Privacy policy

Information we handle

• Accounts and connections: your name, email address, account preferences, authentication and session records, workspace identifiers, and credentials or tokens needed to maintain connections you authorize.
• Instructions and content: messages, prompts, files, notes, workflow instructions, feedback, and results associated with your tasks.
• Browser workflows: the URLs and titles of relevant tabs, timestamps, page text and structure, images, screenshots, and browser interactions needed to carry out tasks or capture a teaching demonstration. Interactions may include clicks, scrolling, navigation, and information needed to enter text at your direction.
• Teaching recordings: recorded steps, tab changes, screenshots, and, when you enable them, microphone audio, narration, transcripts, and conversation with Merna. You can review a recording before sending it to your paired Merna service.
• Connected services: information accessed through connections you authorize, such as emails, messages, documents, contacts, and business records. When you connect an advertising service, this may include campaign settings, creatives, delivery metrics, spend, and reporting information.
• Technical information: browser and device information, IP addresses, request and feature-use timestamps, diagnostic logs, and security events used to operate and protect the service.

Content you ask Merna to work with may contain personal identifiers, personal communications, health information, financial or payment information, authentication information, or location information. These categories can appear in page content, screenshots, files, or conversations. Only provide access to information you are authorized to use.

Browser access and teaching controls

The extension connects your browser to a paired Merna service for browser work and teaching. It uses browser permissions to inspect and interact with relevant tabs, display activity indicators, and organize tabs created by Merna. The Debugger API can execute page-inspection and interaction commands supplied by the paired assistant.

Teaching starts when you choose to record. The recorder omits typed input values from its step records and attempts to mask editable or marked private fields in teaching screenshots. These protections are not comprehensive redaction of personal or sensitive information, and they do not apply to every screenshot or page-inspection method used during delegated browser work. Review recordings before sharing them.

Optional voice features require microphone permission. Audio and selected visual context may be processed by voice and AI services to support the conversation. You can stop recording or voice use and disconnect the extension. Disconnecting prevents future use of that connection; it does not automatically delete information already sent.

How we use information

We use information to provide the workflows you request or approve; understand your instructions; generate responses and work products; maintain accounts and authorized connections; review and use teaching demonstrations; troubleshoot the service; provide support; prevent abuse; and meet applicable legal obligations.

Browser and connected-service information is used for Merna's disclosed, user-facing functionality and the operation, security, and reliability of that functionality. We do not sell personal information, use browser data for personalized advertising, or use or transfer user data to determine creditworthiness or for lending purposes.

Processing and sharing

Information needed for a task may be sent to your paired Merna service and to infrastructure, storage, authentication, integration, voice, and AI service providers that support the requested functionality. Voice features may use LiveKit and the configured AI provider. The providers involved depend on the feature and service configuration.

We may also share information with a connected service when you direct an action there; with authorized workspace members according to access settings; when required by law; when necessary for security; or as part of a merger, acquisition, or sale of assets subject to applicable protections. We limit service-provider use to the purpose for which information is supplied and applicable data-protection obligations.

If you connect the extension to a locally operated or self-managed Merna service, its administrator controls the storage and providers used by that service. Websites and third-party services you choose to interact with also have their own privacy policies.

Chrome Web Store Limited Use

Merna's use and transfer of information received through the browser extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

We use extension data only to provide or improve the extension's disclosed single purpose and user-facing features. We do not transfer it for unrelated purposes or personalized advertising. Human access is limited to the exceptions allowed by that policy, such as your consent to review specific information for support, security investigations, legal obligations, or aggregated and anonymized internal operations.

Storage, retention, and deletion

Connection settings and session information are stored in the browser's extension storage. Teaching evidence is stored locally in IndexedDB until you delete the recording or clear the extension's local data. Sending a recording does not automatically delete the local copy.

Once information is sent to a paired service, it may be retained with your workspace, task history, or teaching materials. We retain service information while needed to provide the service, maintain security and audit records, resolve disputes, and meet legal obligations. Retention varies by data type. When information is no longer needed, we delete or de-identify it; backup copies may remain until overwritten.

To request access, correction, export, or deletion of information held by us, email moshikarim99@gmail.com with the email associated with your Merna account and the scope of your request. We may need to verify your identity. Never send passwords or API keys with a request. For a self-managed service, contact its administrator about its stored copies.

You can revoke access through Merna's connection controls or the connected provider's settings, delete local teaching recordings, revoke microphone access, and uninstall the extension. Removing the extension does not remove copies previously sent to a server or third-party service.

Security and international processing

We use technical and organizational safeguards designed to protect information. Remote Merna connections use encrypted transport. Local companion connections may use loopback communication on your own computer. No system can guarantee absolute security. Information may be processed outside your country by the services needed to provide Merna, subject to applicable safeguards.

Children

Merna is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can investigate and address it.

Changes and contact

We may update this policy when the service or its data handling changes. We will update the date on this page and provide additional notice when required. For privacy questions or requests, contact moshikarim99@gmail.com.