Privacy Policy

Last updated: July 11, 2026

haao.ai ("we", "our", or "us") operates the haao.ai browser extension and API service. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. What Data We Collect

The haao.ai browser extension collects and transmits the following:

• Memories you save: Text you explicitly save via the extension or API, stored on haao.ai servers linked to your account.
• API key: Stored locally in Chrome's chrome.storage.local and used only to authenticate requests to api.haao.ai.
• Platform metadata: The platform a memory came from (e.g. ChatGPT, Claude) recorded as a tag. We do not record full page contents or browsing history.
• Account data: Your email address and a generated agent ID, created when you register.

We do not collect passwords, payment details, or data from pages beyond what you explicitly choose to save.

2. How We Use Your Data

• To store and retrieve your memories via the haao.ai API
• To authenticate your requests using your API key
• To improve the service and diagnose technical issues
• To contact you about your account or early access status

We do not sell your data. We do not use your memories for advertising.

3. Data Storage and Security

Memories are stored in a PostgreSQL database hosted on Railway. All data is transmitted over HTTPS. API keys are hashed before storage and never returned in plaintext after creation. We take reasonable technical measures to protect your data, but no system is fully secure.

4. Browser Extension Permissions

• storage: Saves your API key locally so you don't need to re-enter it.
• activeTab: Reads the current tab when you explicitly save a memory from it.
• scripting: Injects the memory panel into supported AI platforms (ChatGPT, Claude, Gemini, Perplexity, Grok, Copilot).
• tabs: Identifies which supported platform you are currently using.

The extension only activates on the platforms listed above. It does not run on any other websites.

5. Data Retention

Memories are retained while your account is active. You can delete individual memories anytime via the extension or via DELETE /v1/memory/{id}. To request full account deletion, contact us below.

6. Third-Party Services

• Railway — API hosting and managed PostgreSQL
• Base (Coinbase) — USDC escrow transactions (applies only to API users who opt into escrow functionality)

7. Children's Privacy

haao.ai is not directed at children under 13. We do not knowingly collect data from children under 13. Contact us to request deletion if applicable.

8. Changes to This Policy

We may update this policy periodically. The "Last updated" date above reflects the most recent revision. Continued use after changes constitutes acceptance.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us below to exercise these rights.