Nexpath Browser Extension — Privacy Policy

This Privacy Policy explains how ParseOS ("we", "us") handles information in connection with the Nexpath browser extension and the Nexpath service at parseos.tech. Nexpath is an AI coding assistant: it reviews a prompt as you send it to an AI coding agent and offers a stronger version before it goes.

The extension runs only on the supported sites: Replit, Lovable, and Bolt.new. Nexpath is an independent tool and is not affiliated with, endorsed by, or sponsored by any of them.

1. Information We Collect

Information you provide directly.

• Prompt text — the message you submit to the AI coding agent. Nexpath reads the prompt you send; it does not read the rest of the page, your files, or your screen.
• Your credential — the OpenAI API key or Nexpath token you enter yourself on the extension's options page.
• Your settings — such as suggestion frequency and your selected role.
• Account information — if you create a Nexpath account, the email address you register with. Payments for Pro are processed by PayPal.

Information collected automatically.

• Service usage data — when a request is handled by the Nexpath service, we record technical usage metadata such as token counts, timestamps, and which model answered, together with a recent record of the requests handled for your account.
• Standard technical and connection data — like most online services, our servers automatically receive and retain routine technical information associated with your account when you sign in, of the kind every web server receives as part of delivering a request. This is used to operate, secure and improve the service.
• Usage signals — the extension keeps a local, content-free record of which popup buttons you press and when. See section 4.

2. How We Use Information

• To generate prompt suggestions — the core function of the product.
• To operate your account, apply your plan credit, and process Pro payments.
• To keep the service secure and reliable, including preventing abuse and automated signups.
• To understand how the product is used in aggregate and improve it.

We do not use your information for advertising, and we do not sell it.

3. How Information Is Shared

• OpenAI — to generate the suggestion. With your own key this happens under your own OpenAI account; in token mode our service forwards the request on your behalf. Their handling is governed by OpenAI's privacy policy.
• PayPal — processes Pro payments. PayPal never receives your prompts.
• With your own OpenAI key, no one else. ParseOS does not receive, store, sell, or share your prompts, your API key, or your settings.

4. Usage Signals and the Rating Prompt

• Usage signals stay on your machine until you choose to send them. Nexpath keeps a local, content-free record of which popup buttons you press and when — a fixed list of action names and timestamps. It never records prompt text, the text of an option, which site you are on, or your project path.
• Only the rating prompt sends, and only when you answer it. Choosing a rating sends a random installation ID (not tied to you or your machine), your 1–4 rating, and the timestamps above.
• If you dismiss the prompt, one line goes out saying just that — the installation ID and the time, so we can tell "asked and declined" from "never asked". The local signals stay on your machine; only answering releases them.
• Your prompt text is never part of any of this.

5. What Nexpath Does Not Do

• No tracking network, no ads, no remote code.
• No advertising or third-party tracking scripts of any kind.
• No selling or transferring of your data to anyone.
• No use of your data for anything unrelated to running and improving Nexpath.
• No running on websites other than the three supported AI coding sites.

6. Data Retention

• With your own OpenAI key, prompt context is processed transiently and ParseOS retains nothing — we never receive it.
• In token mode, the service retains your account information, payment records, usage metadata visible on your account page, routine technical data associated with your account, and a recent record of the requests it handled for you — limited in number and pruned as newer ones arrive. Recognised credentials are removed before anything is written.
• Your credential, settings, and recent prompt history stay in your browser until you remove the extension or clear them.

7. Your Choices

• View, change, or delete your API key or Nexpath token and settings at any time on the options page.
• Turn Nexpath off for an individual project directly from the popup.
• Adjust how often suggestions appear, or switch them off entirely.
• Uninstalling the extension removes the data Nexpath stored locally.
• To access or delete your account information, contact us at the address in section 11.

8. Permissions and Why They Are Needed

• storage — save your API key or Nexpath token and preferences locally.
• tabs — show the suggestion panel on the correct agent tab, and reload an already-open agent tab on install or update so the extension activates without a manual refresh.
• Site access (Replit, Lovable, Bolt.new) — Nexpath only works on these AI coding sites and runs nowhere else.
• Service access (parseos.tech) — contacted only in token mode, to generate your suggestion through Nexpath's own service. Never contacted when you use your own OpenAI key.

9. Security

Traffic to the Nexpath service is encrypted in transit. Account tokens are stored only as hashes, so a copy of our database cannot be used to act as you, and passwords are stored using a purpose-built password hash. No method of transmission or storage is completely secure, but we take reasonable measures appropriate to the data involved.

10. Children's Privacy

Nexpath is a developer tool and is not directed at children under 13.

11. Changes to This Policy and Contact

If this policy changes, the updated version will be published at this same address with a new "last updated" date. Questions about this policy: pyemptyops@gmail.com