Multi Offers Extension — Privacy Policy

1) Overview

The Multi Offers browser extension lets you access your Multi Offers workspace from any tab. This policy explains what data the extension touches, how it is used, and your choices.

2) Data we process

• Account and workspace data: When you sign in, the extension communicates with the Multi Offers backend to retrieve your profile and workspace data. This is the same information you provide in the Multi Offers web app.
• Content you manage: Trip and service details you view or edit inside the sidebar are sent only to the Multi Offers API to perform the requested action.
• Local settings: A single preference that controls whether the floating “Activate extension” button appears on pages.
• Authentication tokens: A short-lived JWT is stored in the extension’s local storage to keep you signed in between requests.
• Optional analytics: If the publisher enables PostHog, we record lightweight events (e.g., when the sidebar is opened) with page URL and hostname plus your user ID/email to understand feature usage. Session recording is disabled.

3) What we do not collect

• We do not read or store your browsing history beyond the active tab needed to inject the sidebar UI.
• We do not scrape arbitrary page content; data stays within the extension unless you submit it to the Multi Offers API.
• We do not sell or rent personal data.

4) Storage and retention

• Local settings and authentication tokens are kept in chrome.storage.local via Plasmo’s storage helper.
• Tokens are refreshed as needed and removed when you sign out, clear extension data, or uninstall the extension.
• All network traffic to the Multi Offers API uses HTTPS.

5) Permissions

• Storage: Required to save the “show activate button” preference and your authentication token.
• Host access (<all_urls>): Needed to render the sidebar on the pages you open after you activate it. We only inject UI and do not collect unrelated page data.
• Active tab messaging: Used to send the activate command from the popup to the content script when you click the button.

6) Sharing and third parties

• Requests you make inside the extension are sent to the Multi Offers backend to fulfill the action you requested.
• When analytics is enabled, events are sent to PostHog (EU endpoint) with session recording disabled.
• We do not share data with advertisers or data brokers.

7) Your choices

• You can toggle the floating activation button from the extension popup.
• You can clear extension data via chrome://extensions or by uninstalling the extension, which removes locally stored tokens and settings.
• If you do not want analytics, keep the analytics key disabled at publish time; no events are sent otherwise.

8) Contact

For privacy questions or data requests, contact us using the Support email listed in the Chrome Web Store listing for this extension.