Privacy Policy | Klime AI Companion

1. Who we are / controller

Product: Klime AI Companion (the name shown in the extension stores, on the Dodo Payments checkout page and on receipts)
Publisher / operator: Fitz.apps / FitzTools
Privacy & support contact: [email protected]
Website: https://klime-ai.com

For questions about this Policy, data access, deletion requests, or privacy complaints, email us at the address above. We aim to respond within a reasonable period.

By using the Site or installing Klime, you acknowledge this Policy. If you do not agree, please do not use the Site or the Extension.

2. Scope

This Policy applies to information processed when you:

visit or browse the Site;
install, enable, or use Klime AI Companion;
subscribe to, restore, or manage a Klime subscription;
contact us by email;
interact with Klime's listings on the Chrome Web Store, Microsoft Edge Add-ons, or Firefox Add-ons.

This Policy does not control how Google, Microsoft, or Mozilla process data as operators of their browsers, extension stores, or accounts. Their own policies apply separately.

3. Information we collect

3.1 Information you provide

Email and message content when you contact us (for example, support requests).
Content you choose to save locally inside Klime, such as notes, saved pages, and preferences.
The email address you enter when you ask to restore a purchase (see 3.4).

3.2 Information collected automatically on the Site

The Site is a static marketing site. We do not require accounts or logins on klime-ai.com. Standard web technologies and service providers may process:

Technical / server logs (for example IP address, date/time, requested URL, user-agent, referrer) through our hosting and CDN/DNS providers.
Language preference stored in your browser via localStorage, so the Site can remember the language you selected.
Website analytics (Google Analytics 4). We use Google Analytics, provided by Google LLC, to understand how visitors use the Site: pages viewed, approximate location (country/city, derived from IP address; Google Analytics does not log or store full IP addresses), device and browser type, referrer, language, and clicks on store buttons such as "Add to Chrome" and on the "Open Klime AI" button of the welcome page. Google Analytics sets first-party cookies (_ga, _ga_*) and uses a pseudonymous identifier. We do not send names, email addresses, or other directly identifying information to Google Analytics, we have turned off Google signals and ad personalization, and we do not use Google Analytics data for advertising. Analytics data is kept for 14 months. In the EEA, the United Kingdom, and Switzerland, analytics cookies are used only after you accept them in the cookie banner; you can change your choice at any time with Cookie settings in the Site footer. Learn more at How Google uses information from sites that use its services.

Installed-extension check on the Site. When Klime is installed, it marks pages on klime-ai.com so the welcome page can show "Installed" and open the side panel when you click "Open Klime AI". This happens only in your browser; Klime does not send any data to the Site for it.

The Site does not load advertising pixels and does not show ads. Analytics on the Site is separate from Klime AI Companion: the Extension does not use Google Analytics and does not track what you do in your browser (see 3.3 and 3.5).

3.3 Information processed by Klime

Klime AI Companion is a side-panel companion that answers questions about the webpage you are looking at, drafts emails you ask it to write, and generates images from a prompt you submit. Klime only accesses data needed to provide the feature you request. Permissions are declared on each store listing and shown by your browser at install/update time. It processes the following:

Settings and on-device history (local). Theme, language, response style, page-context toggles, onboarding state, a short-lived "checkout pending" flag while a checkout tab is open, a single daily free-tier AI request counter (shared across chat, summaries, YouTube, email assist, and images), recent conversation titles and messages, and similar UI flags are stored in the browser's extension storage (chrome.storage.local, chrome.storage.sync for the install_id and the daily counter only, and short-lived pending selection/prompt state in chrome.storage.session) until you clear data, use in-product reset, or uninstall. In this Policy, references to chrome.storage mean the browser's extension storage APIs, including the equivalent WebExtension storage in Firefox.

Side panel and sidebar. In Chrome and Microsoft Edge, Klime opens in the browser's side panel. In Firefox, Klime opens in the browser sidebar. Where this Policy says "side panel", it also means the Firefox sidebar; the same local and remote data practices apply in every supported browser.

