@rashidazarang/airtable-mcp 1.6.0 → 2.1.0

package/airtable-clipper/PRIVACY_POLICY.md

@@ -0,0 +1,187 @@
+# Privacy Policy for Airtable Clipper
+
+**Last Updated: January 15, 2025**
+
+## Overview
+
+Airtable Clipper is a Chrome extension that helps users save web content to their personal Airtable databases. We are committed to protecting your privacy and being transparent about our data practices.
+
+## Data Collection and Usage
+
+### What We DO NOT Collect
+- ❌ **Personal Information**: We do not collect names, emails, or personal details
+- ❌ **Browsing History**: We do not track which websites you visit
+- ❌ **Usage Analytics**: We do not collect analytics or telemetry data
+- ❌ **Content Data**: We do not store or access the content you extract
+- ❌ **Airtable Credentials**: Your tokens are stored locally and never transmitted to our servers
+
+### What We DO Process (Locally Only)
+- ✅ **Page Content**: Only when you explicitly choose to extract it
+- ✅ **Extension Settings**: Stored locally in Chrome's sync storage
+- ✅ **Airtable Credentials**: Stored securely in Chrome's local storage
+
+## How the Extension Works
+
+1. **Local Processing**: All data extraction happens in your browser
+2. **Direct Integration**: Extracted data goes straight from your browser to YOUR Airtable account
+3. **No Middleman**: We never see or store your data on external servers
+4. **Your Control**: You decide what to save and when
+
+## Data Storage
+
+### Local Storage (Chrome)
+- **Airtable Personal Access Token**: Encrypted and stored locally
+- **Base ID and Settings**: Stored in Chrome's sync storage
+- **Usage Statistics**: Local counters only (clips saved, success rate)
+
+### Airtable Storage
+- **Your Data**: Goes directly to your own Airtable account
+- **We Have No Access**: We cannot see or access your Airtable data
+- **Your Ownership**: You own and control all data in your Airtable
+
+## Permissions Explained
+
+We request minimal permissions necessary for functionality:
+
+### Required Permissions
+
+#### `activeTab`
+- **Purpose**: Access the current webpage you're viewing
+- **Usage**: Extract content from LinkedIn profiles, articles, etc.
+- **Limitation**: Only when you explicitly click to save content
+
+#### `storage`
+- **Purpose**: Save your extension settings locally
+- **Usage**: Store Airtable credentials and preferences
+- **Limitation**: All data stays on your device
+
+#### `contextMenus`
+- **Purpose**: Add "Save to Airtable" to right-click menu
+- **Usage**: Quick access to save selected content
+- **Limitation**: Only adds menu items, doesn't access browsing data
+
+#### `notifications`
+- **Purpose**: Show success/error messages
+- **Usage**: Confirm when content is saved to Airtable
+- **Limitation**: Simple notifications only, no data collection
+
+### Host Permissions
+
+#### `https://*.linkedin.com/*`
+- **Purpose**: Extract public profile information from LinkedIn
+- **Usage**: Save contact details from publicly visible profiles
+- **Limitation**: Only public information, respects LinkedIn's terms of service
+
+#### `https://api.airtable.com/*`
+- **Purpose**: Send data directly to your Airtable account
+- **Usage**: Create and update records in your chosen Airtable base
+- **Limitation**: Only your account, using your credentials
+
+#### `https://*/` (Optional, for universal web clipping)
+- **Purpose**: Extract content from any website you choose to clip
+- **Usage**: Save articles, posts, and other web content
+- **Limitation**: Only when you explicitly trigger the save action
+
+## Third-Party Services
+
+### Airtable Integration
+- **Direct API Connection**: We use Airtable's official REST API
+- **Your Credentials**: You provide your own Airtable Personal Access Token
+- **Data Transmission**: Secure HTTPS connection directly to Airtable
+- **Privacy**: Governed by [Airtable's Privacy Policy](https://airtable.com/privacy)
+
+### LinkedIn Compliance
+- **Public Data Only**: We only extract publicly visible profile information
+- **Terms Compliance**: We respect LinkedIn's [User Agreement](https://linkedin.com/legal/user-agreement)
