Privacy policy for UltraAI in Sidebar
UltraAI in Sidebar by Ultra AI
Privacy policy for UltraAI in Sidebar
Ultra AI Browser Extension Privacy Policy
Effective date: Oct 23, 2026 · Last updated: Oct 23, 2026
- WHO WE ARE AND WHAT THIS POLICY COVERS
UltraChatAI.com ("Ultra AI", the "Company", "we", "us", "our"). This Privacy Policy (the "Policy") explains how the Ultra AI browser extensions for Google Chrome and Mozilla Firefox (the "Extension") collect, use, share and protect your personal information, and the choices you have. In this Policy, personal information means any information that identifies you or is reasonably linked to you.
This Policy covers only the Extension. The Ultra AI website (ultrachatai.com) and the Ultra AI mobile apps for iOS and Android are covered by our main Ultra AI Privacy Policy, available on ultrachatai.com. Your Ultra AI account, plan and purchases are managed on the website and apps, so the main Privacy Policy also explains how we handle account creation and payments.
What the Extension does. The Extension brings Ultra AI into your browser. It lets you ask an AI about, and write with, the content in front of you: the page, the tabs, the selected text or the text box you choose. Every Extension feature either sends content you chose to the chat as context, or delivers the AI's answer back where you are working. The Extension collects and uses data only for this purpose. It does not track your browsing, sell data, show ads, or use analytics or advertising tools.
IMPORTANT. Ultra AI is an AI platform. To answer you, we send certain personal information to the third-party AI model providers that power the Extension. This may include your name, approximate location, timezone, local date and time, your conversation history, and any page content, text, screenshots or files you choose to include. Please read Sections 2 and 4 carefully.
Summary
- Does the Extension show ads? No.
- Do you sell my personal information? No.
- Does the Extension send anything to advertising or analytics partners? No. The Extension uses no advertising, analytics or session-recording tools (such as Meta, Google Ads, Google Analytics, Microsoft Clarity, PostHog or Adjust).
- Does the Extension track my browsing? No. It reads a page, tab or text only when you ask it to.
- Who sees the content I share through the Extension? The AI model provider that generates the answer, and our hosting providers. Our staff only in the limited cases in Section 3.
- Do you train AI models on my content? No. We do not train AI models on your chats, files or the content you share.
- How do I control or delete my data? Use the Extension's settings (Section 10.1), the Data Preferences page (https://ultrachatai.com/app/datapreferences), or email contact@ultrachatai.com.
- THE PERSONAL INFORMATION THE EXTENSION COLLECTS
2.1 Information you give us
- Account and sign-in status. The Extension uses your existing Ultra AI account. It checks whether you are signed in on ultrachatai.com, so you don't need to sign in twice, and uses your account ID, name and email address (provided through our authentication provider, Clerk) to apply your plan and credits and keep your history.
- Your messages and model choice. The messages, prompts and instructions you write in the Extension, and the AI model you choose.
- Content you choose to share, depending on the feature:
* the title, web address and text of the page or tabs you ask it to summarize or discuss, and any text you select;
* text you choose to rewrite or reply to, such as the content of a text field or an email thread;
* the address and transcript of a video you ask about; and
* screenshots and files you choose to attach.
- AI responses. We store the AI's responses to your requests as part of your chat history.
- Support and privacy requests. Your name, email address and the content of your message when you contact us or use the Data Preferences page. We use it only to respond and to keep the records the law requires.
2.2 Information collected automatically
- IP address. We receive your IP address when the Extension sends a request to our servers. We use it to derive your approximate city or region and to keep the Services secure. We do not store your full public IP address in our application database.
- Browser and Extension information. Browser type and version, operating system, Extension version and language. We use it to make the Extension work correctly and to fix errors.
- Usage and error data. Which Extension features you use, credits consumed, errors and performance data. We use it to run and maintain the Extension, not for advertising.
- AI session data. To generate a response we process your name (if provided), approximate location, timezone, local date and time, and your conversation history. This may be sent to AI model providers as described in Section 4.2.
2.3 What the Extension does not collect
- It does not collect your browsing history and does not read pages or tabs you haven't asked about.
- It never reads password or payment fields, and it never submits forms or sends emails for you.
- It does not read cookies from other websites (see Section 8).
- It does not use advertising identifiers, tracking pixels, analytics SDKs or session-recording tools.