Current-page context (on device first). When the side panel is open, or when you use the "Ask AI" context menu, Klime may read the active tab's title, URL, headings, visible text excerpt, and selected text in your browser. This uses scripting plus host access to http://*/* and https://*/* so the companion can understand ordinary webpages you choose to view. It does not run on browser-internal pages (for example chrome://) and does not collect your browsing history as a list.

AI chat (remote, user-initiated only). When you send a message or use a quick action (Summarize, Explain, Rewrite, Extract, Ask AI), the prompt, recent chat turns, and, if those settings are on, the page excerpt and selected text are sent from your browser to our AI proxy server (operated by FitzTools with a cloud hosting provider), which forwards the request to OpenRouter (model: typically OpenAI GPT-4o mini or a successor we configure) solely to generate the reply. We do not use these requests or your prompts for advertising. Content is processed transiently for the requested answer and is not sold. OpenRouter and the model provider that handles a request may apply their own terms and policies to that request.

Klime Agent (user-initiated only). Klime Agent performs a browser task that you type and start, such as finding information across pages or filling in a form with details you provide. While a task runs, Klime reads the current tab's title, URL, a list of its buttons, links and form fields (their labels and the values already shown, never the contents of password or payment fields) and a visible-text excerpt, and sends that, your task, the steps taken so far and the titles of tabs in the same window to our AI proxy server, which forwards it to OpenRouter to decide the next step. The steps themselves (clicking, typing the text the task needs, choosing options, scrolling, opening, switching or going back in tabs) are carried out in your browser by code that ships inside the Extension; the AI only returns the next step as data. Klime shows every step in the side panel and an indicator with a Stop button on the page, asks for your confirmation before an action that submits a form, sends a message, publishes, buys, books, subscribes, deletes or changes account settings, never types passwords, payment card, bank or ID numbers, and does not try to solve CAPTCHAs. You can stop a task at any time. Task steps are not stored as a browsing history, and each task counts as one AI request on the free tier.

Email drafts (user-initiated only). On Gmail, Klime can show a reply control. It does not use the Gmail API and does not sign in to your Google Account. It does not list or download your inbox. When you choose a reply on that control, switch to Reply for the open message, or press "Use this page", Klime reads in your browser the open message's text, sender, and subject, or text you select or paste. A ready-made reply from the Gmail control sends that text immediately so the draft can be written. Otherwise the text stays on the device until you press generate. The handoff into the side panel uses chrome.storage.session and is removed as soon as the panel reads it. Email bodies are not stored in chrome.storage.local. When you generate, regenerate, or refine, the message, sender, subject, and your instructions go to the same Klime proxy and OpenRouter path as chat, only to produce the draft. If you insert the draft, Klime writes it into the compose field. It never clicks Send and never sends the email.

Image generation (user-initiated only). When you ask Klime to create or edit an image, the prompt, recent image requests from that chat, and any reference image you attach are sent from your browser to the same AI proxy server. The proxy forwards them to the configured image model through OpenRouter and returns the image to your browser. A copy may remain in on-device chat history until you clear history or uninstall. We do not use these requests for advertising, and we do not sell them.

Optional voice input (user-initiated only). If you tap the microphone button, the browser may ask for microphone access in a helper tab (side panels cannot show that system prompt). Speech is converted to text by the browser's built-in speech recognition (the Web Speech API). In Chrome and Microsoft Edge this recognition may be performed by the browser vendor's online speech service (for example Google in Chrome), under that vendor's privacy policy. Klime receives only the resulting text, and that text is sent to our API only when you send a message. Klime does not record audio and does not upload audio to FitzTools servers. Voice input is available only in browsers that support the Web Speech API (typically Chrome and Microsoft Edge); it is not available in Firefox.

