Privacy policy — AI Chat Exporter browser extension

上架填的隐私政策 URL 是 https://aichatexport.xeviora.com/legal/privacy， 页面源码在 frontend/src/app/(marketing)/legal/privacy/page.tsx。 本文件是那一页的副本，改动必须两边同步（CWS 审核看的是线上 URL）。

Last updated: 2026-08-01

The short version

The AI Chat Exporter browser extension reads the conversation on the page you are viewing and turns it into a file. For every format except PDF, that work happens entirely inside your browser and no conversation content is transmitted to us. PDF is rendered on our server, held in memory for the duration of the render, and never stored.

What the extension accesses

• Conversation content on supported sites (chatgpt.com, chat.openai.com, claude.ai, gemini.google.com, grok.com, chat.deepseek.com, www.perplexity.ai). Read when you click Export or open the selection panel. Used only to produce the file you asked for.
• Local storage in your browser. Your export settings, your interface language, the panel's position, and — if you enable the archive — the exports you chose to keep. This never leaves your device and is removed when you uninstall the extension.
• Your AI Chat Exporter session cookie. Sent only to aichatexport.xeviora.com to read your plan and remaining quota.

The extension does not read pages outside the supported assistant domains, does not inject anything into other sites, and does not track your browsing.

Permissions and why they are needed

These are exactly the permissions the extension declares — no more, no fewer.

Permission	Why
storage	Remember your export settings, the per-export toggles, the panel's side and width, and the interface language you picked. Nothing in storage is sent to any server.
unlimitedStorage	The local archive is an IndexedDB store that can hold thousands of saved conversations with their images, which is more than the default quota allows. It stays on your device.
downloads	Write the exported file — PDF, DOCX, Markdown, HTML, JSON, CSV, JSONL, TXT, PNG or a ZIP bundle — to your Downloads folder when you click Export.
clipboardWrite	Copy the exported text, or a freshly created share link, when you click a Copy action.

Host permissions:

Host	Why
chatgpt.com, chat.openai.com, claude.ai, gemini.google.com, grok.com, chat.deepseek.com, www.perplexity.ai	The six assistants the extension exports from. The panel runs only on these sites and reads the conversation you are already looking at.
aichatexport.xeviora.com	Read your plan and remaining quota, and create share links.
aichatexport-api.xeviora.com	Send the sanitised HTML for a PDF render and receive the PDF bytes back.

The extension declares no tabs, scripting, cookies, webNavigation or <all_urls> permission, and requests nothing at runtime.

Server-rendered PDF

When you export a PDF, the extension builds sanitised HTML from the turns you selected and posts it directly to aichatexport-api.xeviora.com together with a signed ticket valid for two minutes. That ticket contains a job identifier, your plan name, a theme name and a size limit — not your email, not your conversation.

The render service holds the HTML in process memory, produces the PDF, streams it to you, and discards both. It writes no files and has no database. We keep a row recording that a render happened, its size in bytes and whether it succeeded, so that quotas work — never its content.

Shared links

If you publish a conversation to a share link, that content is stored on our servers, because that is the point of the feature. Shares are private by default and marked noindex unless you opt in to indexing. You can set a password and an expiry date, and you can delete a share at any time, which removes the stored content.

Account data

If you create an account we store your email address, your name if you provide one, a password hash or the identifier from the social provider you used, session records, your plan, and daily counters for the quotas you consume.

Payments

Payments are processed by Paddle, which acts as merchant of record. Paddle handles card details; we never see or store them.

Analytics

The extension sends no analytics. Which conversations you export, in which format, on which site, and everything in your local archive are never reported to us or to anyone else.

Our website (aichatexport.xeviora.com) uses Google Analytics to count visits and page load speed. That is the website only — it is not present in the extension, and the extension does not load it on any page you visit.

Sub-processors

Vercel (web app hosting) · Neon (PostgreSQL) · Paddle (payments) · Google Analytics (website traffic only, not the extension) · our own server (PDF rendering, no storage).

Retention

Render job records are kept for 90 days and then deleted. Share content is kept until you delete it or it expires. Account data is kept while your account exists.

Your rights

Write to support@xeviora.com to request a copy of your data, correct it, or have it deleted. We answer within 30 days.

Contact

Xeviora — support@xeviora.com