+- **Rate Limiting**: We implement delays to avoid overwhelming LinkedIn's servers
+- **Ethical Use**: Designed for legitimate business and research purposes
+
+## Your Rights and Controls
+
+### Data Portability
+- **Export**: All your data is in your own Airtable account
+- **Backup**: You can export data from Airtable at any time
+- **Migration**: Switch to other tools using Airtable's export features
+
+### Data Deletion
+- **Extension Data**: Uninstall the extension to remove all local data
+- **Airtable Data**: Delete records directly in your Airtable account
+- **No Retention**: We don't retain any data when you uninstall
+
+### Access Control
+- **Your Choice**: You decide what content to save and when
+- **Granular Control**: Enable/disable features in extension settings
+- **Token Management**: Revoke access tokens in Airtable at any time
+
+## Security Measures
+
+### Data Protection
+- **Local Encryption**: Sensitive data encrypted in Chrome storage
+- **HTTPS Only**: All API communications use secure connections
+- **No External Servers**: No data passes through our servers
+- **Regular Updates**: Security patches and improvements
+
+### Best Practices
+- **Minimal Permissions**: We request only necessary permissions
+- **Secure Storage**: Use Chrome's secure storage APIs
+- **Input Validation**: All data is validated before processing
+- **Error Handling**: Graceful handling of edge cases and failures
+
+## Changes to Privacy Policy
+
+We may update this privacy policy from time to time. We will notify users of any material changes through:
+- **Extension Updates**: Changes included in extension update notes
+- **GitHub Repository**: Updates posted to our public repository
+- **In-Extension Notices**: Important changes shown in the extension interface
+
+## Compliance
+
+### Legal Standards
+- **GDPR Compliant**: No personal data collection or processing
+- **CCPA Compliant**: No sale or sharing of personal information
+- **COPPA Compliant**: No data collection from children under 13
+
+### Industry Standards
+- **Chrome Web Store Policies**: Full compliance with Chrome extension policies
+- **OAuth 2.0**: Secure authentication standards for API access
+- **REST API Security**: Following best practices for API integration
+
+## Contact Information
+
+### For Privacy Questions
+- **Email**: Not applicable (we don't collect data to have privacy questions about)
+- **GitHub Issues**: [Report privacy concerns](https://github.com/rashidazarang/airtable-clipper/issues)
+- **Documentation**: [Full documentation](https://github.com/rashidazarang/airtable-clipper)
+
+### For Technical Support
+- **GitHub Discussions**: [Get help from the community](https://github.com/rashidazarang/airtable-clipper/discussions)
+- **Bug Reports**: [Report technical issues](https://github.com/rashidazarang/airtable-clipper/issues)
+
+## Transparency Report
+
+### Open Source
+- **Full Source Code**: Available on [GitHub](https://github.com/rashidazarang/airtable-clipper)
+- **No Hidden Functions**: All code is publicly auditable
+- **Community Contributions**: Open to community review and contributions
+
+### No Analytics
+- **No Google Analytics**: We don't use any analytics services
+- **No Crash Reporting**: We don't collect crash reports or error logs
+- **No Usage Tracking**: We don't track how you use the extension
+
+---
+
+## Summary
+
+**Airtable Clipper is designed with privacy as a core principle:**
+
+✅ **Local Processing**: Everything happens in your browser  
+✅ **Direct Integration**: Your data goes straight to your Airtable  
+✅ **No Data Collection**: We don't collect, store, or analyze your data  
+✅ **Your Control**: You own and control all your data  
+✅ **Open Source**: Full transparency with public source code  
+✅ **Minimal Permissions**: Only what's necessary for functionality  
+
+If you have any questions about this privacy policy or our data practices, please don't hesitate to reach out through our GitHub repository.
+
+**Your privacy is our priority.**