# Privacy Policy for Second Opinion

**Last Updated: December 27, 2024**

## Data Collection and Usage

- This extension processes text content on chat.openai.com (ChatGPT) to generate a Second Opinion
- Chrome sync is required to store your preferences and settings
- Google account authentication is used through Firebase for secure access
- We store only:
  - Your selected topics and preferences
  - Your X.AI API key
  - Active/inactive topic settings

## Data Sharing

- Text content from ChatGPT is shared with X.AI's API (Grok) only when you request a Second Opinion
- Basic Google account information (email) is used solely for:
  - Verifying Chrome sync is enabled
  - Displaying your email in the extension interface
- No data is collected for analytics or tracking purposes

## Chrome Storage Usage

- Chrome's sync storage is used to save:
  - Topic preferences
  - Model selection (Grok)
  - API key configuration
- All storage is handled through Chrome's built-in sync system

## Permissions Used

- "identity" and "identity.email": Required for Chrome sync verification
- "storage": Used to save extension preferences
- "tabs": Used only to open Chrome settings during setup
- "activeTab": Required to interact with ChatGPT content
- Host permissions are limited to:
  - chat.openai.com
  - chatgpt.com
  - chromiumapp.org (for authentication)

## Data Security

- Authentication is handled through Firebase and Chrome identity services
- Your X.AI API key is stored in Chrome's sync storage
- All API communications use secure HTTPS connections
- The extension operates only on ChatGPT domains
- No additional user data is collected or stored

For questions about privacy, contact: info@secondopinion.so