Privacy Policy

1. Data We Collect

Account information: the extension uses Google OAuth for sign-in. We only read your Google email address to create and identify your account. We do not access contacts, calendar, email, or any other Google data.

Brand and content settings: brand name, tone settings, audience, and publishing history are stored in your local browser (chrome.storage.local) and on Traction servers to provide the AI content generation service.

Custom API keys: if you choose to use a custom API key such as OpenAI or MiniMax, that key stays only on your local device and is never uploaded to Traction servers.

2. Data We Do Not Collect

• We do not collect your browsing history
• We do not read page content unrelated to Traction
• We do not sell or transfer any personal data to third parties
• We do not use advertising trackers

3. How Data Is Used

Your brand settings and content instructions are sent to the Traction AI service to generate content. The AI models are either hosted by Traction or provided by third-party APIs that you specify.

4. Third-Party Services

If you use a custom API, your requests go directly to that provider and are governed by its privacy policy.

• Xiaohongshu (creator.xiaohongshu.com): only when you explicitly click Publish, the extension fills content into the creator dashboard
• Twitter / X (x.com): only when you explicitly click Publish, the extension fills content into the compose page
• Google: used only for OAuth sign-in

5. Permissions Explained

• sidePanel: displays the main UI in the browser side panel
• storage: saves brand settings and API keys locally
• tabs: detects whether the current tab is a supported publishing platform
• scripting + activeTab: injects publish scripts into Xiaohongshu/X only on explicit user action
• clipboardWrite: copies generated content to the clipboard
• contextMenus: adds a right-click shortcut to open Traction
• identity: Google OAuth sign-in for account identification

1. Data We Collect

• Google account email and name for authentication via Google OAuth
• Website URLs you submit for SEO/GEO diagnosis
• Diagnosis results stored in your account for later reference

2. Third-Party Data Sources

When analyzing a website, Traction queries public APIs and public web pages to assess online presence, including Google Search results, public social media profiles, and Wikipedia/Wikidata APIs. We do not collect or store personal data from those sources beyond what is necessary for the diagnosis report.

Data Security

All data is transmitted via HTTPS. API keys stay only on your local device. We take reasonable technical measures to protect your data, but cannot guarantee absolute security.

Children's Privacy

Traction is not directed at children under 13. We do not knowingly collect personal information from minors.

Data Sharing

We do not sell, share, or transfer your data to third parties. Your data is visible only to your own account.

Changes to This Policy

If this policy changes significantly, we will notify you through the extension or this page. Continued use constitutes acceptance of the updated policy.

Contact

For privacy inquiries: [email protected]