Legal

Privacy Policy

Last updated: April 26, 2026

Who We Are

Wilee is a Chrome extension operated by Algomittens LLC ("we", "us", "our"). You can reach us here.

Single Purpose

Wilee's single purpose is to let you control your browser using one-handed mouse gestures. It places a radial menu under your cursor when you hold a mouse button, and fires browser actions — copy, paste, tab management, navigation, and more — when you flick in a direction. Wilee does not monitor your browsing activity, read page content, or observe what you type.

1. What Data We Collect

Wilee collects only what is necessary to provide the service:

• Gesture configuration: Your chosen layout, trigger button, hold threshold, assigned actions, automations, and site-specific rules. Stored in chrome.storage.sync (synced across your Chrome devices) and chrome.storage.local. Never sent to our servers.
• Install ID: A randomly generated identifier (UUID) stored locally. Used to associate your device with a Pro subscription if you upgrade, and to enforce the AI actions monthly quota. Not linked to your identity.
• AI action text (Pro): When you use an AI action, the selected text (10–500 characters) is sent to our server (wilee-api.vercel.app), which forwards it to OpenAI's API for processing. We do not store the text after the response is returned. See Section 4 for details.
• Subscription data: If you upgrade to a paid plan, Stripe processes your payment. We store your install ID and subscription status via Stripe — never your card number or payment details.
• Feature usage counters: Anonymous counts of how often features are used (e.g. "menu opened 42 times", "copy action used 15 times"). Stored locally in chrome.storage.local. Never sent to our servers.
• Motor-limitation flag: A boolean indicating you self-attested a motor limitation and qualify for free Pro access. Stored locally only. No documentation is collected.

2. How We Use Your Data

• Gesture configuration is used to render your menu, fire the correct actions, and apply per-site overrides. Synced across your Chrome devices via Chrome's built-in sync.
• Install ID is used to verify your Pro subscription status and to enforce the AI actions monthly quota.
• AI action text is used to generate an AI response via OpenAI. The text is forwarded in real time and not stored after the response is returned.
• Subscription data is used to determine which features are active for your install.
• Feature usage counters are used only to display usage statistics in the Extension's settings page. They are never transmitted.
• Motor-limitation flag is used to grant Pro access without charging you.

3. How We Handle Your Data

• Encryption in transit: All data between the Extension and our servers uses HTTPS (TLS 1.2+).
• Local-first architecture: Your gesture config, automations, site rules, and usage counters are stored in your browser's local and sync storage. Free-tier users have no server-side data at all.
• Minimal server-side data: Our server processes AI action requests in real time. It does not persist the text. Stripe stores subscription status keyed to your install ID.
• No third-party analytics or tracking: Wilee contains no analytics libraries, tracking pixels, crash reporters, or fingerprinting code. Feature usage counters are local-only.

No method of storage or transmission is perfectly secure. We use reasonable measures to protect your data but cannot guarantee absolute security.

4. AI Actions

When you use an AI action (Summarize, Explain, Translate, Fix grammar), the selected text is sent from the Extension to our server at wilee-api.vercel.app, which forwards it to OpenAI's GPT-4o-mini API. The server acts as a proxy — it adds our API key, enforces rate limits, and returns the response. We do not log, store, or retain the text or the AI response after the request completes. Your use of this feature is also subject to OpenAI's Privacy Policy.

5. Where Data Is Stored

• On your device: Gesture configuration, automations, site rules, usage counters, install ID, and cached Pro status are stored in chrome.storage.local and chrome.storage.sync.
• Vercel (US-hosted): AI action requests are processed in real time on Vercel Functions. No data is persisted. Rate-limit counters (keyed to install ID, not personally identifiable) are stored in Upstash Redis with automatic expiry.
• Stripe: Payment method details and billing history are stored by Stripe. We do not have access to your full card number.

6. Who We Share Data With

We do not sell, rent, or share your data with third parties for advertising or marketing. Data is shared only with the following service providers, solely to operate Wilee:

• OpenAI — processes AI action text. Text is forwarded in real time and not retained by us. OpenAI Privacy Policy.
• Stripe — payment processing for Pro subscriptions. Stripe Privacy Policy.
• Vercel — hosts our API functions. Vercel Privacy Policy.
• Upstash — rate-limit counters with automatic expiry. Upstash Privacy Policy.

No other third parties receive any data from this Extension.

7. Permissions Explained

• storage — save your gesture configuration, automations, site rules, usage counters, and cached Pro status locally in your browser, and sync settings across your Chrome devices.
• clipboardWrite — write to the clipboard when you use the Copy or Cut actions.
• scripting — inject the gesture overlay into the current tab so the radial menu can appear and respond to your mouse input.
• downloads — save screenshots to your Downloads folder when you use the Screenshot action.
• host_permissions (<all_urls>) — required so the content script (gesture overlay) can run on every page you visit. The Extension does not read page content, form data, passwords, or cookies. It only injects the radial menu overlay and listens for mouse gestures.

8. What We Don't Collect

• Browsing history or the URLs you visit (beyond applying your per-site rules locally)
• Page content, form data, or login credentials
• Keystrokes, mouse coordinates, or detailed usage patterns
• Personal files, device identifiers, or hardware information
• Analytics, telemetry sent to external services, advertising IDs, or tracking pixels
• Full credit card numbers (handled entirely by Stripe)
• Email addresses (Pro uses install ID, not email)

9. Data Retention

• Local data (configuration, automations, site rules, usage counters) is retained on your device until you clear it or uninstall the Extension.
• Rate-limit counters (install ID + monthly count) expire automatically after 45 days in our Redis store.
• Payment records are retained by Stripe per their retention policy.
• AI action text is not retained — it is forwarded to OpenAI in real time and discarded after the response is returned.

10. Data Deletion

• Local data: Uninstall the Extension or clear your browser's extension data. This removes all configuration, automations, and site rules from your device.
• Server-side data: Cancel your Pro subscription, then contact us to request deletion of your rate-limit and subscription records. We process deletion requests within 30 days.

11. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data; object to or restrict processing; withdraw consent at any time by uninstalling the Extension and requesting deletion; or lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us.

12. Children's Privacy

Wilee is not intended for use by anyone under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will promptly delete it.

13. Cookies

Wilee does not use cookies. Pro status is cached in chrome.storage.sync, which is accessible only to the Extension.

14. Chrome Web Store User Data Policy Compliance

Wilee's use of user data adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:

• Wilee only uses data in ways necessary to provide its single purpose: one-handed browser control via mouse gestures.
• Wilee does not transfer user data to third parties except as necessary to provide the service (AI action processing via OpenAI, payment processing via Stripe), comply with applicable laws, or protect against abuse.
• Wilee does not use or transfer user data for personalized advertisements.
• Wilee does not sell user data to third parties, data brokers, or information resellers.
• Wilee does not use browsing activity, selected text, or gesture data to train any machine-learning model.
• No human reads your user data unless (a) you give explicit consent for a specific support request, (b) it is necessary for security purposes, or (c) it is required by applicable law.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of Wilee after changes constitutes acceptance of the updated policy.

16. Contact

Questions, concerns, or data requests? Contact us.
Algomittens LLC