We do not intentionally collect sensitive personal information, such as health, racial or ethnic origin, religion, sexual orientation, precise geolocation or government ID numbers. Please do not include it in the pages, text or files you share. We do not extract biometric identifiers from screenshots or images you attach.
2.4 Browser permissions
The Extension requests only the browser permissions its features need, such as access to the active tab, the sidebar or side panel, local storage, the right-click menu and tab groups. Access to all websites is optional: we ask for it only when a feature needs it, and you can decline or remove it at any time in your browser's extension settings.
2.5 Firefox data consent
On Firefox, the Extension uses Firefox's built-in data collection consent. Firefox shows you, before installation or before a feature is used, the categories of data the Extension transmits (for example, website content and personal communications), and you can review or withdraw optional consents in Firefox's Add-ons Manager.
- HOW WE USE PERSONAL INFORMATION
We use personal information collected through the Extension only to:
- provide the Extension's features, including generating AI responses and summaries of the content you choose;
- recognize your Ultra AI account, apply your plan and credits, and sync your Extension chats with your history on the website and apps;
- keep the Extension and our Services secure, and detect and prevent fraud, abuse, spam and violations of our Terms of Service;
- fix errors and measure reliability and performance;
- respond to support and privacy requests; and
- comply with the law and enforce our rights.
We do not use data from the Extension for advertising, marketing measurement, building advertising profiles, or deciding your eligibility for credit, employment, housing or insurance.
Human access. Our staff do not read your chats or the content you share through the Extension, except where you ask us to (for example in a support request), where we need to investigate security issues, abuse or a reported violation, or where the law requires it.
We may create aggregated or de-identified statistics that can no longer be linked to you and use them to operate and improve the Extension. We will not try to re-identify them.
- HOW AND WHY WE SHARE PERSONAL INFORMATION
We do not sell personal information collected through the Extension, and we do not share it with advertisers, advertising or analytics partners, or data brokers.
4.1 When we share
- AI model providers, to generate responses (Section 4.2).
- Service providers that host and run the Services for us (Section 4.3).
- Authorities and others when required: regulators, courts, law enforcement and government bodies where the law requires; and where needed to protect the safety, rights or property of our users, the public or us, or to prevent fraud, malware, spam or abuse.
- Business transfers: in a merger, acquisition, financing or sale of assets, subject to this Policy. We will notify you before data collected through the Extension is transferred, and ask for your consent where the law or browser store rules require it.
- With your direction: for example when you share a chat link or export content.
4.2 AI model providers
When you send a message or run an action in the Extension, we send the following to the third-party AI model provider that powers the model you choose (or our default model), such as OpenAI, Anthropic, Google, xAI and others:
- your name (if provided);
- your approximate location, derived from your IP address;
- your timezone and local date and time;
- your current and earlier messages in the conversation; and
- the content you choose to include: page titles, addresses and text, selected text, text-field content, email threads, video transcripts, screenshots and files.
Data is sent only when you send a message or run an action. These providers process it on our behalf under their API terms. A current list of providers, with links to their terms and privacy policies, is at https://ultrachatai.com/app/llm-provider-terms. By accepting the Extension's first-run disclosure, you agree to this transmission.
4.3 Our service providers
- AI model providers (Section 4.2). Purpose: generate responses. Data shared: as listed in Section 4.2.
- Clerk. Purpose: sign-in and authentication. Data shared: account ID, name, email address, session details.
We require service providers to use personal information only to provide services to us, and not to retain, use or disclose it for their own purposes, to the extent the law requires.
- HOW LONG WE KEEP PERSONAL INFORMATION
We keep personal information only as long as we need it for the purposes in this Policy:
- Chats from the Extension, including page content, screenshots and files you attach, and AI responses: up to 12 months, or until you delete them, if earlier.
- Account information: until you delete your account.
- Privacy request records: 24 months.
- Truncated (Class C) IP addresses, which do not identify a person or device: up to 5 years.
- Browser and Extension version information: up to 5 years.
- Extension settings and session data on your device: until you sign out, use "Clear local data" or uninstall the Extension.
- Aggregated or de-identified data: may be kept longer.
When you delete your account, we delete or de-identify your account and chat history within 30 days, unless the law requires us to keep certain records. Copies in backups are overwritten on our normal backup cycle. Data already sent to AI model providers is subject to their retention periods.
