Nexus Autofill Privacy Policy

Status: draft. Chrome Web Store requires every extension that
handles personal or sensitive user data to link a publicly hosted
privacy policy from the Developer Dashboard listing. A file sitting in
this repo does not satisfy that requirement. Before submitting: publish
this content at a real URL you control, then set it in the dashboard's
"Privacy practices" tab and update the privacy policy link in
src/options/Options.jsx.

What Nexus Autofill is

Nexus Autofill is a Chrome extension that helps you save profile details
to your CodersNexus account and fill supported web forms after you
review what is about to be entered. Registered free users can create one
profile; additional profiles require a paid plan. Unregistered users can
only fill personal, contact, and address details. It does not submit
forms for you.

What data Nexus Autofill collects, and where it lives

DataWhere it's storedLeaves your browser?Guest profile data, limited to personal, contact, and address detailsLocal extension storage in this browserNo, unless you later connect/register and save data to your accountRegistered profile data, such as name, contact details, address, work history, skills, and custom fieldsCodersNexus/Nexus Autofill backend, scoped to your account/license identityYes, sent to the backend when you create or update profilesPer-site field mapping rules you saveExtension storage and/or Nexus Autofill backend, depending on the current feature pathOnly when saved or synced through backend-backed featuresForm-fill history, such as which sites you used Nexus Autofill on, when, and how many fields were filledExtension storage and/or Nexus Autofill backend, depending on the current feature pathOnly for explicit fill/review activityLicense/auth tokenchrome.storage.localSent to CodersNexus APIs to verify access and authorize profile requests

Nexus Autofill does not record general browsing history. It only
records activity when you actively use the extension's fill/review
feature.

Where data is sent, and why

License verification. When you activate Nexus Autofill or during a
periodic background re-check, your license/auth token is sent to:

https://nexusbackend-ookk.onrender.com/api/subscriptions/verify

This confirms your subscription or access status.

Profile storage. Guest profile details are limited to personal,
contact, and address details and stay in local extension storage.
Registered profile details are sent to the Nexus Autofill backend so
your saved form details are available through your CodersNexus account.
Requests are authorized with your license/auth token and scoped to your
account identity.

What Nexus Autofill never does

• Never sells or shares your data with advertisers or data brokers.

• Never collects your general browsing history.

• Never fills highly sensitive fields, such as government ID, passport,
  tax ID, or bank details, without your explicit per-field confirmation.

• Never submits a form on your behalf.

• Never sends full webpage content anywhere. It only uses the specific
  field metadata needed to detect and map form fields.

Your controls

• Export: Options -> Security -> "Export as JSON" downloads your
  Nexus Autofill profiles, rules, and history as JSON.

• Delete: Options -> Security -> "Delete everything" removes your
  extension data and clears your license/auth token from this browser.
  Your CodersNexus subscription itself is unaffected.

Contact

sonu.kumar@codersnexus.com

Data Usage Disclosure Worksheet

The Chrome Web Store "Privacy practices" tab asks you to declare which
data categories the extension handles. Suggested answers, to double-check
against the current build before submitting:

CategoryCollected?NotesPersonally identifiable informationYesName, address, contact details, work history, and other user-entered profile fieldsHealth informationNoFinancial and payment informationNoNo payment data is entered into the extension; purchases happen separately on CodersNexusAuthentication informationYesLicense/auth tokenPersonal communicationsNoLocationNoWeb historyNoOnly explicit fill events, not browsing historyUser activityYesForm-fill history for sites where the user actively uses Nexus AutofillWebsite contentYesField metadata, such as labels, names, and input types, from pages where the user uses the extension

Also confirm in the dashboard:

• "I do not sell or transfer user data to third parties outside of the
  approved use cases" - true as built.

• "I do not use or transfer user data for purposes unrelated to my
  item's single purpose" - true as built.

• Certify data is transmitted over HTTPS only for production APIs.