← Back

Privacy Policy

Last updated: 9 July 2026

This policy explains what data the OpenRent AI Reply Assistant Chrome extension and its supporting services read, transmit, and store, and the choices you have. The service is operated by [LEGAL ENTITY NAME, registered address] ("we", "us"). Contact: [support@example.com].

1. What the extension reads

When — and only when — you click the "✦ Draft AI Reply" button on an OpenRent page, the extension reads the visible text of that page (or just the text you have selected). This enquiry text may contain personal data about prospective tenants: names, contact details, employment and income information, benefits status, and family circumstances. The extension does not read any other tabs, browsing history, cookies, or account credentials, and it never sends anything without your click.

2. Where that text is sent

Plan	Data flow
Bring Your Own Key (Tier A)	The enquiry text is sent from your browser directly to Anthropic (api.anthropic.com) using your own API key. It does not pass through our servers. Anthropic's handling is governed by its own privacy policy; Anthropic does not train models on API data by default.
Managed (Tier B)	The enquiry text is sent to our backend service (hosted on Cloudflare Workers), which forwards it to Anthropic using our API key and returns the draft. We do not store the enquiry text or the draft — it exists on our service only for the duration of the request/response cycle.

3. What we store

• Account data — your email address (from Stripe checkout), a hashed license key, and your subscription status. Needed to provide the license service.
• Usage metadata (Managed plan only) — a per-draft record containing a timestamp, the model used, and token counts. This is how we meter your monthly quota and monitor costs. It contains no enquiry text and no draft text.
• Payment data — handled entirely by Stripe. We never see or store card numbers. See Stripe's privacy policy.
• Local extension settings — your API key (BYO plan), license key, model choice, and custom prompt are stored in Chrome's local extension storage on your device only.

4. Retention

• Enquiry text and drafts: not retained beyond the request/response cycle.
• Transient service logs (for abuse and error monitoring): retained up to [30 days], then deleted.
• Account and usage metadata: retained while your license is active and for up to [6 years] afterwards where required for tax/accounting records.

5. Legal bases (UK GDPR)

We process account and usage data to perform our contract with you. Transient processing of enquiry text happens at your instruction each time you request a draft. Because enquiry text can include information about benefits or family circumstances, we minimise processing: we don't store it, don't use it for training, and don't share it with anyone other than Anthropic as processor for generating your draft. You remain the data controller for tenant personal data in your enquiries — ensure your own privacy notices to applicants cover the tools you use to manage enquiries.

6. Your rights

You can request access to, correction of, or deletion of the data we hold about you (email, license, usage metadata) by emailing [support@example.com]. We respond within one month. You can also complain to the ICO (ico.org.uk).

7. Sub-processors

• Anthropic, PBC — AI draft generation.
• Stripe, Inc. — payments and billing.
• Cloudflare, Inc. — backend hosting (Workers) and this website.
• Neon, Inc. — database hosting (account and usage metadata).

8. Changes

We'll post any changes to this page and update the date above. Material changes will be announced in the extension's listing notes.