This Privacy Policy describes how Glenica ("Glenica," "we," "us" or "our") collects, uses and protects personal data when you use the Glenica browser extension, its companion app and our website (together, the "Service"), and the choices you have about that data.
1Information we collect
Account information. When you create an account, we collect your email address and sign-in credentials through our authentication provider. We use this information to identify you and to keep your account secure.
OpenRouter API key (optional). If you add an OpenRouter API key, it is encrypted and held in a secrets vault. Our database stores only a reference to the key, never the key itself. The key is used solely to allow the companion app on your computer to send requests to OpenRouter on your behalf.
AI provider preference. We record whether you chose your Claude subscription or OpenRouter, so that the Service remembers your setup.
Billing information. Payments are processed by Lemon Squeezy, the merchant of record for all purchases. Lemon Squeezy collects and stores your full card number and billing address directly; we never receive or store your full card number. To display your billing page, we keep a copy of your card's brand and last four digits, your plan dates and your invoice links, as provided by Lemon Squeezy. We also store your Lemon Squeezy customer ID, subscription ID, plan and subscription status, so that we can provide the features you have paid for. If you cancel and choose to give a reason, we store that reason.
Fraud-prevention signals. To keep free trials fair, we store signals derived from your email address, network connection, device and browser and, where our payment provider shares it, your payment method. These signals are kept as hashed values or fingerprints rather than raw data, and are used only to prevent repeat trial abuse and fraudulent sign-ups.
Workflow edits (checked, not stored). Before the assistant changes a workflow, the extension sends our server only what is needed to check that change: node names, types and connections; the settings being changed, with password fields hidden; and the names and types of your data fields, never their values. The Tidy Up feature sends node positions, connections, and section titles with their short descriptions. Our server checks the change, returns a response and retains none of this content.
Active computer. The Service works on one computer at a time. To identify that computer, we store a scrambled identifier for it (not its name), its operating system (Windows, Mac or Linux), and when it was set up and last used. We also record when you switch computers.
Usage counts and connection identifiers. We count the requests your account sends to our server each hour in order to apply fair-use limits. To detect shared accounts, we keep scrambled identifiers of the connections you use, never your actual IP address.
2Information we do not collect
We do not see or store your conversations. Your messages and the AI's replies travel directly between the companion app on your computer and your AI provider (or the Claude Code session on your computer). They never pass through or are stored on Glenica's servers.
We do not receive the results of your workflow runs, the data that flows through your workflows, or the credentials you save in n8n.
We do not use any third-party analytics or tracking tools in the extension or the companion app.
3How we use information
We use the information described above to:
- Provide, operate and secure your account
- Activate and manage your subscription
- Check the assistant's changes before they reach your canvas, and lay out your workflow
- Limit the Service to one computer at a time and apply fair-use limits
- Detect and prevent fraudulent trial sign-ups and account abuse
- Respond to support requests
- Comply with applicable legal obligations
4How we share information
We share personal data only with the service providers needed to operate the Service:
- Lemon Squeezy, to process payments
- Our database and authentication hosting provider
- OpenRouter, only if you add an OpenRouter key, to send your requests
We do not sell your personal data, and we do not share it with anyone else.
5Data retention
We keep account and billing data for as long as your account is active, and for a reasonable period after it is closed where needed for legal and accounting purposes. Fraud-prevention signals are kept for as long as needed to prevent repeat abuse.
Details of your active computer are kept while your account is active. Details of a computer you stop using are deleted 30 days after its last use. Connection identifiers are deleted after 7 days, hourly usage counts after 8 days, and the record of computer switches after 30 days.
Our server's own logs record only the type of request, whether it succeeded and how long it took. Our hosting provider also keeps short-lived technical logs of requests.
6Data security
API keys are encrypted and held in a secrets vault. Access controls ensure that each account can read only its own data, and only privileged server-side operations can access the raw keys. No method of storing or transmitting data is completely secure, but we take reasonable, industry-standard measures to protect your information.
7Your rights and choices
You can delete or replace your stored API key at any time from within Glenica. To access, correct or delete your personal data, contact us at support@glenica.com.
8Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from them.
9Changes to this policy
We may update this Privacy Policy from time to time. When we make a material change, we will update the date at the top of this page.
10Contact us
If you have questions about this Privacy Policy or your personal data, contact us at support@glenica.com.