User activity (local only). To run the features you choose, Klime responds in your browser to your own interactions with Klime controls: the toolbar icon and keyboard shortcut, the on-page launcher, the Gmail reply control, the Ask AI context-menu item, buttons inside the side panel, and the microphone button. It also uses the text you select when you ask about a selection. These interactions are handled on your device only to show Klime's controls and perform the action you requested. Klime does not log them, does not store them as an activity or browsing history, does not monitor general clicks, scrolling, mouse movement, or typing on websites, and does not send them to FitzTools or third parties; only the content of a request you choose to send leaves your browser, as described in this section.

Browser permissions. In Chrome and Microsoft Edge, Klime requests sidePanel, storage, activeTab, scripting, contextMenus, and tabs, plus host access to http://*/* and https://*/*. Firefox has no sidePanel permission: there, Klime uses the browser sidebar (sidebar_action) together with the closest equivalent permissions, with the same local and remote data practices. The tabs permission is used only to locate the active tab for page context, refresh context while the panel is open, open user-requested links (Privacy Policy, Terms, review page), and open/focus the optional microphone permission helper tab, and, during a Klime Agent task you start, open, switch or navigate tabs in the current window — not to monitor browsing history in the background. The scripting permission is used to read page context and, during a Klime Agent task, to show the on-page indicator and carry out the clicks and typing that task needs.

On-device notes and page memory (local). Pages and notes you choose to save stay in chrome.storage.local on that device. They are added to a later question about the same site only when you ask. They are not a cloud account and are removed if you clear extension data or uninstall.

YouTube summaries (user-initiated only). On YouTube watch pages, Klime shows its own "YouTube summary" box next to the video, and you can also ask from the side panel. When you ask Klime to summarize or transcribe a video, Klime sends the video id, your preferred language and the video length to our transcript server, which fetches the transcript on the server. If the server cannot find it that way, Klime makes a second request that also includes the addresses and language codes of the caption tracks YouTube lists on that page. Klime does not read the transcript text from the page itself and does not upload the video or audio file. The transcript text is used only for the summary or answer you requested and is included in the chat request to the Klime proxy above. A YouTube summary counts as the daily free-tier AI request.

3.4 Install identifier, subscriptions and billing

Install identifier (local and billing). On first use Klime creates a random UUID (install_id) with crypto.randomUUID() and stores it in chrome.storage.local. There is no Klime account and no password. This id is how the billing server knows which browser installation a subscription belongs to. It is sent only to our billing service when you open checkout, check subscription status (including the automatic check every few seconds while a checkout tab you opened is waiting for payment, for up to 30 minutes), or ask to restore a purchase. A copy of the install_id and the daily free-tier counter is also kept in chrome.storage.sync, so if Chrome sync is on, reinstalling Klime in the same Chrome profile restores the same id and counter (Chrome sync is operated by Google). Without sync, clearing extension data or uninstalling creates a new id on the next install. Neither cancels a paid subscription.

Subscriptions and payments. On the free tier, Klime includes one shared AI request per calendar day across chat, page summaries, YouTube summaries, email assist, image generation and Klime Agent tasks. Any completed AI action counts as that daily request. You receive the full result for your first AI action each day; starting another AI action the same day requires a subscription. The counter resets each day. Plans shown in the Extension, in USD, are Weekly $4.99 after a 3-day free trial (a payment method is required to start the trial), Monthly $9.99, and Yearly $39.99. Checkout is hosted by Dodo Payments and shows the seller name "Klime AI Companion"; receipts from Dodo use the same name. Klime opens that checkout page in a new tab and sends only the selected plan and your install_id to our billing server. Card numbers, CVC codes, and full payment credentials are entered on Dodo's page. They are not collected by the Extension and are not stored by FitzTools.

Billing records (our server). When you start checkout or when Dodo notifies us that a subscription changed, we store on that billing server the install_id, Dodo customer id, the email and name you entered at checkout, subscription id, product id, plan, status, current period end, and webhook delivery ids. We keep these records to decide whether that installation has an active subscription, to prevent duplicate webhook processing, and to support restore and billing disputes. A typed email alone does not turn Pro on. Pro is set only after Dodo reports an entitled subscription and our server links it to the install_id. Changing extension storage on the device does not grant Pro.

