Privacy Policy for ModelPlug Connector Chrome Extension
Last Updated: January 14, 2025
Overview
ModelPlug Connector ("the Extension") is a Chrome browser extension that helps content creators securely connect their platform accounts to ModelPlug for streamlined content management. This privacy policy explains how we collect, use, and protect your information.
Information We Collect
1. Authentication Data
- API Tokens: Your ModelPlug API token for authentication with our service
- Session Cookies: Browser cookies from supported platforms when you explicitly choose to capture them
- Platform Authentication: Session data from supported content creator platforms available through your ModelPlug account
2. Browser Storage
- Local Storage Data: Platform-specific storage data required for maintaining authenticated sessions
- Extension Settings: Your preferences and configuration settings
3. Technical Information
- Extension Version: Current version of the extension you're using
- Browser Information: User agent string for compatibility purposes
- Platform Hostnames: URLs of platforms you're connecting (for security validation)
How We Use Your Information
Primary Purposes
- Account Connection: Establish secure connections between your platform accounts and ModelPlug
- Session Maintenance: Maintain authenticated sessions for automated content management
- Service Authentication: Verify your identity with ModelPlug services
Security Measures
- Encrypted Transmission: All data is transmitted securely via HTTPS
- Local Storage: Sensitive data is stored locally in Chrome's secure storage
- No Third-Party Sharing: We never share your authentication data with third parties
Data Storage and Retention
Local Storage
- Location: Data is stored locally in your Chrome browser's secure storage
- Duration: Data persists until you manually disconnect platforms or uninstall the extension
- Access: Only the ModelPlug Connector extension can access this stored data
Server Storage
- Encrypted Sessions: Session data is encrypted before transmission to ModelPlug servers
- Retention Period: Session data is retained only as long as necessary for service functionality
- Deletion: You can request deletion of your data by contacting support
Your Rights and Controls
Data Control
- Opt-In Collection: Data is only collected when you explicitly choose to connect a platform
- Disconnect Options: You can disconnect platforms at any time through the extension interface
- Data Deletion: Uninstalling the extension removes all locally stored data
Access Rights
- View Connections: See all connected platforms through the extension interface
- Data Portability: Request export of your connection data
- Account Deletion: Request complete deletion of your data from our servers
Permissions Explanation
Required Permissions
- cookies: Read platform session cookies for authentication (only when you click "Capture Session")
- storage: Store your API token and settings locally in Chrome
- activeTab: Access the current tab to determine which platform you're on
- scripting: Execute scripts to capture session data from supported platforms
- tabs: Navigate between tabs for platform connection workflows
- notifications: Show connection status updates
Host Permissions
- Platform Domains: Access to supported platform websites only when capturing sessions
- ModelPlug API: Communication with ModelPlug servers for authentication and data sync
Third-Party Services
ModelPlug Platform
- Purpose: Primary service for content management and distribution
- Data Sharing: Session authentication data is shared securely with ModelPlug
- Privacy Policy: Subject to ModelPlug's separate privacy policy
Platform Websites
- Access: Extension accesses platform websites only to capture session data
- Data Collection: Only authentication cookies and session data are collected
- User Control: Collection only occurs when you explicitly initiate session capture
Security Measures
Data Protection
- Encryption: All sensitive data is encrypted in transit and at rest
- Secure Storage: Chrome's secure storage APIs protect locally stored data
- Access Controls: Only authenticated users can access their connection data
- Regular Updates: Extension is regularly updated to address security vulnerabilities
Incident Response
- Monitoring: We monitor for security incidents and unauthorized access attempts
- Notification: Users will be notified of any security breaches affecting their data
- Remediation: Immediate action to secure data and prevent further unauthorized access
User Rights Under GDPR (if applicable)
- Right to Access: Request access to your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing of your personal data
Children's Privacy
This extension is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.
Updates to This Policy
We may update this privacy policy from time to time. Any changes will be communicated through extension updates and posted in this document with an updated "Last Updated" date. Continued use constitutes acceptance of policy updates.
Contact Information
Support
Data Protection Officer
Legal Compliance
Jurisdiction
- Governing Law: This policy is governed by United States law
- Regulatory Compliance: Compliant with applicable privacy regulations (GDPR, CCPA, etc.)