Privacy Policy for PrivyAPI
Last Updated: January 22, 2025
Overview
PrivyAPI ("the Extension") is a privacy-first API testing tool designed to keep your data secure and private. This Privacy Policy explains how we handle information when you use our Chrome extension.
Our Privacy Commitment
PrivyAPI does not collect, store, or transmit any personal data to external servers. The extension is designed from the ground up with privacy as a core principle.
Data Collection
What We DO NOT Collect
- Personal information (name, email, address)
- Usage analytics or telemetry
- Browsing history
- API request/response content
- Authentication tokens or credentials
- Any data transmitted to our servers (we have no servers)
What Is Stored Locally
The following data is stored locally on your device only using browser's IndexedDB:
- User Settings — Ollama URL, model preferences
- API Projects — Imported OpenAPI/Swagger specs
- Environment Variables — User-defined variables (baseUrl, etc.)
- Selected States — Currently selected project/endpoint
This data never leaves your device and is only accessible by the extension.
Network Communications
PrivyAPI only makes network requests in the following scenarios:
- Local AI Processing (Ollama) — To your local machine (127.0.0.1 or localhost) for AI processing. All AI processing happens on YOUR machine.
- API Testing (User-Initiated) — Only triggered by your explicit action (clicking "Send").
- OpenAPI Import (Optional) — Only when you explicitly enter a URL and click "Fetch".
Data Security
Before sending any data to the local AI (Ollama), the extension automatically redacts potentially sensitive information including: Authorization headers, passwords, API keys, tokens, email addresses, phone numbers.
Third-Party Services
PrivyAPI does not integrate with any third-party analytics, advertising, or tracking services. The only external software PrivyAPI interacts with is Ollama — a local LLM server that YOU install and run on YOUR machine.
Data Retention
Local Data: Stored until you uninstall the extension or manually clear it. Remote Data: None (we don't collect any).
Contact
If you have questions about this Privacy Policy, please contact us at: [email protected]
Summary:
- Do you collect personal data? No
- Do you use analytics? No
- Do you share data with third parties? No
- Where is data stored? Locally on your device only
- Do you have servers? No
PrivyAPI is built for developers who value privacy. Your data stays on your machine.