Privacy Policy

Overview

The GreenFin Chrome Extension ("Extension") is designed to extract Nigerian stock prices from investing.com and update your GreenFin portfolio. This privacy policy explains how the Extension handles your data.

Data Collection

What We Do NOT Collect

• Personal Information: No personal data is collected, stored, or transmitted to external servers
• Browsing History: No tracking of websites visited or browsing patterns
• Usage Analytics: No usage statistics, metrics, or behavioral data collection
• Cookies: No cookies are set or read by the Extension
• Device Information: No device identifiers, IP addresses, or system information collected

What We DO Handle

• API Keys: Your GreenFin API key is stored locally in Chrome's secure storage for authentication
• Stock Prices: Price data extracted from investing.com is processed locally and sent only to your specified GreenFin instance
• Settings: Extension configuration (GreenFin URL, preferences) stored locally in Chrome

Data Usage

Local Processing

• All stock price extraction happens locally in your browser
• No data is sent to third-party services or external servers
• Price data is only transmitted to your authenticated GreenFin application

Authentication

• API keys are generated by your GreenFin application, not by the Extension
• Keys are stored securely using Chrome's built-in storage encryption
• Authentication is performed directly between the Extension and your GreenFin instance

Data Storage

Local Storage Only

• All Extension data is stored locally on your device using Chrome's secure storage API
• No cloud storage or external databases are used by the Extension
• Data is encrypted and protected by Chrome's security mechanisms

Data Retention

• Settings and API keys persist until manually removed or Extension is uninstalled
• No automatic data expiration or external data retention policies
• Users have full control over their stored data

Data Sharing

No Third-Party Sharing

• Zero Data Sharing: No data is shared with third parties, advertisers, or analytics services
• No Partnerships: No data-sharing partnerships or agreements with external entities
• No Monetization: Extension does not monetize user data in any way

GreenFin Communication

• Stock price data is sent only to your specified GreenFin application instance
• Communication uses HTTPS encryption and Bearer token authentication
• Data transmission occurs only when explicitly triggered by user action

Security Measures

Technical Safeguards

• HTTPS Only: All network communication uses encrypted HTTPS connections
• Secure Storage: Chrome's native secure storage API protects sensitive data
• Minimal Permissions: Extension requests only essential Chrome permissions
• Domain Restrictions: Limited to specific domains (investing.com, your GreenFin instance)

Access Controls

• User-Controlled: All data access requires explicit user configuration and consent
• API Key Security: Keys use secure generation and Bearer token authentication
• Row Level Security: Database access protected by Supabase RLS policies

User Rights

Data Control

• Access: View all stored data through Extension settings
• Modification: Update or change API keys and settings at any time
• Deletion: Remove all data by uninstalling Extension or clearing settings
• Portability: Export settings manually if needed for backup

Transparency

• Open Source: Extension code is available for review and audit
• Clear Functionality: All actions clearly explained in user interface
• No Hidden Features: No background data collection or undisclosed functionality

Compliance

Privacy Standards

• Data Minimization: Only collect and store essential data for functionality
• Purpose Limitation: Data used only for stated stock price extraction purpose
• User Consent: All data handling requires explicit user setup and consent
• Security by Design: Privacy and security built into Extension architecture

Platform Compliance

• Chrome Web Store: Meets all Chrome Web Store privacy requirements
• Manifest V3: Complies with latest Chrome Extension security standards
• Best Practices: Follows industry-standard privacy and security practices

Updates

Policy Changes

• Policy updates will be reflected in new Extension versions
• Material changes will be highlighted in release notes
• Users will be notified of privacy-related changes through Extension updates

Contact Information

For privacy-related questions or concerns regarding this Extension, please contact us through the GreenFin application settings.

Legal

Disclaimer

This Extension is provided "as is" without warranties. Users are responsible for reviewing and understanding their GreenFin application's privacy policy for data handling on the server side.

Jurisdiction

This privacy policy is governed by applicable data protection laws and regulations.