- HOW WE PROTECT PERSONAL INFORMATION
We protect personal information with technical and organizational measures suited to its sensitivity, including:
- collecting only the data each feature needs; the Extension reads content only on your request and skips password and payment fields;
- encrypting data in transit (HTTPS/TLS) between the Extension, our servers and our providers;
- encrypting chat history, files and account data at rest;
- limiting staff access to people whose roles require it, with access logging;
- security policies, regular risk assessments and staff security training;
- intrusion detection and prevention, and keeping software up to date;
- separating systems that hold personal information from public networks; and
- packaging all Extension code in the version reviewed by the Chrome Web Store and Firefox Add-ons, with no remotely hosted code.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.
- CHILDREN'S PRIVACY
You may use the Extension if you have reached the age of majority in your jurisdiction. If you are 13 or older but under the age of majority, you may use the Extension only with the consent and direct supervision of a parent or guardian. Anyone under 13 must not use the Extension.
Because the Extension sends your name, location, timezone, conversation content and any content you share to AI model providers, minors must use it only under a parent or guardian's supervision. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe this has happened, contact us at contact@ultrachatai.com.
- COOKIES AND LOCAL STORAGE
The Extension does not use cookies, tracking pixels, Microsoft Clarity, Google Analytics, PostHog or any advertising or analytics tools.
To keep you signed in, the Extension reads only the Clerk session cookies on ultrachatai.com and clerk.ultrachatai.com and stores only a fingerprint of them. No cookie value is sent anywhere, and cookies from other sites are ignored.
The Extension's settings and session data are stored on your device with the browser's storage API. They stay there until you sign out, use "Clear local data" or uninstall the Extension.
- YOUR PRIVACY CHOICES: DO NOT SELL OR SHARE
The Extension does not sell your personal information, does not share it for cross-context behavioral advertising, and does not use it for targeted advertising. There is nothing you need to turn off in the Extension to opt out.
Your Ultra AI account is also used on our website and mobile apps, which are covered by our main Privacy Policy. To opt out of sale, sharing or targeted advertising for your account, open "Your Privacy Choices" from the Extension's settings menu, which takes you to the Data Preferences page (https://ultrachatai.com/app/datapreferences), or email contact@ultrachatai.com with the subject "Do Not Sell or Share". We also honor Global Privacy Control (GPC) signals as described in the main Privacy Policy.
We do not use or disclose sensitive personal information to infer characteristics about you, so we do not offer a separate "Limit the Use of My Sensitive Personal Information" link.
- YOUR PRIVACY RIGHTS AND CONTROLS
Depending on where you live, you may have the right to:
- know and access the personal information we hold about you, including which AI model providers received it;
- correct inaccurate personal information;
- delete your personal information;
- get a portable copy of your personal information;
- opt out of the sale or sharing of your personal information and of targeted advertising (Section 9);
- withdraw consent where we rely on it; and
- appeal a decision we make on your request.
To exercise these rights, use the Data Preferences page (https://ultrachatai.com/app/datapreferences) or email contact@ultrachatai.com. For requests other than opt-outs, we will verify your identity, usually by asking you to confirm a code sent to your account email address. You may use an authorized agent; we may ask the agent for your signed permission and ask you to verify your identity directly.
We will not discriminate against you for exercising your rights. We will not deny you the Extension, charge you a different price or give you a lower quality of service because you made a request.
10.1 Controls in the Extension
- First-run disclosure. Before the Extension reads any page, it explains what it reads, when, and where it is sent. We show it again whenever these practices change, and record which version you acknowledged.
- Site access. All-sites access is optional; without it, the Extension reads only the tab you invoke it on. You can turn the floating button off on any site ("Hide on this site") or allow it only on chosen sites.
- Email drafting. Each email feature asks for your consent once before it reads an email thread.
- Delete chats. Delete a chat from your chat history.
- Clear local data. Resets the Extension and erases its settings from your browser. Signing out does the same.
- Uninstall. Removes the Extension and its local data. It does not delete your Ultra AI account or server-side chat history; to delete your account, go to Settings > Account on ultrachatai.com or in the Ultra AI apps.
- Withdrawing consent. Turn off optional access, uninstall, or delete your data at any time. This does not affect processing that already happened.
- ADDITIONAL U.S. STATE PRIVACY RIGHTS
11.1 California
This section is our notice at collection and privacy policy for the Extension under the California Consumer Privacy Act, as amended (CCPA). In the past 12 months the Extension collected the categories below, from the sources and for the purposes in Sections 2 and 3, and we kept them for the periods in Section 5.
