Privacy Policy

Developer Information

Distribution

This extension is only distributed through the Chrome Web Store and our official website at instasearch.rankmeon.ai.

Data Handling Summary

Important: InstaSearch does not collect, transmit, or share any user data whatsoever. All processing happens locally on your device.

What We Don't Do

• No Data Collection: We don't collect any personal information, browsing history, or usage data
• No Tracking: We don't use analytics, cookies, or tracking technologies
• No Ads: We don't display advertisements or share data with advertisers
• No Server Storage: We don't store your searches, API keys, or settings on our servers
• No Selling Data: We will never sell, rent, or share your data with third parties
• No Third-Party Services: We don't use any third-party analytics or tracking services

What Information Stays Local

InstaSearch stores the following information locally in your browser only using Chrome's storage API. This data never leaves your device:

Settings & Preferences

• Your chosen AI backend (Prompt API, OpenAI, Gemini, LM Studio, Ollama, WebLLM)
• Theme and appearance preferences
• AI personality settings
• Keyboard shortcut configurations
• Custom search engine URLs
• Performance settings (debounce timing)

API Keys (Optional)

• If you provide API keys for OpenAI, Google Gemini, or Ollama Cloud, they are stored locally in your browser
• API keys never leave your device except when making API calls directly to the service you configured
• We cannot access your API keys
• Your API keys are stored encrypted using Chrome's secure storage

Data Retention

Since all data is stored locally on your device, it remains until you:

• Uninstall the extension (automatically removes all local data)
• Clear your browser data
• Manually reset settings within the extension

How Third-Party AI Services Work

When you use InstaSearch with external AI providers, your search queries are sent directly from your browser to the AI service you selected. We act as a bridge, but never see or store your data.

Third-Party AI Providers

• Google Gemini Nano (Prompt API): Runs entirely on your device. No data leaves your computer. Subject to Google's Privacy Policy
• Google Gemini API: Your queries are sent to Google. Subject to Google's Privacy Policy
• OpenAI API: Your queries are sent to OpenAI. Subject to OpenAI's Privacy Policy
• LM Studio / Ollama Local: Runs on your local machine. No data is transmitted over the internet.
• Ollama Cloud: Your queries are sent to Ollama's cloud service. Subject to Ollama's privacy policy.
• WebLLM: Runs entirely in your browser. No data leaves your device.

Chrome Extension Permissions

InstaSearch requests the following permissions, and here's exactly why:

Storage Permission

Allows the extension to save your settings and preferences locally in your browser. Without this, you would lose all your settings every time you close Chrome.

Host Permissions

Allows the extension to communicate with AI API endpoints:

• generativelanguage.googleapis.com - Google Gemini API
• api.openai.com - OpenAI API
• localhost:1234 - LM Studio (local AI server)
• localhost:11434 - Ollama (local AI server)

These permissions are essential for the extension to function. We only communicate with these endpoints to deliver AI responses. No data is sent to any other servers.

New Tab Override

Allows InstaSearch to open when you create a new tab. This is the core functionality of the extension. You can disable this in Chrome settings if preferred.

Omnibox Permission

Allows you to use the "is" keyword in your address bar to quickly access InstaSearch. No data is collected through this feature.

Your Control

You have complete control over your data:

• Delete Data: Uninstall the extension to remove all locally stored data
• Clear Settings: Reset all settings in the Settings panel
• Choose Your AI: Select which AI provider you want to use, or use local-only options
• Remove API Keys: Delete your API keys at any time from the Settings panel
• Disable Features: Turn off specific features you don't want to use
• Export Settings: Backup your preferences for future use

Data Security

• All data is stored locally using Chrome's secure storage API with encryption
• API calls to cloud providers use HTTPS encryption (TLS 1.3)
• We follow Chrome Web Store security best practices
• The extension's code is open for review and regularly audited
• No data is ever transmitted to our servers
• We use Content Security Policy (CSP) to prevent unauthorized code execution

Google API Services User Data Policy

InstaSearch's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Limited Use Compliance

• We only use Google API data to provide the core search functionality
• We do not transfer Google API data to third parties
• We do not use Google API data for advertising purposes
• We do not allow humans to read Google API data unless required for security or compliance
• All Google API data handling complies with the Limited Use requirements

Children's Privacy

InstaSearch does not knowingly collect any information from children under 13. The extension does not collect personal information from anyone. If you are a parent or guardian and believe your child has provided us with information, please contact us immediately.

Changes to This Policy

If we make changes to this privacy policy, we will update the "Last Updated" date at the top of this page. Material changes will be announced via:

• Email notification to registered users
• In-app notification within the extension
• Update notes in the Chrome Web Store

Continued use of InstaSearch after changes constitutes acceptance of the updated policy.

Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request access to your personal data (though we don't store any)
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (simply uninstall the extension)
• Right to Restrict Processing: Request restriction of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to data processing

Since we don't collect any data, there is no data to request, modify, or delete from our servers. All your information stays on your device and you have full control.

Compliance

InstaSearch complies with:

• Chrome Web Store Developer Program Policies
• General Data Protection Regulation (GDPR) - EU data protection law
• California Consumer Privacy Act (CCPA) - California privacy rights
• California Privacy Rights Act (CPRA) - Enhanced California privacy rights
• UK Data Protection Act 2018 - UK privacy law

Data Processing Basis

Under GDPR, our legal basis for processing (storing locally) your data is:

• Consent: You provide explicit consent when installing and using the extension
• Legitimate Interest: Storing preferences locally is necessary for the extension to function

International Data Transfers

If you choose to use cloud AI services (OpenAI, Google Gemini, etc.), your queries may be transferred to servers outside your country. These transfers are:

• Made directly from your browser to the AI service provider
• Subject to the privacy policies of those providers
• Not controlled or monitored by InstaSearch
• Optional - you can use local-only AI options instead

Automated Decision Making

InstaSearch does not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. The AI responses are generated by third-party AI services you select and are for informational purposes only.