Fresh new look, same great toolkit. Heads up, we're still testing a few things. Get in touch with questions or feedback.
Log inSign up
Back to Home

Last updated: February 2025

Operator: OTIS, LLC (doing business as "Will-Myers" / "Will's Toolkit")

Contact: support@will-myers.com

This Privacy Policy describes how we collect, use, store, and share information when you use the Will's Toolkit browser extension and web application (the "Service"). By using the Service, you agree to the practices described in this policy. We also encourage you to review our Terms & Conditions.

1. Information We Collect

1.1 Account and Identity

  • Auth user ID: Your account is identified by a unique user ID from our authentication provider (Supabase Auth). This identifier is used to associate your chats, usage, and account data with you.

1.2 Chat Content

  • Messages: When you use the AI chat feature, we collect and store the text of your messages and the assistant's responses.

  • Selected element context: If you use the "Select" feature to include part of a webpage in your message, we collect the HTML of the selected element. This content is sent to our servers and may be stored as part of your chat history.

  • Tool outputs: When the AI assistant uses tools to read information from the current page (for example, page content in markdown, element styles, or code context search results), those results are included in the conversation and may be stored as part of your chat history.

  • File attachments: If you attach files (such as images or PDFs) to a chat, we upload and store them in our cloud storage (Supabase Storage) under your account. We store file metadata (e.g., filename, type) and the file contents necessary to display and process them in the chat.

1.3 Usage and Billing

  • Token counts and cost: We log usage metrics for each chat (e.g., input tokens, output tokens, reasoning tokens, cache reads/writes) and associated costs. This data is used for billing, credit deduction, and service improvement.

  • Credit transactions: We record credit transactions (e.g., usage deductions, purchases) and balance information.

1.4 Technical and Operational Data

  • IP address: We may collect your IP address for abuse prevention, security, and operational purposes (for example, to block abusive traffic or to log events such as token expiry).

  • User-Agent and request metadata: We may log browser or client identifiers, request headers, and similar technical data for debugging and security.

  • Error logs: When errors occur, we may log error details, including metadata that could help diagnose issues. We do not deliberately log chat message content in error logs, but error context could occasionally include limited technical information.

1.5 Analytics

  • PostHog: Our web application uses PostHog for product analytics and feature flags. PostHog may capture page views, feature usage, and, when enabled, uncaught exceptions and their stack traces. We use "identified_only" for person profiles. PostHog's data practices are governed by their own privacy policy.

  • Vercel Analytics: We use Vercel Analytics for web analytics (e.g., page views, performance metrics). This does not include chat content.

1.6 Extension Local Storage

  • Chrome storage: The browser extension stores certain data locally on your device using Chrome's storage API, including:
    • Authentication tokens (JWTs) used to access the Service
    • Cached data such as code catalog, user preferences, and plugin information This data remains on your device until you uninstall the extension or clear its storage.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Process your chat messages, store conversations, run AI tools, and display your chat history.

  • Billing and credits: Calculate usage, deduct credits, and manage your account balance.

  • Security and abuse prevention: Detect and prevent abuse, enforce access controls, and protect our systems (including blocking specific IPs when necessary).

  • Support and improvement: Respond to support requests, debug issues, and improve the Service.

  • Analytics: Understand how the Service is used and improve features and performance.

3. How We Share Your Information

We share information only as described below:

3.1 Service Providers

  • Supabase: We use Supabase for database hosting, authentication, and file storage. Your chat content, usage data, and attachments are stored in Supabase's infrastructure.

  • AI providers: Your chat messages (including any selected element HTML, tool outputs, and attachment references) are sent to third-party AI model providers to generate responses. The providers we use include Anthropic, OpenAI, Google, Perplexity (when web search is enabled), and others, depending on the model you select. Each provider has its own privacy and data retention policies.

  • Analytics: We use PostHog and Vercel for analytics. These services may receive technical and usage data as described above; they do not receive your chat content.

3.2 Legal and Safety

We may disclose information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 We Do Not Sell Your Data

We do not sell your personal information.

4. AI Model Training and Third-Party Retention

4.1 Our Practices

We do not train our own AI models on your chat content. Your messages are used solely to provide the Service (e.g., to generate responses and maintain conversation history).

4.2 Third-Party Providers

Third-party AI providers may process and retain your content according to their own policies. We configure data-retention-minimizing settings where available, but we cannot guarantee that every provider will retain zero data or that all models support zero data retention (ZDR). Your choice of model may affect how your content is retained by the provider. We encourage you to review the policies of the providers whose models you use.

5. Data Retention

5.1 Chat Content

  • Private chats: Your chat sessions and messages are stored until you delete them. When you delete a chat, we mark it for deletion. Session records marked for deletion may be permanently removed by our systems after a period (e.g., approximately one week).

  • Shared chats: If you create a shared snapshot of a chat, that snapshot is stored separately and may have its own expiration or retention behavior.

5.2 Usage and Billing Data

Usage and billing records are retained as needed for accounting, support, and compliance purposes.

5.3 Technical Logs

Technical and operational logs (e.g., IP addresses, error logs) are retained for a limited period as needed for security and debugging.

6. Your Choices and Rights

6.1 Managing Your Data

  • Delete chats: You can delete individual chat sessions through the Service. Deleted chats are marked for removal and may be permanently deleted by our systems.

  • Attachments: You can avoid including file attachments if you prefer not to upload files. Once uploaded, attachments are associated with your chat; deleting the chat does not necessarily remove the files immediately from all backup or archival systems.

  • Extension storage: Uninstalling the extension or clearing Chrome storage for the extension will remove locally stored data (e.g., tokens, cached data).

6.2 Account and Access

You may request access to, correction of, or deletion of your personal information by contacting us at support@will-myers.com. We will respond to verified requests in accordance with applicable law.

6.3 Analytics

PostHog and Vercel Analytics may use cookies or similar technologies. You can manage your browser's cookie settings to limit tracking, though this may affect some Service functionality.

7. Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us at support@will-myers.com.

9. International Data Transfers

Our servers and service providers may be located in the United States or other countries. By using the Service, you consent to the transfer of your information to and processing in those jurisdictions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy and indicate the "Last updated" date. For material changes, we may provide additional notice where appropriate. Your continued use of the Service after the effective date of any changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or our privacy practices, contact us at support@will-myers.com.