the "Extension") and its companion web dashboard at flashwriter.digicovai.com (together, the "Service"). By installing or using the Extension you agree to this Privacy Policy. If you do not agree, please do not install or use the Extension.

DigiCovai is a software provider based in Coimbatore, India. For questions about this policy, contact digicovai@gmail.com.

Flashwriter's single purpose is to help you write and respond to conversations faster on supported platforms — currently LinkedIn, WhatsApp Web, and X (Twitter). When you actively trigger it on a supported page, the Extension reads the visible conversation text on that page — including, in group chats and public tweet threads, messages sent by other participants, which is necessary to understand the conversation and generate a reply that fits it — together with any instruction you give, and uses this to generate a suggested reply or follow-up message in your own voice and style.

Every suggested message is shown to you for review before anything happens. The Extension never sends, posts, or submits a message on your behalf automatically — you must actively click to approve or send each message, including any follow-up message, before it reaches the platform.

Account & Sign-In Information: You can create a Flashwriter account by email and password (your password is hashed with bcrypt and verified by a one-time email code — we never store it in plain text) or by signing in with Google. If you use Google Sign-In, we receive basic profile information from Google — your name, email address, and profile picture — solely to create and manage your account. We do not request or receive access to your Gmail, Google Contacts, Google Drive, or any other Google service or API beyond confirming your identity.

Business Profile Information You Provide: To personalize suggestions, the dashboard lets you optionally enter your full name, business name, product or service description, target audience, writing tone, and a short bio or personalization notes. This information is stored with your account and used only to tailor the replies the Extension generates for you.

Your Own AI Provider API Key (Optional, "Bring Your Own Key"): Flashwriter works out of the box using DigiCovai-provided AI access on a limited free monthly quota. If you choose to connect your own OpenAI or Anthropic (Claude) API key instead, that key is encrypted with AES-256 before it is stored in our database. It is decrypted only in server memory, at the moment a reply is generated, to call the AI provider on your behalf, and is never displayed back to you or anyone else in plain text after you save it. You can remove a saved key at any time from the dashboard.

Conversation Content: To generate a suggested reply, the Extension reads the visible conversation text on the page you are viewing, together with your prompt, and sends this to our backend, which forwards it to the AI provider (OpenAI and/or Anthropic) solely to generate a response in real time. We do not store, log, or retain the content of your conversations, the messages involved, or the AI-generated replies in our database. This content is processed transiently in server memory to produce a response and is discarded once that response is returned to you.

Usage & Diagnostic Data: We record lightweight usage metadata against your account — which platform you used (LinkedIn, WhatsApp, X), the detected conversation stage, token counts, the AI model used, and whether your own API key was used — so we can show you your usage history and enforce the free monthly generation quota. This metadata does not include the conversation text itself.

We do not use advertising SDKs, the Extension does not display third-party advertisements, and we do not sell your personal information.

To generate suggested replies, the relevant conversation text and your prompt are sent over an encrypted (HTTPS) connection from our server to OpenAI and/or Anthropic, which process this information solely to return a generated response. These providers handle data under their own privacy policies: OpenAI https://openai.com/privacy/ and Anthropic https://www.anthropic.com/legal/privacy. We do not instruct either provider to retain conversation content beyond what is necessary to generate a response, and we do not use your conversation content to train any AI model.

Flashwriter's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use Google Sign-In only to verify your identity and retrieve your basic profile (name, email, profile picture); we do not use this data for advertising, and we do not transfer it to any third party except the service providers described in this policy.

We use the information described above solely to: (1) create, authenticate, and manage your account; (2) generate suggested replies and follow-up messages via our integrations with OpenAI and Anthropic, personalized with your business profile where you provide one; (3) let you optionally use your own AI provider API key instead of our shared quota; (4) show you your usage history and enforce the free monthly quota; (5) maintain, secure, and improve the Service; and (6) respond to your support inquiries.

We do not sell, rent, or trade your personal information, and we do not use it for advertising or profiling purposes.

Where data protection law requires a legal basis (for example under the GDPR), we rely on performance of our contract with you (providing the Service you signed up for), our legitimate interests in operating, securing, and improving the Service, your consent where we ask for it (such as connecting your own API key), and compliance with legal obligations.

We request only the narrowest permissions needed for Flashwriter to work: storage, to save your settings on your device; activeTab, to read your selected conversation text and insert the generated reply only when you actively trigger the Extension on the current tab; and host permissions limited to linkedin.com, web.whatsapp.com, x.com, twitter.com, and flashwriter.digicovai.com — never a broad "all sites" permission. The Extension does not run on, or read data from, any other website.

We share information only in these cases: with service providers who help us operate the Service (AI processing by OpenAI/Anthropic, database and server hosting, email delivery for verification codes), each bound by confidentiality and data-protection terms; where required by law, court order, or valid legal request, or to protect the rights, safety, and security of users or others; in connection with a merger, acquisition, or sale of assets, in which case we would notify you before your information becomes subject to a different policy; or with your consent, for anything else. We do not sell personal information.

Account, profile, and usage information is stored in a MySQL database maintained by DigiCovai, with access controls limiting access to authorized personnel only. Passwords are hashed with bcrypt and never stored in plain text. Your own AI provider API key, if you choose to save one, is encrypted with AES-256 at rest. All traffic between the Extension, our servers, and AI providers is encrypted in transit (HTTPS). Conversation content is not stored by us at any point. We implement reasonable technical and organizational safeguards, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security; if a breach affects you, we will notify you as required by law.

Because we do not store conversation content, there is no conversation history to delete. Account, profile, saved API key, and usage information is retained for as long as your account remains active. To delete your account and all associated data, contact us at digicovai@gmail.com and we will process your request within a reasonable time. Uninstalling the Extension removes settings stored locally in your browser but does not delete your account — email us to close it.

DigiCovai is based in India. Depending on which AI provider you use, your conversation text may be processed in the United States or other countries where OpenAI or Anthropic operate infrastructure. Where required, we rely on the safeguards those providers offer under their own privacy policies, such as standard contractual clauses.

The Extension is designed so you remain in control at all times. Every suggested reply or follow-up message is shown to you before it is sent, and you must manually review and approve or send each one. The Extension does not autonomously post or send any message without this explicit, per-message approval. You may disable or uninstall the Extension at any time through your browser's extension settings, and you can switch off or remove a saved AI provider API key at any time from the dashboard.

Depending on where you live (for example under the GDPR, the UK GDPR, the CCPA/CPRA, or India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, delete, or export the personal data we hold about you, to withdraw consent, to object to or restrict certain processing, and to complain to your local data protection authority. To exercise these rights, email digicovai@gmail.com; we will respond within the time the applicable law requires. We do not discriminate against you for exercising them, and we do not sell personal information as defined under the CCPA.

The Extension is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

The Extension operates within LinkedIn, WhatsApp Web, and X (Twitter) as viewed in your own browser, and does not access any of these platforms' private APIs or bypass their authentication. You are responsible for ensuring your use of the Extension, including any messages it helps you draft, complies with each platform's own User Agreement and applicable policies.

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date, and for material changes we will provide additional notice in the Extension or by email. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have any questions or concerns about this Privacy Policy or our data practices, or want to exercise your data rights, contact us at:

digicovai@gmail.com