Privacy Policy
1. Overview & Single Purpose Statement
Social Reply Assistant ("we", "our", or "the Service"), operated by LogicMesh, provides a Chrome browser extension and accompanying cloud software that helps users compose thoughtful, contextual comments and responses on social media platforms (such as LinkedIn, X/Twitter, Reddit, YouTube, Threads, Facebook) and online forums.
In accordance with Google Chrome Web Store Developer Program Policies, our extension has a single, focused purpose: assisting users in writing and injecting AI-assisted replies into comment boxes upon user request.
2. What Information We Collect
We collect only the minimal data strictly necessary to fulfill user requests and enforce plan limits:
A. Account Information
- Email Address: Used solely to identify your account, send verification links, and deliver password reset emails.
- Password Hash: Stored securely using industry-standard cryptographic salted hashes (bcrypt). We never store raw passwords.
- Session & API Tokens: Generated random cryptographic tokens used to authenticate extension and dashboard requests.
B. User Content (Transient)
- Post & Comment Snippets: When you click a comment/reply trigger, highlight text for reply generation, or type in the side panel, the relevant snippet is sent via encrypted TLS to our SaaS backend to generate reply variations.
- In-Memory Processing: Content snippets are processed ephemerally in volatile server memory to compute the AI completion. They are never permanently stored in our database and are never used to train or fine-tune public foundation models.
C. Usage & Quota Metrics
- Ledger Counters: We record aggregate metrics (tokens generated, platform label, model used, and timestamp) solely to enforce monthly subscription quotas and prevent API abuse.
- IP Addresses: Used strictly for rate-limiting (e.g., brute-force login and spam protection) and deleted on rolling cycles.
3. What Information We Do NOT Collect
To preserve complete privacy and user trust:
- We do NOT track or store your general web browsing history.
- We do NOT log background keystrokes, keystroke dynamics, or form inputs outside user-initiated comment actions.
- We do NOT read private messages, emails, or personal financial data.
- We do NOT sell, rent, monetize, or transfer user data to third-party data brokers or advertising networks.
- We do NOT use or transfer user data for lending, credit scoring, or targeted behavioral ads.
4. Chrome Extension Permissions Justification
Our Manifest V3 Chrome Extension requests only permissions essential for its core functionality:
| Permission | Type | Specific Technical Purpose |
|---|---|---|
activeTab |
API | Allows the extension to read the target post text and insert the selected reply into the active tab when triggered by the user. |
sidePanel |
UI | Opens a companion side panel next to the webpage for multi-variation comparison and editing without leaving the page. |
storage |
Storage | Saves your authentication token, user preferences (reply tone, length, promo settings), and local recent history in browser memory. |
contextMenus |
Menu | Enables right-clicking any highlighted post text to immediately draft a reply in the side panel. |
content_scripts |
Script | Detects comment triggers on social media and web pages, and types user-approved replies directly into comment boxes. |
host_permissions |
Network | Permits secure HTTPS communication strictly with our production API (https://social-reply.logicmesh.co/*). |
5. Third-Party AI Inference Processors
To generate high-speed, intelligent replies, our orchestration engine interfaces with enterprise AI infrastructure providers (e.g., Groq, OpenRouter, OpenAI-compatible backends):
- All communications with model endpoints are encrypted using TLS 1.3.
- Requests are sent under commercial zero-data-retention API policies, guaranteeing that your prompts are not retained or utilized to train external public models.
- No user-identifying credentials (such as your email or account ID) are ever forwarded to LLM providers.
6. Data Retention, User Control & Deletion
You have complete control over your personal information at all times:
- Local Extension Cache: You can clear your stored reply history and preferences instantly by clicking "Clear History" or "Log Out" in the extension popup.
- Account Deletion: You may permanently delete your account at any time from your User Dashboard or by contacting [email protected].
- Immediate Permanent Purge: When an account is deleted, all corresponding records (email, password hash, usage ledgers, and API tokens) are irreversibly wiped from our database immediately.
7. Security & Protection Standards
We implement rigorous organizational and technical safeguards to protect your information:
- End-to-end TLS/HTTPS encryption for all data in transit.
- Bcrypt hashing with high salt rounds for account security.
- Strict Input Sanitization against XSS, DOM injection, and prompt manipulation.
- Encrypted HTTP-only signed session cookies with
SameSite=LaxandSecureflags. - Automated IP-based rate limiting to thwart automated credential stuffing and denial of service.
8. Policy Updates & Contact
If we make material changes to this Privacy Policy, we will notify registered users via email or through an in-extension announcement banner.
For inquiries regarding this Privacy Policy, data privacy practices, or compliance requests:
- Privacy Officer Email: [email protected]
- Support Desk: Help & Support Center (or email [email protected])
- Organization: LogicMesh • Social Reply Assistant