Information You Provide Directly

Account Information:

• Email address (when you sign up or log in)
• Name (optional)
• User preferences and settings

Ad Content:

• Ad creative (images, videos, headlines) that you explicitly save using the "Save to En Garde" button
• Ad metadata (advertiser name, platform, date saved)
• Your notes or tags added to saved ads

Information Collected Automatically

Usage Data:

• Number of ads saved
• Platforms you browse (only when ad detection occurs)
• Feature usage statistics (which features you use most)
• Cultural score requests and results

Technical Data:

• Browser type and version
• Extension version
• Operating system
• Crash reports and error logs (anonymized)

Core Functionality

• Ad Detection: Identify ads on supported platforms (Facebook, Instagram, TikTok, LinkedIn, Twitter/X, YouTube, publisher sites)
• Ad Saving: Store ads you explicitly choose to save to your library
• Cultural Scoring: Analyze saved ads across 5 cultural dimensions (Authenticity, Representation, Language & Tone, Cultural Sensitivity, Community Resonance)
• Ad Library Management: Organize, filter, and search your saved ads
• Cross-Device Sync: Sync your ad library across devices where you're logged in

Service Improvement

• Analytics: Understand which features are most valuable to improve the Extension
• Bug Fixes: Identify and fix errors or crashes
• Feature Development: Prioritize new features based on usage patterns

User Support

• Customer Support: Respond to your inquiries and troubleshoot issues
• Communication: Send service-related notifications (e.g., "Cultural score ready")

Legal Compliance

• Terms Enforcement: Ensure compliance with our Terms of Service
• Legal Obligations: Comply with applicable laws and regulations

Service Providers

We work with third-party service providers who perform services on our behalf:

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

Business Transfers

If En Garde HQ is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

Where We Store Data

Your data is stored on secure cloud servers hosted by Railway in the United States. Data is encrypted both:

• In Transit: Using TLS/HTTPS encryption
• At Rest: Using industry-standard database encryption

How We Protect Data

We implement reasonable security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication (OAuth 2.0)
• Regular security audits
• Access controls (role-based permissions)
• Encrypted backups

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained until you delete your account
• Saved Ads: Retained until you delete them individually
• Usage Analytics: Anonymized after 90 days
• Error Logs: Deleted after 30 days

You can request deletion of your data at any time (see Your Rights below).

Access Your Data

You can access all your data through the Extension popup and the En Garde platform dashboard.

Export Your Data

You can export all your saved ads and cultural scores:

• Open Extension popup
• Click "Settings"
• Click "Export My Data"
• Receive JSON file with all your data

Delete Your Data

You can delete your data in several ways:

Opt-Out of Analytics

You can opt-out of anonymized usage analytics:

• Extension popup → Settings
• Toggle off "Share anonymous usage data"
• We will only collect data necessary for core functionality

Notifications

You can control notifications:

• Chrome Settings → Privacy and security → Site Settings → Notifications
• Find En Garde Extension → Block

GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact privacy@engardehq.com.

CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of sale of personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact privacy@engardehq.com.

Host Permissions Justification

The Extension requests broad host permissions (http://*/* and https://*/*) to detect ads on publisher websites beyond major social platforms. Here's how we use these permissions:

Data Usage by Permission