Smart Page Annotator

Privacy Policy

Last updated: March 29, 2026

This policy explains what data the extension uses, how it is stored, and how you can request changes.

Overview

Smart Page Annotator lets you highlight, draw, add sticky notes, review PDFs, and work inside an extension-owned whiteboard workspace. Annotations are stored locally on your device by default. Data is only sent to our servers when you explicitly use account, projection, recording, or other hosted features.

Administrative Transparency

To provide a flexible and reliable service, certain non-personal configuration settings, such as support emails, onboarding copy, and feature flags, can be updated dynamically by system administrators via our Superadmin Control Room.

This system is used exclusively for operational purposes and does not grant administrators access to your local annotations or browsing content unless you explicitly use a hosted feature that requires server storage or transport.

Data we collect

  • Account information such as email, name, and a securely stored password hash.
  • Authentication session tokens (JWT) to maintain secure access.
  • Plan and usage counters needed to enforce guest, trial, and Pro feature limits.
  • Annotation data, screenshots, recordings, or projection payloads only when you explicitly use those features.
  • Workspace metadata such as local PDF file name, page number, zoom level, and workspace title stored in browser storage.
  • Optional Google Drive access tokens issued by the browser when you choose Drive import for a PDF.
  • Guest sessions identified by a generated user ID (expires after one hour).

How we use data

  • Provide annotation, sharing, and recording features.
  • Authenticate users and enforce access tiers (Pro vs. Standard).
  • Restore your local workspace state, PDF viewer state, and shortcut preferences on the same browser profile.
  • Import PDFs from Google Drive only when you explicitly initiate a Drive search or open action.
  • Offer customer support and improve reliability.
  • We do not sell, trade, or rent your personal information to third parties.

Storage and retention

  • Local annotations stay in your browser storage until you delete them.
  • Whiteboard and PDF workspace metadata stays in browser storage until you remove that saved work.
  • Shared annotation links expire automatically (up to 30 days).
  • Temporary recordings are stored on the server for up to 30 minutes unless you save them.
  • Saved recordings remain in your account until you delete them.

On-device AI and Integrations

  • AI Insights (Summarisation & Tagging): AI-assisted summaries and tagging run locally in the browser. When Chrome AI is available, Smart Page Annotator uses that local browser capability. When it is not available, some AI-style features fall back to local heuristic processing. We do not send annotation data or page content to external cloud AI providers.
  • PKM Sync (Notion & Obsidian): When using Personal Knowledge Management (PKM) sync features, your browser communicates directly with the respective service's API. Your integration tokens and vault URLs are stored in your browser's secure local storage and are never transmitted to our servers.
  • Google Drive Import: Drive access is requested through the browser only when you choose the Drive import action in the PDF workspace. We do not use Drive access unless you explicitly open that flow.

Permissions

  • Host permissions for HTTP/HTTPS pages: required so the extension can inject the toolbar, drawing layer, and right-click actions on the pages you choose to annotate. We do not scrape or transmit page content automatically.
  • Active tab / scripting: injects the annotation overlay on the current page when you activate the extension.
  • Storage: keeps annotations and user settings on your device.
  • Tabs: supports screenshots, export flows, and SPA navigation detection.
  • Context menu: enables right-click start actions on any webpage.
  • Alarms: manages internal background heartbeats and session timers.
  • Identity: lets the browser request Google OAuth only when you choose Google Drive import.
  • Clipboard: (Optional) allows you to copy share links and screenshot URLs with one click.

Screen, microphone, and camera access is requested by the browser only when you start a recording.

Your choices

  • Delete annotations, notes, recordings, and share links anytime from the extension.
  • Delete saved workspace documents, local PDFs, and shortcut presets from the workspace or dashboard flows.
  • Upgrade a guest account to keep data beyond the guest window.
  • Request account deletion by emailing support.

Contact

Questions about privacy or data handling? Email smartannotator@gmail.com.