# Privacy Policy for Thingiverse Finder (LLM-powered)

**Last Updated:** September 2025

## Overview

3D Model Finder is a Chrome extension that helps users find relevant 3D models based on the content of web pages they're viewing. This privacy policy explains what information we collect, how we use it, and your rights regarding your data.

## Information We Collect

### 1. Page Content Data
- **Product titles and descriptions** from web pages you visit
- **URLs** of pages where the extension is activated
- **Search queries** extracted from Amazon and other e-commerce sites
- **Breadcrumb navigation** data from product pages

### 2. Usage Analytics
- **Search queries** generated by our AI system
- **Search results** returned from 3D model websites
- **Performance metrics** including search timing and success rates
- **Extension usage patterns** (when and how often you use the extension)

### 3. Technical Data
- **Browser information** (Chrome version, extension version)
- **Request timestamps** for performance monitoring
- **Error logs** for debugging and improvement purposes

## How We Use Your Information

### Primary Functions
- **Content Analysis**: We analyze page content to generate relevant search terms for finding 3D models
- **AI-Powered Search**: We use OpenAI's API to generate intelligent search queries and rank results
- **Thingiverse Integration**: We search Thingiverse's public API to find relevant 3D models
- **Result Ranking**: We use AI to rank search results by relevance to your interests

### Service Improvement
- **Performance Optimization**: We monitor search performance to improve response times
- **Quality Enhancement**: We analyze search patterns to improve result relevance
- **Bug Fixing**: We use error logs to identify and fix technical issues

## Data Storage and Retention

### Local Storage
- **No personal data** is stored locally on your device
- **Temporary data** (search results) is only held in memory during active searches

### Server Storage
- **Search logs** are stored on Cloudflare Workers for up to 90 days
- **Performance metrics** are retained for up to 1 year for service improvement
- **Error logs** are kept for up to 30 days for debugging purposes

### Third-Party Services
- **OpenAI API**: We send page content and search queries to OpenAI for AI processing
- **Thingiverse API**: We query Thingiverse's public API for 3D model data
- **Cloudflare Workers**: Our backend service processes and stores limited usage data

## Data Sharing

### We Do NOT Share:
- Personal identification information
- Browsing history beyond the specific pages where you activate the extension
- Contact information or account details
- Payment or financial information

### We May Share:
- **Aggregated, anonymized usage statistics** for service improvement
- **Technical performance data** with our hosting provider (Cloudflare)
- **Search queries and results** with OpenAI for AI processing (as per their privacy policy)

## Your Rights and Choices

### Data Access
- You can request information about what data we have collected about your usage
- Contact us at [your-email@domain.com] for data access requests

### Data Deletion
- You can request deletion of your usage data
- Uninstalling the extension stops new data collection
- Historical data will be automatically deleted according to our retention schedule

### Opt-Out Options
- You can disable the extension at any time
- You can choose not to use the extension on specific websites
- You can contact us to opt out of data collection entirely

## Security Measures

### Data Protection
- **HTTPS encryption** for all data transmission
- **Secure API keys** stored in environment variables
- **No sensitive personal data** collection or storage
- **Regular security audits** of our infrastructure

### Access Controls
- **Limited access** to usage data (only authorized personnel)
- **Audit logging** for data access
- **Secure hosting** on Cloudflare's enterprise infrastructure

## Children's Privacy

This extension is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

## International Users

### Data Transfers
- Your data may be processed in the United States and other countries where our service providers operate
- We ensure appropriate safeguards are in place for international data transfers

### GDPR Compliance
- We comply with the General Data Protection Regulation (GDPR) for EU users
- You have the right to access, rectify, erase, and port your data
- You can object to processing or request restriction of processing

## Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by:
- Updating the "Last Updated" date at the top of this policy
- Posting a notice in the extension interface
- Sending email notifications to registered users (if applicable)

## Contact Information

For questions about this privacy policy or our data practices, please contact us at:

**Email:** [sagiv.yaari@gmail.com]  
**Website:** [your-website.com]  

## Legal Basis for Processing (GDPR)

For EU users, our legal basis for processing your data is:
- **Legitimate Interest**: Improving our service and providing relevant search results
- **Consent**: Your use of the extension constitutes consent to data processing as described in this policy

## Data Processing Details

### Lawful Basis
- **Legitimate Interest**: We process page content to provide the core functionality of finding relevant 3D models
- **Performance of Contract**: Data processing is necessary to provide the service you've requested

### Data Minimization
- We only collect the minimum data necessary to provide our service
- We do not collect unnecessary personal information
- We automatically delete data according to our retention schedule

### Purpose Limitation
- Data is only used for the purposes described in this policy
- We do not use your data for unrelated commercial purposes
- We do not sell your data to third parties

---

*This privacy policy is effective as of the date listed above and applies to all users of the Thingiverse Finder (LLM-powered) Chrome extension.*