CHAT WORKSPACE · A MERCHAVELO PRODUCT

Privacy.

Updated October 24, 2026.

This notice covers Chat Workspace and its product website under Merchavelo. The operator is Zentara LLC, operating Merchavelo; privacy contact: support@merchavelo.com. This notice explains local storage, provider access, optional preference sync and the separate billing and license service.

Saved content stays in your browser

Saved conversations, prompts, notes, folders, bookmarks and search indexes are stored in the extension’s local browser storage. The combined extension shares one Library across five integrations and uses site and account boundaries for captured conversations. It does not automatically retrieve every historical conversation. A browser profile, backup or exported file can contain sensitive content; control access to those yourself.

Local storage and backup encryption

The extension encrypts Library records, search indexes, local settings and entitlement/device state with AES-256-GCM before persistent storage. It keeps automatically available, nonextractable encryption keys in this browser profile. This is not a passphrase-locked vault or OS keychain protection: trusted extension code can use the keys, and a compromised or copied browser profile is not a protection boundary verified by the extension. Removing the keys or clearing browser data can make saved data unreadable. Migration verifies encrypted copies before removing legacy plaintext records; this logical removal does not guarantee forensic erasure from browser files or backups.

When you choose an encrypted backup and supply a passphrase, the downloaded backup file uses separate AES-256-GCM encryption. This passphrase protects that backup file; it does not lock the live Library or ordinary conversation exports. Backups saved without a passphrase and ordinary exports are readable files. Keep your passphrase safe; support cannot decrypt an encrypted backup without it.

PDF export passes its document between extension pages through a temporary in-memory channel. Closing either page before transfer completes can interrupt the export. Printed or downloaded files remain under your control and are not protected by the extension’s local storage encryption.

Limited Use

Chat Workspace’s use and transfer of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use or transfer user data only to provide or improve the features described in this notice. We do not sell user data, use it for personalized advertising or credit decisions, or transfer it to data brokers.

Provider access and account identity

With your site permission, the extension reads supported provider pages to capture available conversation content and identify the account context. For ChatGPT, Claude and Grok, it may also make authenticated same-origin GET requests to that provider’s own account or session endpoint to establish the current account identity. When you capture the current ChatGPT conversation, it may request that conversation from ChatGPT’s own API, including available alternate branches, and fall back to the loaded page when that request is unavailable. These requests use your existing provider session; they do not import your account’s full conversation history. Captured content and account bindings stay in the local Library and are not sent to the license service.

It interacts with the page for the features you choose, including prompt insertion, queue sending and exports. The provider receives anything you send to it under its own privacy policy. If the extension cannot establish an account identity, do not assume account isolation has been confirmed. Check the provider account and conversation before capture or queue use.

The saved-chat sidebar on ChatGPT, Claude, Gemini and Grok displays account-matching saved chat titles, referenced folder names and the text you enter in its search field inside the provider page’s DOM. Scripts on that page can inspect those values through the sidebar’s open shadow root. This sidebar does not display full saved conversation bodies. The separate extension Library page provides a browsing surface outside the provider document.

On-device AI and downloads

Optimization and grammar depend on Chrome’s on-device model support. A model download may require your consent. Grammar has no cloud fallback. If on-device optimization is unavailable, an offered provider-tab workflow must be reviewed before sending; that provider then processes the submitted text.

Billing and licenses

Checkout and license actions contact the license API. The service holds the minimum purchase and licensing records needed for payment reconciliation, entitlements and abuse prevention: payment identifiers, plan, status, relevant timestamps, device identifiers and labels, and billing email where supplied by the payment provider. It does not host your conversation Library. Payment details are handled by the payment provider; this website does not collect card numbers.

