Privacy Policy

TUTOO — AmazingTalker Super Intelligent Assistant for Teachers

Last updated: April 2026

This privacy policy describes how the TUTOO Chrome extension (“Extension”, “we”, “us”) collects, uses, stores, and shares user data. By installing and using the Extension you agree to the practices described below.

1. Data We Collect

1.1 Account Information

When you register or log in, we collect your email address and a hashed password. These are transmitted securely to our backend server for authentication purposes only.

1.2 Chat & Profile Data

When you use the autopilot, grammar-check, or translation features, the Extension reads:

• Student profile text visible on the AmazingTalker page (name, language, learning goals).
• Chat messages displayed in the open conversation window.

This data is sent to our server so the AI can generate contextually relevant responses. It is processed in real time and not stored permanently on our servers.

1.3 Clipboard Data

The chat-tool buttons (Clip→Student, Clip→Me) read your clipboard content only when you explicitly activate one of these buttons. Clipboard data is sent to our server solely for translation and grammar correction, then discarded.

1.4 Settings & Preferences

Your extension settings (teacher name, translation language, AI prompts, toggle states, selected GPT model, etc.) are stored locally in your browser using localStorage. This data never leaves your device unless it is part of an API request you initiate (e.g., your teacher name may be included in an AI prompt).

1.5 Usage & Billing Data

We maintain a server-side record of your credit balance, total credits used, and request count to operate the pay-per-use billing system. We also store PayPal transaction IDs when you purchase credits.

1.6 Data We Do NOT Collect

• We do not collect browsing history, keystrokes, or any data from websites other than amazingtalker.com.
• We do not use cookies or tracking pixels.
• We do not collect device identifiers, IP addresses, or geolocation data for profiling.

2. How We Use Your Data

• Authentication: Email and hashed password are used to verify your identity and protect your account.
• AI message generation: Chat history and student profiles are sent to OpenAI’s API (via our server) to generate, correct, or translate messages you request.
• Billing: Usage data is used to calculate and deduct credits for AI-powered features.
• Password reset: Your email is used to send a one-time reset code if you request a password reset (sent via Brevo/Sendinblue transactional email).

3. Data Storage & Security

3.1 Server-Side Storage

Account and billing data is stored on Cloudflare Workers KV, a globally distributed key-value store. Data is encrypted in transit (HTTPS/TLS). Passwords are hashed using SHA-256 before storage and are never stored in plain text.

3.2 Client-Side Storage

Extension settings and your API key (used for authenticated requests) are stored in your browser’s localStorage under the amazingtalker.com domain. This data remains on your device and is accessible only to scripts running on that domain.

3.3 Transient Processing

Chat messages, student profiles, and clipboard text sent for AI processing are used in real time to generate a response and are not persisted on our servers after the response is returned.

4. Data Sharing & Third Parties

4.1 OpenAI

Chat and profile data is forwarded to OpenAI’s API to generate AI responses. OpenAI processes this data according to their Privacy Policy and Terms of Use. We use the API tier that does not use your data for model training.

4.2 PayPal

When you purchase credits, payment is processed through PayPal. We receive a transaction ID and payment amount from PayPal. We do not see or store your PayPal password, credit card number, or full financial details. PayPal’s own Privacy Policy applies to data they collect.

4.3 Brevo (Sendinblue)

Password-reset emails are sent via Brevo (formerly Sendinblue). Only your email address and the reset code are shared with Brevo for the sole purpose of delivering the email.

4.4 No Sale of Data

We do not sell, rent, lease, or trade your personal data to any third party.

5. Data Retention

• Account data (email, hashed password, balance) is retained as long as your account is active.
• Chat/profile data sent for AI processing is not retained after the response is generated.
• Local settings persist in your browser until you clear site data or uninstall the extension.

6. Your Rights & Choices

• Access & deletion: You may request a copy of your stored data or ask us to delete your account by emailing us at the address below.
• Opt out: You can stop all data processing at any time by disabling or uninstalling the Extension.
• Local data: You can clear your local settings by clearing site data for amazingtalker.com in your browser settings.

7. Chrome Web Store Compliance

We certify that:

• We do not sell or transfer user data to third parties outside of the approved use cases described above.
• We do not use or transfer user data for purposes unrelated to the Extension’s core functionality.
• We do not use or transfer user data to determine creditworthiness or for lending purposes.

8. Children’s Privacy

The Extension is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this privacy policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the Extension after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or your data, please contact us at:

Email: tutootr@gmail.com