- Identifiers, such as name, email address and account ID. Source: you, through Clerk.
- Internet or other electronic network activity, such as messages; page titles, addresses and text you share; and browser and Extension data. Source: you, and your browser.
- Geolocation (approximate), such as city or region derived from your IP address. Source: your device.
- Audio, electronic or visual information, such as screenshots and images you attach. Source: you.
We disclose these categories only to the AI model providers and service providers in Section 4, for the business purposes in Section 3. We do not sell or share them, and we do not collect inferences to build profiles about you.
Your California rights are the rights to know, access, delete, correct, opt out of sale and sharing (including by GPC), and not to be discriminated against, as set out in Sections 9 and 10. You can use them yourself or through an authorized agent.
Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes.
11.2 Other U.S. states
If you live in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a similar law, you may have the right to:
- confirm whether we process your personal information and access it;
- correct inaccuracies;
- delete your personal information;
- get a portable copy;
- opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions with legal or similarly significant effects (the Extension does none of these); and
- in some states, get a list of the categories of third parties, or the specific third parties, to which we disclosed your personal information.
To exercise your rights, use the Data Preferences page or email contact@ultrachatai.com.
Appeals. If we decline your request, you can appeal by replying to our decision email with the subject "Appeal", or by choosing "Appeal a decision" on the Data Preferences page. We will respond within the time your state's law requires (usually 45 or 60 days). If you disagree with our answer, you may contact your state Attorney General.
- ADDITIONAL INFORMATION FOR EU, EEA AND UK RESIDENTS
Controller. Advertising.Tech FZ-LLC is the controller of personal information processed through the Extension. Contact us at contact@ultrachatai.com.
Representatives. EU-GDPR Representative: Rickert Rechtsanwaltsgesellschaft mbH, Colmantstrasse 15, 53115 Bonn, Germany, art-27-rep-350-23-1@rickert.law. UK-GDPR Representative: Rickert Services Ltd UK, PO Box 1487, Peterborough, PE1 9XX, United Kingdom, art-27-rep-350-23-1@rickert-services.uk.
Lawful bases.
- Contract: to provide the Extension's AI features and sync your history with your Ultra AI account.
- Consent: to read the page, tab, text, email thread or screenshot you choose, and to send your name, approximate location, timezone, local date and time, conversation history and that content to AI model providers (given in the Extension's first-run disclosure and, on Firefox, in its data collection consent).
- Legitimate interests: to keep the Extension secure, prevent abuse, fix errors and improve reliability, where these interests are not overridden by your rights.
- Legal obligation: to keep required records and respond to lawful requests.
Your rights. You can access, correct and delete your personal information, restrict or object to its processing, receive a portable copy, and withdraw consent at any time without affecting earlier processing. You can complain to your local supervisory authority, or in the UK to the Information Commissioner's Office (ico.org.uk).
- INTERNATIONAL DATA TRANSFERS
Our technology infrastructure is primarily maintained in the United States. When you use the Extension, your personal data, including your name, location, timezone, conversation history and shared content, may be transferred to AI model providers whose infrastructure is in the United States or other countries. For transfers from the EU/EEA/UK, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework where the recipient is certified.
- BROWSER STORE DISCLOSURES
Chrome Web Store Limited Use. Ultra AI's use and transfer of information received through the Chrome Extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use such data only to provide and improve the Extension's single purpose, do not transfer it except as needed for that purpose, for security, to comply with law, or in a business transfer with your consent, do not use it for advertising, and do not allow humans to read it except as described in Section 3.
Firefox Add-ons. The Firefox Extension follows Mozilla's Add-on Policies and declares the data it transmits through Firefox's built-in data collection consent.
- CHANGES TO THIS POLICY
We may update this Policy to reflect changes in the law or our practices. We will post the new version here with a new effective date, and notify you in the Extension or by email before material changes take effect. We will not use personal information we have already collected in a materially different way without your consent where the law requires it. If a change affects what the Extension reads or where its data is sent, the Extension will show its disclosure again and ask for your acknowledgment first.
- CONTACT US
For questions, requests or complaints about this Policy or the Extension's privacy practices:
- Privacy choices and requests: https://ultrachatai.com/app/datapreferences
- Email: contact@ultrachatai.com
- Website: ultrachatai.com