Privacy Policy for Sita

1. Introduction

Welcome to Sita ("Sita", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, extensions and associated services. We are committed to protecting your privacy and ensuring the security of your personal information.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and authentication credentials when you create an account
• Chat Messages: The messages and queries you send to Sita
• Feedback: Any feedback or support requests you submit

2.2 Information Collected Automatically

• Authentication Tokens: Secure tokens to maintain your session
• Usage Data: Information about how you interact with Sita, including features used and response times
• Technical Data: Browser type, extension version, and error logs for troubleshooting

2.3 Website Content

When you explicitly request help about a webpage, Sita accesses and processes the text content of that page to provide context-aware assistance. This content is:

• Only accessed when you actively invoke the extension
• Processed temporarily to generate responses
• Not stored permanently unless part of your chat history

3. How We Use Your Information

We use the collected information to:

• Provide and improve Sita's AI-powered coding assistance
• Maintain your chat history and conversation context
• Authenticate and secure your account
• Respond to support requests and feedback
• Analyze usage patterns to improve our service
• Comply with legal obligations

4. Data Storage and Security

Your data is stored using industry-standard security measures:

• Local Storage: Chat history and preferences are stored locally in your browser
• Server Storage: Account data and chat history are securely stored on Supabase servers
• Encryption: All data transmissions are encrypted using HTTPS/TLS
• Access Controls: Strict access controls limit who can access your data

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

• AI Processing: Chat messages are processed by our AI provider (Google Gemini) to generate responses
• Service Providers: With trusted third-party services that help us operate (Supabase for database, Vercel for hosting)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request corrections to inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a portable format
• Opt-out: Disable the extension at any time through Chrome settings

To exercise these rights, please contact us using the information below.

7. Data Retention

We retain your data for as long as necessary to provide our services:

• Chat history is retained while your account is active
• Account data is retained until you request deletion
• Technical logs are retained for 90 days
• After account deletion, data is permanently removed within 30 days

8. Children's Privacy

Sita is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date and, for significant changes, we will provide additional notice through the extension or via email.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the sale of personal information (which we do not do).

13. European Privacy Rights

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.