Privacy Policy

Effective date: October 1, 2026 Last updated: October 26, 2026

1. The Core Guarantee: Zero Personal Data #

The Short Version: We never collect who you are, what websites you visit, or what you clip. 100% anonymous. Your clipped content goes directly to Microsoft and never touches our servers. Our server only stores your OAuth token — never your OneNote email or clipped content.

We do not sell your personal data, we do not track your browsing habits across the web, and we never use your notes to train AI models. Your email is used strictly for billing receipts and account authorization — never for marketing, promotions, or third-party advertising.

2. Anonymous Feature Usage #

How We Improve: We count simple button clicks globally (e.g., "AI Summary clicked 100 times") to learn what features you love and which are bloated clutter. This helps us prioritize testing and enhance popular tools without bothering you with surveys.

Telemetry is aggregate-only. We do not track user IDs, URLs, domain names, or timestamps linked to an individual. You can disable anonymous telemetry completely at any time in the extension Options page.

3. What We Collect By Feature #

Here is an exhaustive breakdown of every data point oneClipper handles, where it lives, and why:

Feature	Data Handled	Where It Lives	Purpose
Free use (No account)	Settings, custom presets, clip history (30 days), notebook destination cache, highlight markers	Only on your local device (browser storage)	To operate the extension without requiring registration.
Connect OneNote	OAuth refresh token, internal account ID, chosen nickname	Our server (encrypted at rest)	To maintain your OneNote connection. We never access, read, or store your notebooks.
oneClipper account	Email address, salted password hash (never plain text), short-lived verification tokens	Our authentication database	To secure your Pro account and sync presets across computers.
Paid plans & billing	Subscription tier, Dodo Payments transaction ID, invoice references	Our servers & Dodo Payments (Merchant of Record)	Billing, customer support, and mandatory tax compliance. We never store credit card numbers.
Pro cloud sync	Presets (URL match rules, CSS styles, frontmatter formulas, prompt templates)	Our secure database	To sync your custom presets across up to 8 authorized devices.
Pro highlight sync	Page URL, selected text snippet, your annotations, DOM anchor positions	Our secure database	To restore your highlights when you reload or switch machines.
AI features (BYOK)	Your private API key and the prompt text you select	Key stays only on your device; text routes directly to OpenAI/Gemini/Anthropic under your account	To generate summaries without routing through oneClipper.
AI features (Managed)	Selected text sent through our proxy to the provider; daily token usage counter	Text is processed in-memory and not stored. Token counts are logged to prevent abuse.	To provide managed AI without requiring your own API key.

4. What We Never Collect #

Strict Boundaries: We have no access to your OneNote notes, your browsing history, your search queries, your payment credentials, or your personal documents.

Your Notebook Content: We only read the list of section names and page titles needed to render your destination dropdown. We never scan note contents.
Your Browsing History: oneClipper operates only on the active tab when you explicitly trigger a clip or save action.
Card Details: All transactions are handled directly by Dodo Payments. We never see or store your full card number or CVC.

5. Google & Microsoft Limited Use Disclosure #

oneClipper's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Similarly, data received from Microsoft Graph APIs is used strictly to authenticate and transmit your clipped notes to your chosen OneNote destination under your direction. Microsoft tokens are encrypted and never used for unauthorized background access.

6. Why We Request Browser Permissions #

We believe in least-privilege extension architecture. Here is why our manifest requests specific capabilities:

storage: Stores your presets, cached destination names, and offline clip queues locally on your computer.
identity: Facilitates OAuth authentication with Microsoft and Google without injecting third-party login forms.
sidePanel: Allows opening the persistent clipping notepad next to your active webpage.
activeTab / scripting: Executes the article text extractor and screenshot canvas strictly on the single page you choose to clip.

7. Data Retention Schedule #

We keep information only as long as necessary to provide the features you use:

Data Type	Retention Period	Deletion Trigger
Local browser data	Indefinite (on your machine)	When you clear browser data or uninstall the extension.
Account & cloud presets	For the life of your account	Deleted within 30 days of account deletion or plan refund.
Verification tokens	15 minutes maximum	Automatically deleted upon verification or expiration.
Payment records	As required by tax law (up to 7 years)	Retained for legal, financial, and tax accounting records.
Diagnostic reports	90 days	Automatically purged from our debugging log pipeline.

8. Your Rights & Contact #

You Are In Control: You can export all your data or delete your account at any time directly inside the extension under Billing > Delete Account.

Under GDPR, UK GDPR, and CCPA, you have the right to access, rectify, or erase personal data we hold. For data inquiries or vulnerability disclosures, contact our privacy officer directly at privacy@oneclipper.app. We respond within 30 days.