Privacy Policy

This Privacy Policy explains how OOFmode (“OOFmode,” “we,” “us”) collects, uses, and protects your information when you use the OOFmode website, applications, browser extension, and related services (the “Service”). We have written it in plain language on purpose. By using the Service you agree to this Policy and to our Terms of Service.

The short version: we do not sell your data, we collect only what we need to run the Service, and you can delete your account at any time.

We collect the following categories of information:

• Account information. Your email address and authentication credentials, managed through our authentication provider (Supabase). We do not see or store your raw password.
• Content you submit. The text you paste or type into the tools (“Input”) and the content the Service generates for you (“Output”). This is processed to provide the Service and may be transmitted to our AI model providers to generate your results.
• Subscription and billing data. If you subscribe, our payment processor (PayPal) handles your payment. We receive a subscription status and a transaction identifier; we never receive or store your full card or bank details.
• Usage analytics. Aggregate, mostly de-identified data about how the Service is used — such as which tools are run, generation counts, feature interactions, and basic device/browser information — so we can fix bugs and improve the product.
• Support and feedback. Messages you send us, problem reports, and tool-level feedback you choose to submit.

We use your information to: (a) provide, maintain, and secure the Service; (b) generate the Output you request; (c) authenticate you and manage your account and subscription; (d) enforce usage limits and prevent abuse; (e) understand and improve how the Service is used; (f) respond to your support requests; and (g) comply with legal obligations. We process your data on the legal bases of performing our contract with you, our legitimate interest in operating and improving the Service, and your consent where required.

To generate Output, your Input is sent to third-party AI model providers. These providers process the content to return a result. We minimize what we retain and do not use your private Input to publicly train models on your behalf. Because AI processing involves third parties, you should avoid pasting passwords, secrets, payment data, or sensitive personal information about yourself or others into any tool.

We do not sell, rent, or trade your personal information to third parties, and we do not share it for third-party advertising. We share data only with the service providers needed to operate OOFmode (described below), when you direct us to, or when required by law.

We rely on a small number of trusted processors who handle data only to provide services to us:

• Supabase — authentication and database hosting.
• AI model providers — generating Output from your Input.
• PayPal — subscription billing and payment processing.
• Email/delivery and analytics tooling — sending transactional or support messages and measuring product usage.

These providers are bound by their own privacy and security commitments and may only process data on our instructions.

We use cookies and similar technologies (including browser local storage) that are necessary to keep you logged in, remember your session, and operate the Service. We may also use limited analytics cookies to understand usage. You can control cookies through your browser settings, but disabling essential cookies may break core functionality such as login.

Our optional Chrome extension analyzes email content you choose to scan, in your browser, and sends the relevant text to the Service for analysis in the same way the web app does. It accesses page content only when you invoke it and only for the purpose of returning an analysis. It does not run a background harvest of your inbox.

The Vault is an optional feature for storing work records you choose to keep — emails, notes about conversations, achievements, and performance-plan documents. Because it holds material people save specifically because it is sensitive, it works differently from the rest of the Service and we want to be precise about how.

• Encryption at rest. Entry contents and email metadata (sender, recipients, subject) are encrypted with AES-256-GCM before they are written to our database, using a key held in our server environment. The database stores ciphertext. We hold the key, which means this is encryption at rest and not end-to-end encryption — we could technically decrypt your entries, and we are not claiming otherwise.
• Entry titles and tags are not encrypted. They are stored in plain text so the Vault can be listed and searched. The interface tells you this at the point you type a title.
• AI features send selected text to our AI provider. Features such as Confirm in Writing, the Wins Log improver, the Promotion Case builder and PIP Mode send the specific text you are working on to our AI provider (currently Groq, with NVIDIA NIM as a fallback) to generate a result. You are shown a notice before using these. We do not use your Vault contents to train models, and we do not share them for that purpose. Our providers’ own retention and training practices are governed by their terms, not ours.
• Tamper-evidence. Each entry is linked into a per-account hash chain so that alterations are detectable. This demonstrates that records are internally consistent since the date each was saved. It does not prove the events described happened, and it is not a statement about how any court or employer would treat the record.
• Retention and deletion. Vault entries are kept until you remove them. “Erase permanently” destroys an entry’s content irreversibly, and “Erase everything” does so for every entry; the entries remain as content-free links so the chain still verifies. Deleting your account removes your Vault entirely. Erasure and export both work regardless of whether your subscription is active.
• Export. You can download everything in your Vault at any time as a PDF or as JSON, which covers access and portability requests without needing to contact us.

We retain account information for as long as your account is active. Inputs and Outputs are retained only as long as needed to provide and improve the Service, after which they are deleted or de-identified. Billing records are retained as required for tax, accounting, and legal compliance. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is legally required.

We use reasonable technical and organizational measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. Please keep your account credentials confidential.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can update your account details or delete your account from your account settings, or contact us to exercise any of these rights. We will not discriminate against you for exercising them. If you are in the EEA, UK, or a U.S. state with privacy legislation, those laws’ specific rights apply to you.

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will delete it.

OOFmode and its providers may process your data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers. By using the Service, you understand your data may be processed in those locations.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance.

For privacy questions or to exercise your rights, contact us at varunpatwaipf@gmail.com.