Privacy Policy

Last updated: 11 May 2026

Operator: YOURLITTLEFACTORY, trading as “FluidEdits” (“we”, “us”, “our”).

Contact (privacy): privacy@fluidedits.com
Registered address: YOURLITTLEFACTORY 3 rue des cétoines 45760 BOIGNY SUR BIONNE France

1. Overview

This Privacy Policy explains how we collect, use, share, and protect information when you use FluidEdits (the “Service”): a Chrome extension, related backend infrastructure, and optional integrations with your development tools.

Who is responsible?

The data controller for personal data described here is YOURLITTLEFACTORY, unless we tell you otherwise (for example for a specific enterprise customer agreement).

Payments may be processed by Lemon Squeezy as an independent controller (and/or processor for certain flows)—see their privacy policy.

2. What we process

Depending on how you use the Service, we may process:

2.1 Account, licensing, and support

Email address (if you provide it for support or it appears on orders)
Lemon Squeezy order / license identifiers (as provided by our payment/licensing partner)
License key / activation state (stored locally in the extension and/or validated through our servers)
Support messages you send us

2.2 Service usage (extension + backend)

Technical diagnostics — for example error logs, timestamps, request metadata, and approximate region if derived from IP, where we log such data to operate and secure the Service
Configuration needed to operate the Service (for example extension preferences stored locally)

2.3 Content you intentionally send for AI processing

When you capture feedback, the Service may process:

Voice audio you record
Screenshots / cropped images of web pages you target
On-page context such as element tag, selector, visible text, page URL/title (as implemented)

When you use voice input, audio is recorded on your device using the browser’s MediaRecorder API. We do not store your audio. The audio recording is sent directly to Google’s Gemini 2.5 Flash API as part of a multimodal request (audio and the cropped screenshot) so the model can understand your spoken instruction. After the request completes, we do not retain the audio on our servers.

This content may include personal data if it appears on screen or in audio (for example names, emails, IDs).

We process this content to provide the Service (generate instructions) and to secure and improve the Service as described below.

3. Purposes and legal bases (GDPR / UK GDPR)

If you are in the EEA, UK, or similar regimes, we rely on:

Purpose	Legal basis
Delivering the Service (license validation, AI proxy, queues, support)	Contract (Art. 6(1)(b))
Security, abuse prevention, fraud	Legitimate interests (Art. 6(1)(f)) and/or legal obligation
Product analytics / improvement	Not used in the extension today; if introduced, legitimate interests or consent as we disclose at that time
Marketing emails (if any)	Consent where required
Compliance with law	Legal obligation (Art. 6(1)(c))

4. AI processing and providers

For voice-driven instructions, content you submit (the audio recording and cropped screenshot) is sent directly from the extension to Google’s Gemini 2.5 Flash API as a multimodal request, under Google’s Gemini API terms and related policies. We do not store your audio. After the request completes, we do not retain that audio on our servers. Other features (for example license validation) may route through our servers or infrastructure described in product documentation.

We do not embed your Google AI API key in the extension for production users; where we use Google Gemini, API keys are stored in our Supabase / cloud environment as server secrets.

Model training: We do not use your content to train our foundation models. When content is sent to Google, any additional processing (including retention or improvement uses described by Google) is governed by Google’s privacy policy and the Gemini API terms.

5. Local storage (Chrome extension)

The extension may store settings and license state using Chrome storage APIs on your device. This data stays on your machine unless the extension sends it to our backend as needed to operate the Service.

6. Sharing of information

We may share data with:

Infrastructure providers (for example Supabase and hosting in the region(s) we configure) for Edge Functions, secrets, and logs you configure
AI providers (for example Google) as needed to perform inference
Payment / licensing (Lemon Squeezy) for purchases, refunds, and tax
Authorities if required by law or to protect rights and safety

We do not sell personal data.

7. International transfers

If we transfer personal data outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses and/or adequacy decisions, as required by law. Questions about transfers may be emailed to contact@fluidedits.com.

8. Retention

We retain personal data only as long as necessary for the purposes above, including:

Transactional / licensing records: per tax/accounting and legal needs
Support tickets: retained for up to 24 months
Security logs: retained for up to 90 days
AI / multimodal requests: voice input is handled as described in §2.3 and §4: we do not store your audio on our servers and do not retain it after the request completes (Google’s handling of API data is governed by Google’s policies). Transient technical metadata is kept only as long as necessary to operate and secure the Service.

9. Security

We implement appropriate technical and organizational measures appropriate to the risk (access controls, encryption in transit, secret management). No method is 100% secure.

10. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, port, and object, and to withdraw consent where processing is consent-based. You may also lodge a complaint with your supervisory authority.

EEA/UK users: contact privacy@fluidedits.com. You may also contact your local supervisory authority (for example in France: CNIL).

We may need to verify your identity before fulfilling requests.

11. Cookies and similar technologies

On our marketing website (https://fluidedits.com) we may use Google Tag Manager and/or Google Analytics 4 to understand aggregate traffic and product interest (for example page views and referral sources). Those services may set or read first-party cookies or similar storage as described in Google's privacy policy. We do not use those tools for cross-site ad profiling on this site. If we add other non-essential cookies or similar technologies, we will describe them here and obtain consent where required by law.

For Ahrefs site verification we may place a static <meta name="ahrefs-site-verification"> tag in the page HTML; it is used only to prove domain ownership for SEO tooling and does not by itself run behavioral analytics scripts.

If enabled, Ahrefs Web Analytics loads analytics.ahrefs.com/analytics.js to measure aggregate website traffic and referral performance for SEO reporting.

The extension does not rely on normal website cookies; it uses Chrome extension storage for local settings and licensing state.

12. Children

The Service is not directed to children under 16. Do not provide data if you are under that age.

13. Changes

We will update this policy when practices change and revise the “Last updated” date. For material changes, we will provide additional notice where required.

14. Contact

Privacy contact: privacy@fluidedits.com
Postal: YOURLITTLEFACTORY 3 rue des cétoines 45760 BOIGNY SUR BIONNE France

Data Processing Agreement (DPA): Available upon request for business customers processing personal data on behalf of others (Art. 28 GDPR), if applicable. For questions about DPAs or this policy generally, email contact@fluidedits.com.