Restore. If you type the email used at checkout, we look up a real Dodo subscription for that email. If one is entitled, Dodo emails a customer-portal link. The subscription is attached to this browser only after that check succeeds. The email is not saved in the Extension.

3.5 What Klime does not do

Klime does not connect to the Gmail API or your Google Account, does not list or download your mailbox, and does not access calendars or passwords. The email assistant never sends email. Klime does not act on websites on its own: Klime Agent clicks, types or opens pages only during a task you start, shows each step, and asks for your confirmation before submitting, sending, buying or deleting. It does not record, store, or transmit your clicks, scrolling, mouse movements, or keystrokes, and it does not build an activity history; see User activity in section 3.3 for the limited, local interaction handling Klime needs to work. No model API key, Dodo API key, or webhook secret is stored in the Extension. Page content is transmitted to the AI proxy only when you ask. An open email is read and sent only when you ask for a draft, as described above. An image prompt is sent only when you ask to create or edit an image. Dodo's practices are described at dodopayments.com. OpenRouter's practices are described in its own privacy policy at openrouter.ai/privacy.

We do not sell personal data. We do not use Extension page content to build advertising profiles for third-party ad networks.

4. How we use information

to operate, maintain, and improve the Site and Klime;
to provide features you request (summarize pages or YouTube videos, explain, translate, store preferences, draft an email, generate an image, use voice input, or run a Klime Agent task);
to grant, restore, and remove subscription access;
to respond to support and product inquiries;
to protect security, prevent abuse, and comply with law.

5. Legal bases (where applicable)

If you are in the EEA/UK or a similar jurisdiction, we process personal data where appropriate on bases such as: performance of a contract / requested service; legitimate interests (Site and service security, abuse prevention, product improvement); consent (where required, for example microphone access and Site analytics cookies); and legal obligations (for example accounting).

We may share information with:

Service providers that help us run the Site, such as hosting and CDN/DNS providers (Cloudflare);
Google as our Site analytics provider (Google Analytics 4), as described in 3.2;
our cloud hosting provider, which hosts our Klime AI proxy, transcript and billing servers;
OpenRouter and the AI model providers it routes to, when you use AI features;
Dodo Payments when you subscribe — Dodo is the merchant of record for the checkout, charges, invoices, taxes, and the customer portal. We send Dodo the selected product and install_id as checkout metadata. Dodo sends us subscription and customer events so we can grant or remove access;
Google, Microsoft, and Mozilla as operators of the browsers and extension stores where Klime is distributed (installs, reviews, policy enforcement);
authorities or other parties when required by law, legal process, or to protect rights, safety, and security;
a successor entity if we undergo a merger, acquisition, or asset transfer (with appropriate notice where required).

We do not sell your personal information for money.

7. International transfers

Our providers may process data in the United States or other countries. Where required, we rely on appropriate transfer mechanisms made available by those providers (for example standard contractual clauses) or other lawful grounds.

8. Retention

Extension local storage remains on your device until you clear it, uninstall Klime, or use in-product reset/clear options.
AI proxy requests are processed transiently for the user-requested action; we do not maintain a long-term database of your prompts, page content, email text, image prompts, reference images, or summaries on FitzTools servers.
Klime billing records (install id, Dodo customer and subscription status, checkout session ids, and webhook ids) are kept for as long as needed to provide access, prevent abuse, and meet accounting or dispute obligations. You may email us to ask about deletion. Deleting local extension data or uninstalling Klime does not automatically delete the server record and does not cancel a paid subscription.
Support emails are retained as needed to resolve requests and for legitimate records.
Server logs are retained according to our hosting and CDN providers' practices.
Site analytics data in Google Analytics is retained for 14 months, then deleted automatically.

9. Security

We use reasonable technical and organizational measures appropriate to a small software publisher (HTTPS for the Site, least-privilege permissions for the Extension, no API keys or secrets stored in the Extension, limited access to the support inbox and billing records). No method of transmission or storage is 100% secure.

