PRIVACY POLICY

Overview

Pensive is a personal knowledge indexing service that helps you save, organize, and search content you've read online. This privacy policy explains how we collect, use, and protect your information when you use our web application and browser extension.

Information We Collect

Account Information

• Email address (for account creation and authentication)
• Password (encrypted and stored securely)
• Subscription status and billing information (processed through Stripe)

Content You Save

• URLs of web pages you bookmark
• Page titles and metadata
• Extracted text content from saved pages
• Clean HTML content (with ads and tracking removed) which will be used for creating the mardown version
• Generated summaries and tags (premium feature using Google Gemini)

Technical Information

• Authentication tokens for browser extension
• Session data for maintaining login state
• Basic analytics (page views, feature usage) via Umami Analytics

How We Use Your Information

• Core Service: Store and index your saved content for personal searchability
• Content Enhancement: Generate summaries and tags using AI (available for all users)
• Account Management: Authenticate users and manage subscriptions
• Service Improvement: Analyze usage patterns to improve features
• Communication: Send important service updates (rare, no marketing)

Browser Extension Privacy

Our browser extension only processes data when you explicitly save a page by clicking the extension icon. You have control over how content is captured through your extension settings.

Content Extraction Methods

You can choose between two content capture methods in the extension settings:

• Full Page Content Capture (Default, Recommended): The extension tries to find and extract the main article of the page. We also capture the cleaned HTML content for better searchability and content preservation. This method is needed for sites with complex layouts like forums, Reddit, and Stack Overflow.
• Server-Side Capture Only: Extension sends only the page URL to Pensive servers, which fetch and process the content. This method will not work on sites with paywalls or complex layouts.

The extension:

• Only accesses the current tab when you click "save"
• Captures the cleaned HTML content when full page capture is enabled
• Sends extracted content directly to your Pensive account
• Stores only your authentication token and capture method preference locally
• Never tracks your browsing or collects data from pages you don't save
• Allows you to toggle content capture method at any time in the extension options

User Responsibility for Shared Content

When using Enhanced Content Capture, you are responsible for ensuring you do not share content you wish to keep private. While Pensive does not use, analyze, or share your content for any purpose other than providing the bookmarking service, you should exercise caution when saving pages containing:

• Personal information, emails, or private messages
• Sensitive data from logged-in pages
• User-specific content you don't want stored
• Any content you wouldn't want saved to your account

You have full control over what content gets saved through your choice of extraction method and which pages you choose to bookmark. You can switch between Enhanced Content Capture and Server-Side Capture Only at any time in the extension settings.

Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

• Service Providers: Google Gemini for AI features (all users)
• Payment Processing: Stripe for subscription billing
• Analytics: Umami Analytics for basic usage statistics (privacy-focused, no personal data)
• Legal Requirements: When required by law or to protect our rights

Data Security

• All data transmitted over HTTPS encryption
• Passwords are hashed using industry-standard algorithms
• Database hosted on secure, regularly updated infrastructure
• Regular security audits and updates
• Limited access to personal data by authorized personnel only

Data Management and Your Rights

You have full control over your data and can manage it through your account settings:

Data Access and Portability

• Access: View all data we have about you through your account dashboard
• Export: Download your saved content in standard formats (available in Import/Export settings)
• Portability: Export your data to move to another service
• Correction: Update or correct any inaccurate information

Data Deletion Options

We provide two levels of data deletion through your account settings:

• Delete All Content: Permanently removes all your saved bookmarks, content, and API tokens while keeping your account active. This action cannot be undone.
• Delete Account: Permanently deletes your entire account including all content, settings, session data, and subscription information. This action cannot be undone.

Important: Before using either deletion option, we strongly recommend exporting your data first as these actions are irreversible. You can find export options in the Import/Export tab of your account settings.

Individual Content Management

• Individual Bookmarks: Delete specific bookmarks from your library at any time
• Bulk Actions: Select and manage multiple bookmarks simultaneously
• API Token Management: View and revoke browser extension and integration tokens

Beta Service Notice

Data Retention

• Account data: Retained while your account is active
• Saved content: Retained until you delete it or close your account
• Session data: Automatically expires after inactivity
• Deleted data: Permanently removed within 30 days
• Beta notice: Data may be removed during service updates or migrations with advance notice when possible

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes via email or through the service. Your continued use of Pensive after changes constitutes acceptance of the updated policy.

Legal Jurisdiction and GDPR Compliance

Pensive is operated from Stockholm, Sweden, and our data processing activities are governed by Swedish data protection laws and the European Union's General Data Protection Regulation (GDPR).

GDPR Rights for EU/EEA Users

Under GDPR, you have additional rights including:

• Right to be forgotten: Request complete deletion of your personal data
• Data protection authority complaints: File complaints with your local supervisory authority
• Lawful basis transparency: Our processing is based on legitimate interest for service provision and contract performance
• Data minimization: We only collect and process data necessary for our services

Data Processing Legal Basis

• Account creation and management: Contract performance
• Content saving and search: Contract performance and legitimate interest
• AI features and summarization: Legitimate interest and user consent
• Payment processing: Contract performance and legal obligation
• Service improvement: Legitimate interest

International Data Transfers

Some of our service providers (Google Gemini for AI features, Stripe for payments) may process data outside the EU/EEA. These transfers are protected by adequacy decisions, standard contractual clauses, or other appropriate safeguards as required by GDPR.

Contact

If you have questions about this privacy policy or how we handle your data, please contact us at: arash.thr@live.com

Data Protection Officer contact: For GDPR-related inquiries, EU/EEA users can reach our data protection contact at the same email address.