Smart Page Annotator (SPA) by Shubix

Privacy Policy

Last updated: April 8, 2026

This policy explains what data the extension uses, how it is stored, and how you can request changes.

Back to home Contact support

Overview

Smart Page Annotator lets you highlight, draw, add sticky notes, review PDFs, and work inside an extension-owned whiteboard workspace. Annotations are stored locally on your device by default. Global search and sidebar filters run entirely on your device against that local data; we do not upload your annotation index to power search. Data is only sent to our servers when you explicitly use account, projection, recording, or other hosted features. If you purchase a subscription, payment details are processed by our payment provider according to their policies; we do not sell your personal information.

Administrative Transparency

To provide a flexible and reliable service, certain non-personal configuration settings, such as support emails, onboarding copy, and feature flags, can be updated dynamically by system administrators via our Superadmin Control Room.

This system is used exclusively for operational purposes and does not grant administrators access to your local annotations or browsing content unless you explicitly use a hosted feature that requires server storage or transport.

Data we collect

  • Account information such as email, name, and a securely stored password hash.
  • Authentication session tokens (JWT) to maintain secure access.
  • Plan and usage counters needed to enforce guest, trial, and Pro feature limits.
  • Annotation data, screenshots, local recording data, or projection payloads only when you explicitly use those features.
  • Workspace metadata such as local PDF file name, page number, zoom level, and workspace title stored in browser storage.
  • Optional Google Drive access tokens issued by the browser when you choose Drive import for a PDF.
  • Guest sessions identified by a generated user ID (expires after one hour).
  • Audit events for security-relevant actions (login, password change, account deletion) stored server-side for administrative review.

How we use data

  • Provide annotation, sharing, projection, and local recording features.
  • Authenticate users and enforce access tiers (Pro vs. Standard).
  • Restore your local workspace state, PDF viewer state, and shortcut preferences on the same browser profile.
  • Import PDFs from Google Drive only when you explicitly initiate a Drive search or open action.
  • Offer customer support and improve reliability.
  • We do not sell, trade, or rent your personal information to third parties.

Storage and retention

  • Local annotations stay in your browser storage until you delete them.
  • Whiteboard and PDF workspace metadata stay in browser storage until you remove that saved work.
  • Shared annotation links expire automatically (up to 30 days).
  • Local recordings stay on your device unless you choose to download or keep them elsewhere.
  • Permanent account deletion removes all cloud-synced account data (workspaces, settings, audit records tied to your account) irreversibly.

On-device AI and Integrations

  • AI Insights (Summarisation & Tagging): AI-assisted summaries and tagging run locally in the browser. When Chrome AI is available, Smart Page Annotator uses that local browser capability. When it is not available, some AI-style features fall back to local heuristic processing. We do not send annotation data or page content to external cloud AI providers.
  • PKM Sync (Notion & Obsidian): When using Personal Knowledge Management (PKM) sync features, your browser communicates directly with the respective service's API. Your integration tokens and vault URLs are stored in your browser's secure local storage and are never transmitted to our servers.
  • Google Drive Import: Drive access is requested through the browser only when you choose the Drive import action in the PDF workspace. We do not use Drive access unless you explicitly open that flow.

Permissions

  • Host permissions for HTTP/HTTPS pages: required so the extension can inject the toolbar, drawing layer, and right-click actions on the pages you choose to annotate. We do not scrape or transmit page content automatically.
  • Active tab / scripting: injects the annotation overlay on the current page when you activate the extension.
  • Storage: keeps annotations and user settings on your device.
  • Tabs: supports screenshots, export flows, and SPA navigation detection.
  • Context menu: enables right-click start actions on any webpage.
  • Alarms: manages internal background heartbeats and session timers.
  • Identity: lets the browser request Google OAuth only when you choose Google Drive import.
  • Clipboard: (Optional) allows you to copy share links and screenshot URLs with one click.

Screen, microphone, and camera access is requested by the browser only when you start a recording.

Your choices

  • Delete annotations, notes, and share links anytime from the extension.
  • Delete saved workspace documents, local PDFs, and shortcut presets from the workspace or dashboard flows.
  • Upgrade a guest account to keep data beyond the guest window.
  • Export all cloud data (annotations, workspaces, and settings) as a single JSON archive from the User Dashboard.
  • Change your password at any time from the Account Settings section in the User Dashboard.
  • Permanently delete your account and all associated cloud data from the User Dashboard. This action requires typing a confirmation keyword and cannot be undone.

Contact

Questions about privacy or data handling? Email smartannotator@gmail.com.