10. Your choices and rights

Uninstall Klime at any time from your browser's extensions page. Uninstalling Klime AI Companion does not cancel a Dodo Payments subscription; cancel that subscription in the Dodo receipt or customer portal.
Clear Klime's conversation history and saved notes with in-product options, or clear extension data.
Turn page-context settings off, and allow or block microphone access in your browser.
Clear the Site's localStorage in your browser to reset the remembered language.
Accept or decline Site analytics cookies with Cookie settings in the Site footer (EEA, UK, Switzerland), block cookies in your browser, or install the Google Analytics Opt-out Browser Add-on.
Request access, correction, deletion, or restriction of personal data we hold about you (for example support emails or billing records) by contacting [email protected].

Depending on your location (EEA/UK/California/other), you may have additional rights (access, deletion, portability, objection, appeal). We will not discriminate against you for exercising privacy rights. If we cannot verify a request, we may ask for limited additional information, such as the email used at checkout.

11. Children's privacy

The Site and Klime are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child provided personal data, contact us and we will take appropriate steps to delete it.

12. Third-party sites and services

The Site and Klime may link to or integrate with third-party services (extension stores, Dodo Payments, OpenRouter and AI providers, Google Analytics on the Site, YouTube, Gmail, and the websites you visit). Their privacy practices are governed by their own policies. We are not responsible for third-party practices.

13. Store single purpose, permissions & Limited Use

Klime is designed for the single purpose disclosed in its store listings: an AI companion in the browser side panel for the page you are viewing. We request only permissions needed for disclosed functionality. If permissions or data practices change materially, we will update the listings and this Policy as required.

Our use of information received from browser APIs and permissions adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements, and to the equivalent policies of Microsoft Edge Add-ons and Firefox Add-ons. We do not use browser user data for advertising, sell it, or transfer it to data brokers. We use it only to provide and improve the user-requested features described in this Policy.

For Klime AI Companion, the Chrome Web Store privacy practices declare Website content (the page you are viewing: title, URL, headings, visible text excerpt, and selected text, and, if you ask, a YouTube transcript fetched for that video), Personal communications (the text, sender, and subject of an email you ask Klime to answer or improve, text you paste for a draft, and the draft returned to you), and User activity (your own interactions with Klime controls, such as clicking the Klime icon, the on-page launcher, the Gmail reply control or Ask AI, and the text you select for a request). User activity is processed locally in the browser only to respond to the Klime control you used and is not logged, stored as history, or transmitted. Website content is read locally only while the side panel is open, when you use Ask AI, or while a Klime Agent task you started is running, and is transmitted to our AI proxy and OpenRouter only when you send a message, use a quick action, or run a Klime Agent task (for the agent this includes the labels of the page's buttons, links and form fields). Klime Agent's clicks and typing are performed in your browser only for the task you started and are not logged or stored as history. Personal communications are read in the browser only when you request an email draft and are transmitted to the same proxy only to write that draft. They are not saved as a mailbox in the Extension. Image prompts and any reference image you attach are sent to the Klime proxy's image endpoint only when you ask to generate or edit an image. Optional voice input uses the microphone only when you tap the mic button; speech is turned into text by the browser's own speech recognition, and Klime does not record or upload audio to FitzTools. A random install id and subscription status are used only to bill and unlock the features you choose. Payment card data is collected by Dodo Payments on their checkout page, not by the Extension. Klime does not connect to the Gmail API, does not list or download your mailbox, does not send email, does not log, store, or transmit your clicks, scrolling, mouse movements, or keystrokes (User activity is handled locally only to run the Klime control you used), does not collect browsing history as a list, does not access calendars, passwords, or your Google Account, and does not store an API key in the Extension. We do not use this data for advertising, do not sell it, and do not use it to train generalized ML models.

14. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top will change when we publish revisions. Continued use of the Site or Klime after an update means you accept the revised Policy, except where consent is required by law.

15. Language

The Site interface is available in several languages. This Policy is published in English, and the English version controls.

16. Contact

Privacy requests: [email protected]

Site: https://klime-ai.com