Privacy Policy (Web Platform & Chrome Extension)
Information regarding data processing, Zero Server Data Custody, and Chrome Extension permissions in accordance with the Swiss revDSG and EU GDPR.
1. Responsible Entity
Dal Molin Consulting GmbH
Allmendweg 15, CH-6330 Cham (Canton of Zug), Switzerland
contactatwebhelper.ai2. Legal Basis (Swiss revDSG & EU GDPR)
Personal data is processed in accordance with the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the European Union General Data Protection Regulation (GDPR Art. 6(1)(b) for account performance and Art. 6(1)(f) for platform security).
3. Zero Server Data Custody (Chrome Extension)
Web Helper operates on a strict Zero Server Data Custody architecture. All DOM snapshots (Stage A), normalized JSON/Markdown/CSV outputs (Stage B), and your 25-item Session Capture History (wh_capture_history) are processed and stored 100% locally inside your browser (chrome.storage.local). Captured webpage content is never uploaded to, proxied through, or stored on Dal Molin Consulting GmbH servers.
4. Chrome Extension Permissions Disclosure
The Web Helper Chrome Extension requests only the minimum Manifest V3 permissions required for its single purpose of local webpage formatting:
- storage: Stores your local 25-item capture history (wh_capture_history), latest capture snapshot, and authenticated extension session tokens in local/sync browser storage.
- tabs: Reads the active tab URL and title in the Popup and Side Panel and coordinates user-initiated page reads with the active tab.
- sidePanel: Opens the native docked Chrome Side Panel (chrome.sidePanel) so you can inspect structured JSON, Markdown, and CSV alongside the page.
- Content Scripts (http://*/*, https://*/*): Executes local DOM reading and schema formatting inside the active page when you trigger a capture, and enables two-way WebAppBridge communication on user-authorized workspace origins.
5. Account Authentication & Ephemeral Layer 2 Classification
Anonymous Mode requires no account. When you sign in via /auth/ext, we store your account email, profile name, and surface-isolated session metadata (session ID, extension instance label, IP address, and user agent) to let you review and revoke active sessions. When signed-in users invoke Layer 2 calibrated classification (/api/v1/classify), only ephemeral structural page signals (URL path tokens, schema types, and navigation labels) are evaluated in memory without persistent storage or third-party PII custody.
6. User-Initiated Exports & WebAppBridge
Captured data leaves your browser only when you explicitly download a file (.json, .md, .csv), copy to your clipboard, configure an outbound webhook URL, or trigger a transfer to a web application origin that you have authorized in your WebAppBridge allowlist.
7. Hosting & Infrastructure
This platform is operated as a containerized serverless application on Google Cloud Run in the Belgium EU data center (europe-west1) with TLS/SSL encryption in transit.
8. Your Data Protection Rights
Under the Swiss revDSG and EU GDPR, you have the right to access, rectify, export, or delete your account data and revoke active extension sessions at any time via your account dashboard or by contacting us above. You can clear all local extension captures at any time directly inside the Chrome Extension.