Privacy Policy

1. What Click2spec captures, and when

Click2spec captures only while you are actively recording, and only on a website you explicitly approved for recording (Chrome asks you, per site). While recording it collects:

• Your actions on that site — clicks, navigation between screens, options you pick, and the text you type into form fields (see masking below).
• The structure and look of the screens you visit — headings, labels of buttons and menus, form fields and their options, table headers with one sample row, layout geometry, colors, fonts, icons, charts, and which web technologies the site uses.
• Screenshots of the visible tab at each step, when Chrome allows it (it requires you to have clicked the Click2spec toolbar icon on that tab).
• Notes you type into the recorder, and an optional one-line description of the app you provide.

It does not capture anything on sites you haven't approved, and it never records sign-in pages of identity providers (Okta, Microsoft, Google sign-in, Auth0 and similar).

2. Sensitive data protections

• Never captured: the values of password fields (including after a “show password” toggle), one-time-code fields (including codes split into separate boxes), card-number, card security code (CVC) and card-expiry fields.
• Masked inside the page, before anything is stored: email addresses, card-like numbers, SSN-style IDs, phone-number patterns, IBANs, and API-key or token-like strings found in captured text, including page titles and addresses.
• Table sample rows keep only their format: to document what a column looks like, Click2spec records its shape (for example $##,###.## or ‹text›), not the actual values, and record pages are named by type. Other text on screen — headings, labels, button text, and what you type into ordinary fields — is captured as it appears, which is why everything passes through the review step.
• Screenshots are not masked. They show the screen exactly as it looked. Before generating, the review step lets you inspect every screenshot full-size, drop any of them, and delete any step or screen specification.

3. Where your data is stored

Everything is stored locally in your browser's extension storage on your device: the current recording, your saved packs (the Library), your settings, and per-site app descriptions. Click2spec does not add its own encryption to this storage; it is protected by your computer account like the rest of your browser profile. If you enter an AI provider API key, it is stored in the same local storage, unencrypted, and used only as described in section 4.

4. When data leaves your device

• Offline template (default): never. Documents are generated entirely on your device.
• Smart synthesis (optional): when you generate a pack, switch it to another format, or ask to regenerate a saved pack, Click2spec sends the structured capture (text and structure — no screenshots) directly from your browser to the endpoint you configured: Anthropic, OpenAI, or a custom OpenAI-compatible endpoint you specify (for example your company's gateway or a self-hosted model). That provider's handling of the request is governed by your agreement with that provider. Click2spec's developer never receives it.
• Exports: files you download (Markdown, ZIP, JSON) go wherever you put them.
• License checks (Free and Pro): both plans use a license key from Lemon Squeezy. Click2spec sends the key you pasted to Lemon Squeezy's license service when you activate it and about twice a day while you use the extension. For a Pro key it also sends a label for this browser (for example “Chrome · 1a2b3c4d”, a random id). For a free key it sends a short label each time a new pack is generated (for example “pack · 5f3e1a2b”, a hash that cannot be turned back into the pack's name), because Lemon Squeezy keeps the count of your 2 free packs. Lemon Squeezy answers with the subscription status and the email it was bought with, which is kept in local storage to show you which license is active. No captured data, packs or screenshots are ever included.

Payments

Pro subscriptions are sold and processed by Lemon Squeezy, which acts as the merchant of record: it collects your payment details, billing address and email, charges your card and handles sales tax and VAT. Click2spec's developer never sees your card details. Lemon Squeezy's handling of that information is governed by its own privacy policy. You can manage or cancel your subscription at any time from the Lemon Squeezy customer portal (linked from the extension's Plan screen and your receipt email).

Click2spec has no analytics, no telemetry, no tracking, no advertising, and no account system. The only thing tied to you is the email you give Lemon Squeezy to receive a license key; the free plan's pack count is kept by Lemon Squeezy against that key.

5. How data is used

Captured data is used for one purpose only: producing the context documents you ask for. It is not sold, not transferred to third parties (other than the AI endpoint you choose, at your request), not used for advertising, not used to determine creditworthiness or for lending, and not used to train AI models by us.

6. Your control and deletion

• Discard deletes the current recording; the Library's delete button removes a saved pack.
• Click2spec's Settings list every site it can access, each with a one-click Revoke (you can also do this in Chrome's extension settings).
• Remove license here (Settings → Plan) releases this browser's seat with Lemon Squeezy and deletes the stored license key.
• Uninstalling the extension deletes all of its locally stored data.

7. Children

Click2spec is a professional tool and is not directed to children under 13.

8. Changes

If this policy changes, the updated version will be published at this address with a new "last updated" date. Material changes to what leaves your device would be announced in the extension's release notes before taking effect.

9. Contact

Questions about privacy: [email protected] · Click2spec is provided by Julio Staude, Argentina. See also the Terms of Service.