Privacy Policy

1. Introduction

GauchoGrid ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy applies to our website (gauchogrid.com) and all software applications, browser extensions, and tools developed by GauchoGrid (collectively, the "Products").

1.1 Who We Are

GauchoGrid is the trade name under which an independent developer designs and distributes privacy-first browser extensions and data tools. For any data protection inquiries, to exercise your rights under applicable privacy laws, or to identify the responsible party for a specific matter, please contact us through our support page at gauchogrid.com/support. We will respond to identification requests from supervisory authorities and to data subjects exercising statutory rights, and will provide further identifying information where legally required.

2. Our Core Privacy Principle: Local-First Processing

We design our Products so that all data processing happens entirely on your local device.

• No Data Exfiltration: Your data never leaves your browser or device.
• No Cloud Dependency: We do not use cloud-based APIs to process the content you interact with.
• Zero Access: We cannot see, access, or recover any data you process using our Products.

3. Data We Do NOT Collect

To be explicit, across all current and future Products, we do not collect:

• User Content: The specific data, files, or text you process, export, or create.
• Browsing Activity: The websites you visit or your browsing history.
• Personal Information: Your name, email, or identity (unless you voluntarily contact us for support, or voluntarily submit information through our in-app feedback form).
• Telemetry: Usage statistics, click-tracking, or behavioral analytics.
• Identifiers: IP addresses (on products) or unique device IDs.

4. Technical Permissions

Our Products request browser permissions necessary for their core functionality. These permissions are declared in the extension's manifest, which is publicly auditable in the Chrome Web Store.

• Host Access (<all_urls>): Required for the extension to detect and process tables on any webpage you visit. This is a standard permission for data extraction tools. Although this permission grants the technical ability to run on any page, our Products use it exclusively to read table data on pages where you actively invoke the extension. No data from any page is collected, transmitted, or stored by GauchoGrid.
• Active Tab / Scripting: To interact with and process content on the page you are actively viewing.
• Storage: To save your user preferences and settings locally on your device.
• Downloads: To save processed data directly to your device.
• Notifications: To display local status messages (e.g., export completion confirmations).

Network Restrictions and What These Permissions Do NOT Enable

Our extension declares a Content Security Policy (CSP) in its manifest that restricts all outbound network connections from extension pages (popup, options, and background processes) to three destinations only: the extension itself, the LemonSqueezy API, and Google Forms. This CSP is enforced by the browser and cannot be overridden by the extension's own code.

• LemonSqueezy API: used exclusively for license key validation (PRO version). No user-generated data, browsing activity, or device identifiers are transmitted.
• Google Forms: used exclusively to receive bug reports and feedback that you actively submit through our in-app feedback form. No data is sent to this endpoint unless you open the feedback form, write a description, and click submit. The form does not collect your email, name, or any identifier; the URL of the page you were on is included only if you explicitly opt in via a checkbox, and is sanitized before submission to remove tokens, IDs, and credential-like patterns. See Section 5.1 for details.

The extension's content script, which reads table data from the web pages you visit, does not initiate any network requests to GauchoGrid servers or any third party. It processes data locally and passes it to the extension's internal pages for export. The complete extension package is available for review in the Chrome Web Store.

Our Products do not request the tabs permission (which would allow enumeration of all open tabs) or the webNavigation permission (which would allow monitoring of browsing patterns). We do not use any analytics, telemetry, or tracking code within the extension.

5. Licensing & Payments (PRO Versions)

For Products requiring a paid license, we use LemonSqueezy as our merchant of record for secure payment processing and license management.

• Payment Data: LemonSqueezy processes all payment details (credit card information, billing address). GauchoGrid never receives, stores, or has access to your payment information.
• Email Address: Upon purchase, we receive the email address you provided to LemonSqueezy solely for the purpose of delivering your license key and transactional receipts. The legal basis for this processing is contractual necessity (GDPR Art. 6(1)(b)). We do not use this email address for marketing communications.
• License Validation: To activate PRO features, the Product communicates with LemonSqueezy's API to verify the license key status. This request contains only the license key — no user-generated data, browsing activity, or device identifiers are transmitted.
• Retention: We retain your email address for the duration of your active subscription plus 30 days after cancellation or expiration. After this period, your email is deleted from our records unless retention is required by applicable tax or accounting regulations.
• Deletion: You may request deletion of your email address at any time by contacting us through our support page. Upon such request, we will delete your email within 30 days, subject to legal retention obligations.

5.1 Feedback Submissions

The extension includes an optional in-app feedback form that you may use to report bugs or request support for sites where table extraction does not work as expected. The form is fully voluntary and is not invoked by the extension on its own.

When you submit feedback, the following information is sent to a Google Form hosted in a GauchoGrid account:

• The text description you wrote (up to 500 characters).
• The domain of the page you were on (e.g., example.com), without path or query parameters.
• Technical metadata to help us reproduce the issue: the number of tables our extension detected on the page, a structural summary of HTML elements present on the page, your PRO status (true/false), the extension version, and a submission timestamp.
• Optionally, and only if you actively check the corresponding checkbox: the full URL of the page you were on, sanitized to remove tokens, identifiers, and credential-like patterns before submission.

The form does not collect your name, email address, or any other identifier we could use to contact you. We have no ability to follow up on a feedback submission unless you separately reach out via our support page.

