Who we are
Pollenflow is a Chrome extension for saving and organizing the best answers from ChatGPT and Claude, together with the website at pollenflow.com. It is operated from India. In this policy, “we” means Pollenflow.
Pollenflow is local-first. Your library lives in your browser. On Free it stays there. On Pro, a backup of it is also stored on our servers so you can restore it, and your browser keeps the working copy.
What we collect
- Your account. If you never sign in, we collect nothing about you; the extension works fully without an account. When you sign in with Google (through Supabase), we receive your name, email address and a Google account ID. We never see your Google password.
- Your library on Free. Your captures, books, highlights, tags and notes are stored in your browser (IndexedDB) on the device where you saved them. We do not receive them, except for text you send for an AI feature.
- Your library on Pro. A backup of your books, captures, highlights, tags, notes, titles and their dates, up to 10,000 items, is stored on our servers. Your browser keeps the working copy and the two stay in sync.
- Earlier versions. If you signed in with a version of the extension released before the Free and Pro launch, that version copied your saved chats to our servers. Those copies stay with your account until you delete your account or ask us to delete them.
- Payments. Dodo Payments collects your payment details, billing address and the information it needs for tax. We never receive your full card or bank details. Dodo Payments tells us your plan, billing interval, renewal date, country, status and the email used at checkout so we can turn Pro on or off.
- Usage data. Website analytics through PostHog (page views, clicks, referral, session length, browser, operating system, screen size and approximate location from IP address). The extension sends usage events to PostHog, such as that you opened the panel or saved something, never the chat or content itself. They are tied to a random identifier in your browser until you sign in, then to your account. We also record each AI request's feature, time and amount of processing to apply plan limits, and our hosts keep standard server logs.
- Emails. If you email us we receive your address and message. We send service emails, such as a warning before a lapsed Pro backup is deleted, through Resend.
Pollenflow only reads a chat when you click Save answer or Save highlight. It never reads or stores conversations in the background. We do not collect passwords, full card details, precise location or biometric data.
AI features
AI features run only when you use them. Each one sends the text it needs from your browser to our servers and on to OpenAI, our AI provider:
- AI Book Brief. The points of the one book you chose (the text of its captures and highlights, and its titles). We delete them from our servers once the Brief is written. The finished Brief is stored with your account.
- Auto-tags and smart titles (Pro). The text of the items you ask about.
- Search by meaning (Pro). The text of your backed-up library and your search queries, to create embeddings (numeric representations of meaning) that are stored with your backup.
OpenAI processes this under its API terms: it does not use it to train its models, and it may keep it for up to 30 days to monitor for abuse before deleting it. We do not use your library to train AI models either.
How we use it
- To provide the features you use, including AI features.
- To back up, sync and restore your library if you are on Pro.
- To manage your subscription and apply plan limits, such as free AI Briefs each month.
- To send service emails and answer support requests.
- To understand how Pollenflow is used, improve it, prevent abuse and keep it secure.
- To meet legal, tax and accounting obligations.
We do not sell your information, show ads, or use your data for advertising or profiling.
Who processes it for us
We use these providers to run Pollenflow. Each processes only the data it needs for its job:
- Supabase: sign-in and account sessions, and the database for accounts and Pro backups.
- Railway: hosts the Pollenflow API that the extension and website talk to.
- Vercel: hosts the website (processes standard server logs, including IP addresses).
- PostHog: product analytics for the website and extension.
- OpenAI: AI processing for Briefs, tag and title suggestions, and the index behind search by meaning.
- Resend: delivers service emails.
- Dodo Payments: merchant of record for Pro. Runs checkout, takes payment, handles tax, issues receipts and processes refunds.
- Google: provides sign-in when you choose Continue with Google.
We may also disclose information if the law requires it, or to a successor if Pollenflow is sold or merged, in which case this policy continues to apply to your data.
Security
Data between the extension, the website and our servers is encrypted with HTTPS. Requests to our API are authenticated with your sign-in token, each account can reach only its own data, and access to personal data is limited to the people who need it to run the service. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
How long we keep it
- Free library: on your device until you delete it, clear browser data or uninstall the extension.
- Pro backup: kept on our servers while Pro is active.
- When Pro ends: if you cancel and the paid period runs out, a renewal payment cannot be collected or a payment is refunded, the backup becomes read-only for 90 days. You can still restore it to your browser, but new backups and search by meaning stop. We email you before it is deleted, and at the end of the 90 days it is deleted from our servers. The copy in your browser stays on your device. If you subscribe again within the 90 days, your backup becomes active again.
- Brief inputs: deleted once the Brief is written. Finished Briefs stay with your account until it is deleted.
- Account information: until you delete your account.
- Billing records: a record of subscription events is kept for accounting, tax and dispute purposes and is unlinked from your account when it is deleted. Dodo Payments keeps its own records as merchant of record.
- Analytics: according to PostHog's retention settings.
- Support emails: until they are no longer needed to help you, or until you ask us to delete them.
Your choices and rights
- Export. Export any book to Markdown from the extension on any plan. From Account you can also download a copy of everything our servers hold about you, as a JSON file.
- Delete. Delete your account from Account. That cancels any subscription and permanently deletes your account, your server backup, your Briefs and your usage records. Data in your browser stays on your device until you remove it in the extension or uninstall it.
- Access, correct, delete, object. Wherever you live, you can ask us to give you your personal data, correct it, delete it, or stop analytics. You can also block analytics cookies in your browser settings.
To make a request, email hello@pollenflow.com. We respond within 30 days.
Cookies, children and transfers
Our website uses cookies that keep you signed in, and analytics cookies set by PostHog. We do not use advertising, retargeting or third-party marketing cookies. Checkout pages run by Dodo Payments may set their own. You can block cookies in your browser, but signing in on the website will not work without them.
Pollenflow is not intended for anyone under 13, and we do not knowingly collect personal information from children. If we learn we have, we will delete it promptly.
Pollenflow is operated from India. Our service providers process data in the United States and other countries, so your information may be transferred to and processed there.
Changes and contact
When we update this policy we change the date at the top. If a change materially affects how we handle your data, we will also email account holders before it takes effect. The Terms and Refund Policy cover subscriptions and payments.
Questions about privacy? Email hello@pollenflow.com and you will hear back from the person who builds Pollenflow.