For abuse prevention, the license service uses a keyed HMAC of the request IP address and a one-minute time bucket to derive a rate-counter identifier. Its counter table stores that derived identifier, a count and an expiry, rather than the raw IP address. Each counter is assigned an expiry 120 seconds after creation. Later API requests can remove expired rows; scheduled cleanup removes them in bounded batches. Expiry does not guarantee deletion at that exact time. These application counters are separate from hosting infrastructure logs.

The anticipated payment route is Stripe Managed Payments/Link. The actual seller, payment processor and payment terms are identified at checkout and on your receipt; this notice does not promise a particular seller arrangement. The payment provider and hosting infrastructure may process technical request logs under their own policies.

Keys and private purchase links

The license page keeps your entered key in page memory and sends it only to the configured license API for the actions you request. For extension activation, you submit your license key to the license API. The extension then stores a signed entitlement token and device state locally for later checks and sends the token for refresh. The activation path does not persist the entered license key. Treat your key as a secret.

A checkout return link contains a private claim secret in its URL fragment. The page removes that fragment from the address bar and uses this tab’s session storage for recovery after a reload or connection loss. After a successful copy, the Copy license key button attempts to remove the recovery secret from session storage. Manual copying does not remove it, and browser storage restrictions may prevent cleanup. Close the tab when finished, and avoid restoring or sharing a private checkout session. Browser session restoration may preserve session storage; do not share the original return link. This page sends no automatic license email.

Optional Chrome preference sync

Preference sync is off by default. If you enable it in Settings, Chrome may copy only theme, workspace width, font scale and word-count visibility between your signed-in browsers using Google’s Chrome sync service. It does not include saved conversations, prompts, chains, quick-action text, drafts, accounts, license keys, capture consent or queue state. Turning it off stops future preference replication; it does not erase copies already held by Chrome sync or other browsers. Your Library still needs its own backup.

Website storage and tracking

The site serves its own scripts, styles and fonts. It includes no analytics, tracking pixels or advertising cookies. Checkout retry identifiers and private claim recovery use session storage; keys are not stored in website local storage. Payment-provider pages have their own storage practices.

Backups, removal and requests

You control downloaded exports and backups. Removing the extension or clearing extension storage can erase local data. Keep a backup first. Removing a licensed-browser registration revokes that registration without deleting its Library. Drive sync is excluded from this release.

Contact support@merchavelo.com with “Chat Workspace privacy” in the subject to request access, correction or deletion of service-held personal data. Describe the request and include a receipt reference or billing email if relevant. Do not send a license key, card number, password, backup passphrase or private conversation. Requests are reviewed manually; we may ask for proportionate identity verification. We assess which records can be corrected or deleted and explain any records retained for licensing, payment reconciliation, fraud prevention or applicable legal obligations. This page and the hourly cleanup do not automatically erase an account. Local Library data remains on your device and cannot be retrieved or remotely erased by support.

Service retention

An hourly cleanup is configured for the license service. Each scheduled run can delete up to 500 expired request-rate counters and replace up to 500 device labels with “Inactive browser” when the registration has not been seen for more than 180 days. It changes the label only: the registration, identifiers and browser slot remain. The 180-day threshold is not a deadline for deleting a device or account. Expired counters may also be removed during API requests. A backlog can require multiple scheduled runs; configuration alone does not establish that a run has completed.

The cleanup does not delete license records, encrypted license keys or billing emails, customer/payment/subscription identifiers, checkout retry and claim records, webhook replay records, refund/dispute flags or device registrations. These records support entitlements, purchase recovery, payment reconciliation and prevention of repeated webhook processing. They have no fixed automatic deletion deadline in this service. We assess service-held personal data on a verified privacy request and retain records where still needed for those purposes or applicable legal obligations. Hosting and payment-provider records are separate and follow their own policies. No fixed statutory retention period or complete automatic erasure is promised.

Changes

We date material changes to this notice on this page. Changes do not remove rights that applicable law gives you.

Business address: 1209 Mountain Road PL NE, Ste N, Albuquerque, NM 87110, United States.