Privacy Policy

1. Introduction and Scope

Megabyte Labs ("we," "us," or "our") operates the DocuSeva Extension (the "Extension"), a Chrome browser extension designed to assist users in extracting data from web pages and integrating with the DocuSeva platform for document generation and processing services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Extension. By installing and using the DocuSeva Extension, you consent to the data practices described in this policy.

Scope of This Policy

This Privacy Policy applies to:

• The DocuSeva Extension available on the Chrome Web Store
• Data collected through the Extension's interaction with web pages
• Data transmitted to the DocuSeva platform at business.docuseva.ai

This policy does not cover:

• The separate privacy practices of third-party websites you access
• The DocuSeva web application's privacy practices (please refer to the DocuSeva web application privacy policy at business.docuseva.ai)
• Third-party websites or services not directly integrated with the Extension

2. Information We Collect

2.1 Information Collected Automatically

Authentication State: When you log in to the DocuSeva platform, the Extension stores the following information locally in your browser:

• Login status (whether you are currently authenticated)
• Your display name (as provided to DocuSeva)
• Your email address (associated with your DocuSeva account)

Authentication Cookies: The Extension reads authentication cookies from the business.docuseva.ai domain to verify your session status. These cookies are not modified, stored externally, or transmitted to any third party.

2.2 Information Extracted During Operation

When you use the Extension's data extraction features, the Extension may extract information that is visible on the web page you are currently viewing. The types of information extracted depend on the specific feature being used and the content displayed on the page. This may include personal information, contact details, address information, and other data fields relevant to the document generation services you are utilizing.

The Extension only extracts information that is already displayed to you as an authenticated user of the website you are viewing. No data is collected from pages you do not actively visit or from content that is not visible to you.

2.3 Information You Provide

To use the Extension, you must have:

• An active account with the DocuSeva platform (business.docuseva.ai)
• Access to the relevant websites or portals as needed for your intended use

Your DocuSeva account credentials and any third-party website credentials are managed separately by their respective platforms and are not stored by the Extension itself.

3. How We Use Collected Information

3.1 Primary Purpose

The information we collect is used to provide the services offered through the DocuSeva platform. Specifically:

• Authentication Data: Used to verify that you are an authorized DocuSeva user and to maintain your session while using the Extension
• Extracted Data: Transmitted to the DocuSeva backend for processing and document generation, then discarded by the Extension

3.2 Data Processing Flow

1. Local Extraction: Data is extracted from the currently displayed web page within your browser
2. Direct Transmission: The extracted data is transmitted immediately and directly to DocuSeva's secure backend
3. Service Processing: The DocuSeva platform processes the data to provide the requested services
4. No Local Retention: The Extension does not store any extracted data locally after transmission

3.3 What We Do NOT Use Data For

We do not use collected information for:

• Advertising or marketing purposes
• Selling to third parties
• Profiling or behavioral analysis
• Any purpose unrelated to the DocuSeva services you request

4. Data Sharing and Third-Party Services

4.1 DocuSeva Backend Services

Extracted data is transmitted to DocuSeva's backend services for processing:

• Purpose: Document generation and processing services
• Security: All transmissions are encrypted using HTTPS

4.2 No Other Third-Party Sharing

We do not share, sell, rent, or trade any personal information with third parties except as described above. Specifically:

• No data is shared with advertisers
• No data is shared with data brokers
• No data is shared with analytics providers
• No data is shared with any entity other than the DocuSeva backend service

4.3 Legal Disclosure

We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency), including to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Extension
• Protect the personal safety of users or the public

5. Data Storage and Security Measures

5.1 Local Storage

The only data stored locally by the Extension is your authentication state, which includes:

• Login status
• Display name
• Email address

This data is stored using Chrome's secure storage API and remains on your device. It is not synchronized across devices or uploaded to any server.

5.2 No Extracted Data Storage

The Extension does not store any extracted data. All extracted information is transmitted directly to the DocuSeva backend and is not retained by the Extension in any form, including:

• No local storage
• No browser cache
• No temporary files
• No logs containing extracted information

5.3 Backend Data Storage

Once data reaches the DocuSeva backend, it is subject to DocuSeva's data retention and security policies. Please refer to the DocuSeva platform privacy policy for details on backend data handling.

6. User Rights and Choices

6.1 Your Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data, as well as the right to restrict or object to certain processing activities. You may also have the right to withdraw consent at any time where processing is based on consent.

6.2 Exercising Your Rights

To exercise any of your data protection rights, please contact us at support@mbyte.ai. We will respond to your request within the timeframe required by applicable law.

