Hooly Privacy Policy

1. Data We Collect

We collect only the minimum necessary data to provide and improve the Service and Extension. Collection occurs with your explicit consent (e.g., upon installing the Extension or registering) or based on lawful grounds (e.g., performance of a contract).

1.1. Personal Data

• Through the Service (hooly.info): Email address, IP address.
• Through the Extension: Registration data (name, email), payment transaction data (e.g., subscription details), tab data (for icon updates and creating external tabs), browser user agent (for compatibility), HTML/JSON pages retrieved by the system (anonymized and used only for content processing).

We do not collect browsing history or geolocation. Payment data is collected solely during subscription processing through secure payment gateways (with your consent) and is not stored by us after processing. All stored data is anonymized.

1.2. Non-Personal Data

• Data on the Extension's operational status (stored locally).
• Statistics and logs (anonymized) for improving service quality.
• Publicly available information from websites (aggregated for summaries and insights, without personal data).

1.3. Tracking Technologies

• Cookies: Used for authentication in the hooly.info ecosystem (session cookies, deleted upon logout).
• UUID: Generated for anonymous tracking of Extension actions (for statistics, without linkage to personal data).
• Pixels/Logs: For collecting anonymized statistics (e.g., on welcome pages via Google Analytics).

You can manage cookies in your browser settings.

2. How We Use (Process) Your Data

Data processing is carried out on lawful bases in accordance with the GDPR (consent, performance of a contract, legitimate interests).

2.1. Purposes of Processing

• Content Provision: Collection of data from web resources, processing on servers, packaging, and display in the Extension's popup window; icon display on sites.
• UX Improvement: Analysis of logs and statistics for functionality optimization.
• Authentication and Payments: Processing of registration data and transactions for subscriptions.
• Analytics: Anonymized data for internal monitoring (via Google Analytics on welcome pages).

Automated processing (profiling) is not applied.

2.2. For Extension Users

Data is used exclusively for core functionality: icon updates (activeTab), tab creation (tabs), parsing restarts (alarms), status storage (storage), access to public website data (host permissions). No personal data is collected without consent.

3. Data Disclosure and International Transfers

We do not disclose personal data to third parties except as specified below. All transfers are secured.

3.1. Third Parties

• Google Analytics: On welcome pages for anonymized analytics (data is not personalized).
• Payment Gateways: For transaction processing (only necessary data, with your consent).
• Internal Monetization: Data is shared for advertising and monetization of Hooly products (anonymized insights, without selling personal data).

Data is not shared for external advertising or unrelated purposes.

3.2. International Transfers

Data is stored on servers in [specify location, e.g., EU or Armenia]. For transfers to third countries (e.g., USA for Google Analytics), GDPR safeguards apply: Standard Contractual Clauses (SCC) or adequacy decisions.

4. Data Retention Periods

• Session Data: Until user logout (automatic deletion).
• Logs and Statistics: Up to 5 years (for compliance and improvements; anonymized).
• Registration and Payment Data: As necessary for contract performance (deleted upon request).

After expiration, data is deleted or anonymized.

5. Data Security

We implement technical and organizational measures to protect data:

• Encryption: AES-256 for storage; TLS 1.3 for transmission (including HTTPS/WSS in the Extension).
• Access: Restricted on a least-privilege basis.
• Audit: Regular penetration tests.

In the event of a data breach, we notify users via all possible means (email, Extension notifications, website) within the timelines set by the GDPR (no later than 72 hours after detection). No ISO 27001 certifications, but internal audits are conducted.

6. Your Rights

Under the GDPR, you have rights to:

• Access data.
• Rectify inaccuracies.
• Deletion ("right to be forgotten").
• Restriction of processing.
• Data portability.
• Withdrawal of consent (without affecting prior processing).

To exercise rights (including deletion of Extension data), contact support.api@hooly.info. We will respond within 30 days.

7. Children's Privacy

The Service and Extension are not intended for persons under 16 years of age. We do not knowingly collect data from children and do not violate COPPA/GDPR in this area. If you are a parent and believe we have collected a child's data, contact us for deletion.

8. Cookies and Tracking Technologies

See Section 1.3. You can opt out of analytics by disabling cookies or using browser tools.

9. Changes to the Policy

We may update the Policy. Changes will be published on hooly.info/privacy-policy with user notifications (email or in the Extension). Continued use after changes constitutes consent.

10. Compliance with Chrome Web Store

Hooly fully complies with Chrome Web Store Policies on user data. The Extension requests minimal permissions:

• activeTab: For updating icons on tabs.
• tabs: For creating external tabs.
• alarms: For restarting parsing.
• storage: For storing Extension status.
• host permissions: For accessing public website data (only aggregation of non-sensitive data).

All data is used only for core functionality ("Limited Use" – data not for advertising or external monetization beyond Hooly). The Policy is available in the Extension's description. For questions: support.api@hooly.info.

11. GDPR and Chrome Compliance Checklist

This Policy is designed to ensure full compliance. For clarifications, contact us.

Contacts:

Hooly
Email: support.api@hooly.info