Effective August 28, 2026

Privacy Policy

This policy explains what RedPenn AI processes when you use the website, Chrome extension, and hosted audit service.

1. What RedPenn processes

When you start an audit, RedPenn processes the webpage you selected, including:

• Screenshots captured from the selected page;
• the page URL;
• design and accessibility details derived from the page, such as headings, labels, colours, image metadata, calls to action, and detected interface issues; and
• the brief, audience, or intended emotion you enter.

During the current beta, the extension creates a random installation identifier in your Chrome profile. The service stores only a one-way hash of that identifier, first and most recent activity dates, extension version, and audit count. This lets us count active installations without requiring your name or email. When you use email login, RedPenn stores your email address and account tier. Security rate limits use one-way values rather than storing the raw identifier or raw IP address in the rate-limit record.

For reliability, RedPenn stores operational audit events such as start and completion time, success or failure category, processing stage, duration, score, extension version, and provider token counts. These event records do not contain screenshots, audited page text, the page URL, or full browser error stacks. The extension may also report limited error categories for capture, connection, rendering, authentication, or feedback failures. Feedback you intentionally submit may include its notes, selected report sections, score, rating, and page URL.

2. Chrome permissions

The extension requests access needed to inspect the active page, capture the page for an audit, keep local audit history, and display the side panel. It acts when you open or use RedPenn; it does not sell browsing activity or use it for advertising.

3. How information is used

• Generate the audit you requested;
• count active installations and audits;
• enforce usage and security limits;
• maintain, troubleshoot, and improve the service; and
• respond to support and privacy requests.

RedPenn does not sell personal information or use audited webpage content for targeted advertising.

4. Service providers

RedPenn shares only the information needed to operate with these providers:

• Anthropic processes audit screenshots and accompanying context to generate the report.
• Vercel hosts the website and API.
• Supabase provides the account, anonymous installation, operational event, usage, and feedback database.
• Resend delivers one-time login codes.

Information may be processed in countries where these providers operate and under their applicable terms.

5. Retention

• RedPenn does not save audit screenshots in its application database after returning the report.
• Audit history and the random installation identifier are stored locally in your Chrome profile until you clear extension data or remove the extension.
• Under Anthropic's standard commercial API terms, API inputs and outputs are automatically deleted from its backend within 30 days, subject to stated safety, legal, or separately agreed exceptions.
• Account, hashed installation activity, operational event, usage, client-error category, and feedback records are kept only while reasonably needed to understand the beta, operate and secure the service, or respond to a valid request.

6. Your choices and requests

Only audit pages you are authorised to share. Do not audit pages containing passwords, payment details, medical information, confidential client material, or other sensitive data. Because the installation identifier is anonymous and one-way hashed, RedPenn may need the identifier from your extension to locate a deletion request. Use the support options on the Chrome Web Store listing for help.

7. Security and children

RedPenn uses reasonable technical and organisational safeguards, but no online service can guarantee absolute security. The service is not directed to children under 13, and we do not knowingly collect their personal information.

8. Changes and contact

This policy may be updated as RedPenn changes. The revised effective date will be posted on this page. Questions or privacy requests can be sent through the support options on the Chrome Web Store listing.