6.3 User Controls

You have the following controls over the Extension and your data:

• Logout: You can log out of the Extension at any time, which clears your authentication state from local storage
• Uninstall: Uninstalling the Extension removes all locally stored data, including authentication state
• Disable: You can disable the Extension through Chrome's extension management to stop all Extension functionality
• Selective Use: You choose when to initiate data extraction; the Extension does not automatically collect data

6.4 Opt-Out

You may opt out of the Extension's data processing at any time by:

1. Logging out of the Extension
2. Disabling the Extension in Chrome settings
3. Uninstalling the Extension from your browser

7. Cookies and Similar Technologies

7.1 Cookie Usage

The Extension reads authentication cookies from the business.docuseva.ai domain for the sole purpose of:

• Verifying your authentication status with the DocuSeva platform
• Maintaining your session while using the Extension

7.2 Cookie Handling

The Extension:

• Does not create its own cookies
• Does not modify existing cookies
• Does not transmit cookie data to third parties
• Does not use cookies for tracking or analytics

7.3 Chrome Storage API

The Extension uses Chrome's storage API (not cookies) to store authentication state locally. This storage:

• Is isolated to the Extension
• Cannot be accessed by websites or other extensions
• Is cleared when you log out or uninstall the Extension

8. Data Retention

8.1 Authentication State

Your authentication state (login status, name, email) is retained locally until:

• You log out of the Extension, OR
• You uninstall the Extension, OR
• You clear your browser data including extension storage

8.2 Backend Retention

For information about how long the DocuSeva platform retains data after processing, please refer to the DocuSeva platform's privacy policy and data retention schedule.

9. International Data Transfers

9.1 Data Processing Locations

The DocuSeva backend services may be hosted in various locations. When you use the Extension, data may be transmitted to and processed in jurisdictions outside your country of residence.

9.2 Safeguards for International Transfers

For users in India, the European Union, or other jurisdictions with data transfer restrictions, we implement the following safeguards:

• Encryption: All data is encrypted in transit
• Security Standards: Our infrastructure maintains industry-standard security certifications
• Data Minimization: We only transfer data that is strictly necessary to provide the requested services

9.3 GDPR Considerations

For users subject to the General Data Protection Regulation (GDPR):

• The legal basis for processing is legitimate interest in providing the requested services
• You have the right to lodge a complaint with your local supervisory authority
• Standard Contractual Clauses may be available upon request

10. Security Safeguards

10.1 Technical Security Measures

We implement the following security measures to protect your data:

• Encryption: All data transmissions between the Extension and DocuSeva backend are encrypted
• Authentication Tokens: API requests include authentication tokens to ensure only authorized users can submit data
• Extension Security: The Extension follows current browser security standards and best practices
• No External Scripts: The Extension does not load or execute remote scripts
• Minimal Permissions: The Extension requests only the minimum permissions necessary for its functionality

10.2 Operational Security

• User Authentication: Users must be authenticated with the DocuSeva platform before they can use the Extension
• Website Authentication: Users must be separately authenticated with third-party websites to access data on those sites
• No Data Persistence: Extracted data is not stored by the Extension, reducing the risk of data breach at the browser level

10.3 Security Limitations

While we implement reasonable security measures, please be aware that:

• No method of electronic transmission or storage is 100% secure
• The security of your browser, device, and network is your responsibility
• You should keep your browser and operating system updated with security patches

11. User Consent Mechanism

11.1 Obtaining Consent

By installing and using the DocuSeva Extension, you:

• Acknowledge that you have read and understood this Privacy Policy
• Consent to the collection, use, and processing of data as described in this policy
• Confirm that you are authorized to access the websites and process the data you extract

11.2 Ongoing Consent

Each time you initiate a data extraction operation, you are actively consenting to the transmission of the visible data to the DocuSeva backend for that specific transaction.

11.3 Withdrawing Consent

You may withdraw your consent at any time by:

• Ceasing to use the Extension
• Logging out of the Extension
• Uninstalling the Extension
• Contacting us at support@mbyte.ai to request data deletion

Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

12. Children's Privacy

The Extension is intended for use by adult personnel in authorized capacities.

If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us immediately at support@mbyte.ai.

13. Legal Compliance

13.1 Browser Extension Store Policies

The DocuSeva Extension complies with applicable browser extension store developer program policies, including:

• Clear disclosure of data collection practices
• Requesting only necessary permissions
• Providing this privacy policy as required
• Not engaging in deceptive or misleading practices

13.2 Indian Data Protection Laws

We comply with applicable Indian data protection regulations, including:

• Information Technology Act, 2000: We implement reasonable security practices and procedures as required under Section 43A and the associated IT Rules
• Digital Personal Data Protection Act (DPDPA): We process data in accordance with the principles of lawful processing, purpose limitation, and data minimization

13.3 General Data Protection Regulation (GDPR)

For users in the European Economic Area, we process personal data in accordance with GDPR requirements, including:

• Lawful basis for processing (legitimate interest)
• Data subject rights (access, rectification, erasure, portability)
• Data protection by design and by default
• Appropriate safeguards for international transfers

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

14.1 Notification of Changes

When we make changes to this Privacy Policy:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we may provide additional notice through the Extension or via email to registered DocuSeva users
• The updated policy will be made available at the same URL

14.2 Continued Use

Your continued use of the Extension after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you should discontinue use of the Extension and uninstall it from your browser.

14.3 Review Recommendation

We encourage you to periodically review this Privacy Policy to stay informed about how we collect, use, and protect your information.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15.1 Response Time

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters, please indicate "URGENT" in your email subject line.

15.2 Grievance Officer (for Indian Users)

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are provided above. The Grievance Officer can be contacted for any complaints or grievances pertaining to processing of information.

15.3 Supervisory Authority

If you are located in the European Economic Area and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.