Privacy Policy

1. Who we are

Cuttlefox (“we”, “our”, “us”) is the service behind the Cuttlefox Chrome extension and the website at cuttlefox.com. If you have questions about this policy, contact us at privacy@hey.cuttlefox.com.

2. What we collect and why

Email address

When you sign in, you provide your email address. We use it solely to send you a magic-link sign-in email and to identify your account. We do not send marketing emails unless you separately opt in.

Page content (DOM)

When you ask Cuttlefox to edit a page, the extension reads the page HTML and sends a trimmed snapshot to our backend and AI provider so the model can understand what to change.

Saved scripts

Scripts you save are stored in our database, associated with your account, the domain, and the URL pattern you chose. They remain stored until you delete them or close your account.

AI usage logs

Each time you send a message to the AI, we log the request count and its cost in USD. This is used to enforce trial limits, calculate your monthly bill, and detect abuse.

Billing information

Payments are processed by Paddle, who acts as the merchant of record. Cuttlefox never sees or stores your card number, bank details, or any raw payment instrument. We receive a Paddle customer ID and subscription status so we know whether your account is active.

Technical data

Our servers receive standard HTTP request metadata (IP address, user-agent, timestamp) for security and rate-limiting purposes. We do not use this data for advertising or long-term profiling.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking scripts.

3. How long we keep your data

• Account data (email, subscription status) — kept for as long as your account exists.
• Saved scripts — kept until you delete your account.
• AI chat history (including prompts and page snapshots sent to the AI) — kept until delete your account.
• AI usage logs — kept linked to your account until you delete your account, then unlinked from your account.

4. Your rights

You can delete any saved script at any time from the Cuttlefox panel. You can sign out and request full account deletion by emailing us at privacy@hey.cuttlefox.com. We will delete your account, email, saved scripts, and usage logs within 30 days of receiving your request.

If you are in the EU or UK, you also have the right to access, rectify, or port your personal data, and to object to or restrict certain processing. Contact us to exercise any of these rights.

5. Security

Access to your data is controlled by row-level security policies in our database — your scripts and usage logs are only readable by your own account. Sessions are authenticated with short-lived JWTs stored in browser extension storage, not in a web-accessible cookie.

6. Children

Cuttlefox is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with their data, contact us and we will delete it promptly.

7. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of Cuttlefox after changes are posted constitutes acceptance of the updated policy.