• Legal basis: consent (GDPR Art. 6(1)(a)). Submission is entirely voluntary and is initiated by you each time.
• Sub-processor: Google LLC processes feedback submissions on our behalf as the operator of Google Forms. See Section 7.6 for transfer details.
• Retention: feedback responses are retained for a maximum of 12 months from submission, after which they are deleted, unless retention is required for an ongoing matter (e.g., a bug investigation).
• Deletion: because feedback is submitted without persistent identifiers, deletion requests must include enough information to locate your specific submission (e.g., approximate date and content of the feedback). You may submit deletion requests through our support page.

6. Website & Third-Party Services

• Analytics: The GauchoGrid website does not use Google Analytics, tracking pixels, fingerprinting, or any behavioral analytics tools.
• Cookies: We do not use tracking or advertising cookies. The only cookies that may be present are those strictly necessary for the checkout process (set by LemonSqueezy).
• Server Logs: Our website is hosted on Cloudflare Pages, which acts as a content delivery network (CDN) and security layer. As part of standard CDN and security operations, Cloudflare may temporarily process visitor IP addresses for purposes such as DDoS protection, threat detection, and performance optimization. The legal basis for this processing is legitimate interest (GDPR Art. 6(1)(f)). On our plan, GauchoGrid does not have access to persistent request logs containing IP addresses; visibility is limited to short-term security event records (retained by Cloudflare for up to 24 hours) and aggregated, non-identifying analytics. Cloudflare's own data handling is governed by their privacy policy and data processing terms.

7. Regulatory Compliance

7.1 Our Data Minimization Approach

GauchoGrid minimizes data collection to the absolute technical minimum. The only personal data we may process is:

• Your email address (if you purchase a PRO license) — see Section 5
• Your IP address (processed transiently by our hosting and CDN provider for security purposes) — see Section 6
• The text and metadata you voluntarily submit through our in-app feedback form — see Section 5.1
• Your email content (if you contact us for support) — see Section 7.5 below

7.2 Data You Extract Using Our Products

The data you extract, process, or export using our Products may contain personal data subject to data protection regulations. GauchoGrid acts neither as a data controller nor as a data processor with respect to this data, as our Products process it entirely on your local device and we never access, transmit, receive, or store it.

You are the sole data controller for any personal data you extract using our Products. It is your responsibility to ensure that your collection and processing of such data complies with all applicable data protection laws, including obtaining any necessary legal basis, fulfilling transparency obligations, and respecting data subject rights.

7.3 Your Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, you have the following rights regarding the limited personal data we process:

• Right of access: You may request confirmation of what data we hold about you.
• Right to rectification: You may request correction of inaccurate data.
• Right to erasure: You may request deletion of your data, subject to legal retention obligations.
• Right to restrict processing: You may request that we limit how we use your data.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interest.
• Right to lodge a complaint: You have the right to lodge a complaint with the data protection supervisory authority in your country of residence. A list of EEA supervisory authorities is available at edpb.europa.eu.

To exercise any of these rights, contact us through our support page at gauchogrid.com/support. We will respond within 30 days.

7.4 Your Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), provides you with specific rights regarding your personal information. You have the right to know what personal information we collect, to request its deletion, to correct inaccurate personal information, and to opt out of the sale or sharing of personal information.

GauchoGrid does not sell your personal information. GauchoGrid does not share your personal information for cross-context behavioral advertising. To exercise your CCPA rights, contact us through our support page.

7.5 Support Communications

If you contact us for support, we process the content of your communication solely to resolve your inquiry and to maintain a record for quality assurance and dispute resolution purposes. The legal basis is contractual necessity (GDPR Art. 6(1)(b)) and legitimate interest (GDPR Art. 6(1)(f)). We retain support communications for a maximum of 12 months after resolution, after which they are deleted. You may request earlier deletion at any time, subject to any ongoing dispute or legal obligation.

7.6 International Data Transfers

Three limited categories of personal data may be transferred outside the European Economic Area (EEA) when you use our Service:

LemonSqueezy (United States) — PRO purchases. When you purchase a PRO license, your email address is processed by LemonSqueezy, our merchant of record, which operates from the United States. This transfer is protected by Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46 GDPR, as set out in LemonSqueezy's Data Processing Agreement.

Google LLC (United States) — feedback submissions. When you voluntarily submit feedback through our in-app feedback form, your responses are processed by Google LLC, which operates Google Forms from the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognized as providing an adequate level of protection for personal data transferred from the EEA (Article 45 GDPR).

Cloudflare, Inc. (United States) — website hosting and CDN. Our website is hosted on Cloudflare Pages, which acts as a content delivery network and security layer for visitors worldwide. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, which provides an adequacy basis for transfers of personal data from the EEA to the United States (Article 45 GDPR). The processing of visitor IP addresses by Cloudflare is limited to the operational and security purposes described in Section 6.

GauchoGrid does not independently transfer personal data outside the country where it is originally collected, except as described above.

8. Changes to This Policy

As GauchoGrid grows, we may update this policy. Any changes will be reflected by the "Last updated" date at the top of this page. Significant changes will be announced via our website or within the Products.

9. Contact Information

If you have questions about this Privacy Policy or need to contact us regarding legal or compliance matters, please use our contact form at: gauchogrid.com/support.