Opportunity Lens Privacy Policy

1. Introduction and scope

Opportunity Lens is a Chrome extension operated by AlphaBuilt India. It turns user-chosen webpages, notes, documents and saved research into evidence-backed briefs. This policy covers the extension, the Opportunity Lens website, and its account, entitlement, usage, profile and analytics APIs.

Opportunity Lens runs after user actions. It does not continuously monitor browsing, build a browsing history, crawl links, scrape private contacts, send messages or post for users. Page-reading code is injected only when a user asks to read/analyze the active page or find a saved excerpt.

2. Information users provide

Users may provide AI-provider settings and a key; prompts, focus text, pasted notes, source URLs, documents and interview notes; saved ideas, reports, comparisons and validation work; and account/profile fields including email, optional Chrome email, licence token, name, company, role, country, industry, intended use, company size, website, LinkedIn, optional phone and contact-consent choices. Profile submission and marketing/research consent are optional.

3. Information accessed from webpages

After an explicit action, the extension can read the active page's URL, canonical URL, title, selected text, bounded visible text, domain/portal and visible author/date metadata. Selected text is preferred. A public URL is fetched only when a user submits it. Evidence location searches only the active page for the saved excerpt.

4. Information collected automatically

The extension creates random installation and short-lived session identifiers. Sanitized events sent to AlphaBuilt can include event name/time, extension version, feature, operation, success/failure category, plan and bounded counts. Some country, budget preset and currency preferences may be included. Fields indicating content, prompts, messages, page/source text, keys, tokens, authorization, email, phone or payment details are removed. There is no advertising tracker or session recorder in the extension. Network providers may process IP address, user agent, time and status metadata.

5. AI processing and selected providers

Before the first remote AI transmission—and after a consent version, provider or endpoint-origin change—the extension names the selected provider, model and endpoint and requires “I understand — continue.” Cancel prevents transmission. Enabled source text, page metadata, focus text and saved-idea context go directly to that endpoint. Excluded sources do not. Connection tests contain only a synthetic test instruction.

• OpenAI, Google Gemini, Anthropic Claude and OpenRouter process direct browser requests under their own terms.
• Default Ollama processing uses a service on the user's computer unless its configuration is changed.
• A custom OpenAI-compatible endpoint is controlled by the user; AlphaBuilt cannot govern its privacy, retention or training practices.

AlphaBuilt does not receive these direct prompts/source contents and does not use them to train an AlphaBuilt model.

6. Browser permissions

• activeTab: temporary current-page access after invocation.
• scripting: user-triggered page reader or comparison overlay.
• storage: local settings, key, consent, work, progress and account cache.
• sidePanel: extension interface.
• Optional identity.email: user-approved account-email fill.
• Service hosts: AlphaBuilt APIs and user-triggered HN Algolia, GitHub and GDELT discovery.
• Optional web hosts: exact active-page, public-source or configured-provider access requested at runtime. Plain HTTP is allowed only for loopback/local AI endpoints.

7. How information is used

Data is used only for requested extraction/analysis, saving and comparing work, citations, provider setup, purchase restoration, usage enforcement, optional profiles/contact consent, support, security, non-content diagnostics and feature reliability. AlphaBuilt does not sell data, share it for targeted advertising, use it for unrelated purposes or use it for lending/creditworthiness. User-started discovery sends search terms/filters to HN Algolia, GitHub or GDELT.

8. Where information is stored

• chrome.storage.local: provider settings/key, consent, IDs, analytics retry queue, account/licence cache, jobs, ideas and preferences.
• IndexedDB: saved multi-source projects, extracted source text and reports.
• AlphaBuilt servers: submitted profile/consents, account/licence/subscription status, usage/idempotency records and sanitized analytics.
• Vercel: AlphaBuilt website/API hosting and request/infrastructure metadata.
• The user-selected AI endpoint: analysis inputs/results under provider terms.

Raw uploaded files are parsed in the browser. Extracted text is sent only when enabled for analysis.

9. Retention

Local data remains until an item/project is deleted, extracted data is cleared, “Delete all local Opportunity Lens data” is used, Chrome data is cleared or the extension is uninstalled. Entitlement is treated as current for ten minutes. The local analytics retry queue is capped at 100 events and removes sent batches.

AlphaBuilt keeps account, licence, subscription, usage, profile, consent and sanitized analytics records only as reasonably needed to operate/secure the service, enforce limits, support users, meet payment/tax/legal obligations and resolve disputes. No fixed automatic server period is defined in the extension repository. Independent providers apply their own retention rules.

10. Deletion

Delete individual ideas/projects, clear project source text, or use Settings → Delete all local Opportunity Lens data to clear extension storage and its IndexedDB project store. To request server-account/profile/analytics deletion, email alphabuiltindia@gmail.com from the account email with subject “Opportunity Lens account and data deletion request.” Ownership may be verified. Legally required records may be restricted and retained. Contact independent providers separately for data they hold.

11. Third-party sharing

Relevant recipients are the selected AI provider/custom endpoint; Vercel; Razorpay; Google Chrome; HN Algolia, GitHub and GDELT for user-started discovery; and the email provider when support is contacted. Data is disclosed only for these described purposes or where law/security/corporate-transfer obligations require it.

12. Payments

Razorpay handles card, UPI and bank/payment-method details. Opportunity Lens receives only necessary checkout email, payment/subscription identifiers/status and entitlement. It does not collect full card numbers, CVV, UPI PINs or bank passwords.

13. Security

Remote endpoints use HTTPS; only loopback/local AI may use HTTP. Host access is runtime-requested, keys stay in extension-local storage and go only to the configured endpoint, sensitive analytics fields are removed, provider error bodies are not exposed, and source text is treated as untrusted evidence. Users should avoid confidential/restricted content and use limited-scope keys.

14. International processing

AlphaBuilt and providers may process data in India, the United States and other operating locations with different laws. The user chooses the remote provider and initiates transmission.

15. Children's privacy

The service is not directed to children under 13 and AlphaBuilt does not knowingly collect their personal information. Applicable provider/browser minimum ages also apply.

16. User choices and rights

Users can use local Ollama; choose enabled sources; cancel/revoke consent; change providers/endpoints; decline optional email/contact permissions; delete local data; request server deletion; and use provider-specific controls. Applicable access, correction, deletion, restriction and portability rights may also apply.

17. Changes

Dates will be updated when this policy changes. Material transmission changes will increment the consent version and require a new affirmative action.

18. Contact

AlphaBuilt India — Opportunity Lens Privacy
alphabuiltindia@gmail.com
opportunitylens.alphabuiltindia.com

This page must be deployed at https://opportunitylens.alphabuiltindia.com/privacy before Chrome Web Store resubmission.