Privacy Policy

Overview

EchoLand is a browser extension built on one rule: your content stays in your own browser by default, and only the least needed to do what you ask is ever sent out. This policy explains what we handle, why, who it goes to, and what you can do.

What stays in your browser

Pages, pieces of browsing history, and the topics, memories, conversations, documents and briefs built from them are kept in the extension’s local storage (IndexedDB and extension storage) by default. We do not continuously sync your whole local database to our servers. A small amount of relevant content may be sent when you use an AI feature, as explained below.

You can turn sources off in Settings › Understanding & memory, export an .ei file, or clear local data. Turning a source off also clears the understanding derived from it as described in Settings. Uninstalling the extension normally removes its local data, so export anything you want to keep first.

What is sent when you ask or use AI features

When you ask a question, have a brief or document written, or use web search, the extension sends EchoCloud a small amount of context needed for that request (for example your question and short summaries of a few related records). EchoCloud passes it to an AI model provider to produce the result. We never send your whole history or a page’s raw code.

Current providers: DeepSeek (answers and web search) and typesafe.ai (small models that make decisions). Web search sends only the search terms; your browsing history never leaves your device. EchoCloud does not keep the content of these requests, only what is needed to meter your allowance (time, purpose, usage and cost). Each provider handles data under its own policy.

Account, allowances and payments

EchoLand requires an account. To sign you in, provide access, meter allowances, handle orders and support you, we keep your email, display name, account status, plan and dates, redeemed codes, order records and chosen pricing region. Usage records include time, purpose, volume and cost, not full question text.

Payments are handled by the third-party service shown at checkout. We keep order details such as amount, currency, method and status for reconciliation. Payment credentials such as Alipay account details, card data and wallet private keys are handled by the payment service; we will never ask for a wallet private key.

Obsidian

If you connect an Obsidian vault, EchoLand reads notes only when a question needs them, and only to answer it; it asks you before every write. Access to the vault is managed by your browser and can be removed in Settings at any time.

Diagnostics

When something goes wrong, the extension records diagnostic information locally. A report is sent to us only when you choose to copy it, so we can find the problem.

This website and trial applications

The demo uses sample data and does not submit questions you type there to a live AI service. The site stores choices such as language and theme in your browser. If you apply for a free trial, we collect the email, occupation, use case and language you enter. To prevent duplicates and abuse, we also process browser identification information and a hash of your IP address. Cloudflare Turnstile checks that the request is human; an email provider delivers application updates and invitations.

Service providers and international processing

Information needed for a feature may be handled by Cloudflare (hosting and human verification), Supabase / OpenStep Pass (accounts and trial applications), Resend (email), AI model providers and the payment service shown at checkout. Some may process information outside your country or region. We share only what is needed for the relevant feature; each provider also handles information under its own privacy policy.

Retention and security

Local content remains until you clear browser data, delete it in the extension or uninstall the extension. Account and entitlement details remain while your account is in use. Application, usage and order records are kept as needed for review, reconciliation, abuse prevention and applicable legal duties, then deleted or de-identified. We use access controls and protection in transit, but no online service can guarantee absolute security.

What we don’t do

• We don’t sell your data or use it for advertising.
• We don’t train models on your content.
• We don’t look at your screen without you knowing — only the visible area, and only when you ask.

Your choices and rights

You can turn data sources off, export or delete local data, and disconnect Obsidian in Settings. To access, correct or delete account or application details, or ask about order records, email [email protected]. We will verify and handle requests under applicable law; records we must legally keep may not be erased immediately.

Changes

When this policy changes we update the date on this page; significant changes are also announced in the extension.