Privacy Policy
Ontoic is a thinking tool, not a surveillance product. This policy explains exactly what data we collect, why, and what you can do about it. Plain language. No legalese.
Who we are
Ontoic is a knowledge graph application built to help you think better. For questions about this policy or your data, contact us at privacy@ontoic.com.
What we collect
- Account information
- When you sign in via Clerk, we receive your email address and a unique account identifier. We do not receive or store your password.
- Authentication session
- The Chrome extension reads a session cookie (
__session) from ontoic.com to authenticate API requests on your behalf. This cookie is managed by Clerk and is not used for tracking. - Captured content
- When you explicitly save a page or piece of content, Ontoic extracts the text and sends it to the Ontoic API to be processed into your knowledge graph. Content is only captured on your explicit action — Ontoic does not passively monitor or record your browsing.
- Knowledge graph data
- Your notes, concepts, connections, and queries are stored in your personal knowledge graph on Ontoic's servers. This data is associated with your account and is not shared with other users.
- Usage preferences
- The extension stores local preferences (such as UI state) in Chrome's extension storage. This data remains on your device and is not transmitted to our servers.
What we do not collect
- Your browsing history or a record of pages you visit without explicitly saving
- Keystrokes, mouse movements, or passive user activity
- Financial or payment information
- Health information
- Personal communications such as email or chat content
How we use your data
Data collected by Ontoic is used solely to provide the service:
- To build and maintain your personal knowledge graph
- To process queries against your knowledge graph
- To authenticate your session and keep your account secure
- To improve the reliability and performance of the service
We do not use your data for advertising, profiling, or any purpose unrelated to providing Ontoic.
LLM processing
Ontoic uses large language model APIs to process and analyse your content — to generate summaries, extract concepts, and answer queries about your knowledge graph.
When content is sent to an LLM API for processing, it is subject to the privacy policy and terms of service of that third-party provider. We use providers that offer data processing agreements and, where available, opt-out from training data use.
- Content you capture and query may be transmitted to LLM API providers as part of processing.
- Each provider has its own policies regarding whether submitted content may be used for model training. We use providers that, by default, do not use API inputs for training — but we cannot guarantee the policies of third-party services.
- We recommend you do not capture sensitive personal, financial, or confidential information if you have concerns about third-party AI processing.
Storage and security
Your knowledge graph data is stored on secure servers. We use encrypted connections (HTTPS) for all data in transit.
We retain your data for as long as your account is active. If you delete your account, your data will be deleted from our systems within 30 days.
Your rights
You have the right to:
- Access the data Ontoic holds about you
- Request correction of inaccurate data
- Request deletion of your account and all associated data
- Export your knowledge graph data
To exercise any of these rights, contact us at privacy@ontoic.com. We will respond within 30 days.
Chrome extension permissions
- sidePanel
- Displays your knowledge graph summary and graph preview alongside the page you are reading. Persists between tabs for a continuous research experience.
- tabs
- Associates captured content with its source URL for citation within your knowledge graph.
- activeTab
- Accesses page content only when you explicitly trigger a capture action.
- scripting
- Extracts meaningful content from the active page at the moment of capture.
- storage
- Saves your local preferences and session state within the browser.
- cookies
- Reads the
__sessionauthentication cookie from ontoic.com to authenticate API requests.
Changes to this policy
We may update this policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will notify users via the extension or by email.