Privacy Policy

    Last updated: April 21, 2026

    This Privacy Policy describes how Research Monkey AI ("we", "us", or "our") collects, uses, and protects information when you use the Research Monkey AI website at researchmonkey.ai and the Research Monkey AI Chrome extension (collectively, the "Service").

    1. Information We Collect

    a. Authentication Information

    When you create an account, we collect your email address and (optionally) your name. If you sign in with Google, we receive your email and basic profile information from Google. Passwords are securely hashed and stored by our authentication provider (Supabase) and are never accessible to us in plain text.

    b. Website Content (Chrome Extension)

    The Chrome extension can access the title, URL, and selected text of the active browser tab only when you explicitly invoke a tool (e.g., clicking a context-menu action or saving a page to your reading list). This content is sent to our backend so the AI tools can summarize, analyze, or store it on your behalf. The extension does not silently scrape or monitor pages in the background.

    c. Content You Submit

    We process documents, text, URLs, PDFs, audio, and other content you upload or paste into our research tools so we can return AI-generated results. Saved items (research, notes, documents, citations, annotations) are stored in your account.

    d. Usage Activity

    We log which tools you use and the number of requests/tokens consumed in order to enforce plan limits, prevent abuse, and improve the Service. We also collect basic session data (anonymous session ID, referrer, user agent) for analytics.

    e. Payment Information

    Payments are processed by Stripe. We do not store your credit card number or full payment details. We receive a Stripe customer ID and subscription status to manage your plan.

    2. How We Use Your Information

    • To provide, maintain, and improve the AI research and writing tools.
    • To authenticate you and protect your account.
    • To enforce usage limits and prevent abuse.
    • To process payments and manage subscriptions.
    • To send transactional and product emails (welcome, billing, occasional re-engagement).
    • To respond to support requests and feedback.

    3. AI Processing and Third-Party Models

    To deliver AI-generated results, content you submit may be sent to third-party AI providers including Google (Gemini), OpenAI, Perplexity, and our orchestration provider (Lovable AI Gateway / Supabase Edge Functions). These providers process the content solely to return results to us and do not use your content to train their public models under our agreements. We do not sell your content.

    4. Data Sharing

    We do not sell your personal data. We share data only with:

    • Service providers who help us operate the Service (Supabase for database/auth/storage, Stripe for billing, Resend for email, AI model providers as described above).
    • Legal authorities when required by law, valid legal process, or to protect our rights and users.

    5. Data Storage and Security

    Data is stored on managed cloud infrastructure (Supabase / Lovable Cloud) with encryption in transit (HTTPS/TLS) and at rest. Access to your data is controlled by Row-Level Security policies so other users cannot read your content.

    6. Chrome Extension Permissions

    The extension requests the following permissions, used solely to power its features:

    • activeTab / tabs — read the URL/title of your current tab when you trigger an action.
    • scripting — read selected text on the current page when you invoke a context-menu action.
    • contextMenus — add right-click options to send content into the side panel.
    • sidePanel — display the Research Monkey AI workspace as a Chrome side panel.
    • storage — save preferences and last-used state locally via chrome.storage.local.
    • host permissions — allow the extension to be invoked on any site you are researching.

    The side panel embeds our hosted web application via an iframe. All extension scripts are bundled in the package; no remote JavaScript is dynamically injected into web pages.

    7. Data Retention

    We retain your account data and saved research for as long as your account is active. You can delete individual items at any time from the dashboard. To delete your account and all associated data, contact us at the email below.

    8. Your Rights

    Depending on your jurisdiction (e.g., GDPR, CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.

    9. Children's Privacy

    The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

    11. Contact Us

    Questions about this Privacy Policy or your data? Contact us at support@researchmonkey.ai.