Privacy Policy

1. What we collect

Your account. When you sign up, we collect your email address and sign-in details through our authentication provider. We need these to identify you and keep your account secure.

Your OpenRouter API key, if you add one. It is encrypted and kept in a secrets vault. Our database only stores a reference to it, never the key itself. It is used only so the companion app on your computer can talk to OpenRouter for you.

Your AI provider choice. We store whether you picked your Claude subscription or OpenRouter, so Glenica remembers your setup.

Billing. Payments are handled by Paddle.com Inc., the merchant of record for all purchases. Paddle collects and stores your card number and billing address directly. We never see or store your card details. We only store your Paddle customer ID, subscription ID, plan and subscription status, so we can turn on what you paid for.

Fraud-prevention signals. To keep free trials fair, we store signals based on your email address, network connection, device and browser, and, where Paddle provides it, your payment method. They are kept as hashed values or fingerprints, not the raw data, and are used only to stop repeat trial abuse and fraudulent signups.

2. What we never collect

We never see or store your conversations. Your messages and the AI's replies go straight between the companion app on your computer and your AI provider (or the Claude Code session on your computer). They never pass through or get stored on Glenica's servers.

We don't use any third-party analytics or tracking tools in the extension or companion app.

3. How we use your data

We use your data to:

• Run and secure your account
• Turn on and manage your subscription
• Detect and stop fraudulent trial signups or account abuse
• Answer support requests
• Meet legal obligations where they apply

4. Who we share data with

We only share data with the services Glenica needs to run: Paddle for payments, our database and sign-in hosting provider, and, if you add an OpenRouter key, OpenRouter to send your requests. We don't sell your personal data or share it with anyone else.

5. How long we keep data

We keep your account and billing data while your account is active, and for a reasonable time after it closes for legal and accounting reasons. Fraud-prevention signals are kept as long as needed to stop repeat abuse.

6. How we protect your data

API keys are encrypted and kept in a secrets vault. Access controls make sure each account can only read its own data, and only privileged server-side operations can reach the raw keys. No way of storing or sending data is 100% secure, but we take reasonable, industry-standard steps to protect yours.

7. Your rights

You can delete or replace your stored API key at any time from inside Glenica. To see, correct or delete your personal data, email support@glenica.com.

8. Children's privacy

Glenica is not meant for children under 13, and we don't knowingly collect data from them.

9. Changes to this policy

We may update this policy from time to time. When we make an important change, we will update the date at the top of this page.

10. Contact

Questions about this policy or your data? Email support@glenica.com.