Privacy Policy

Last updated: February 2026

    TL;DR: Your .docx files never leave your browser. However, the
    extracted contract text is sent to a third-party AI provider for analysis.
    With Google Gemini, text goes directly to Google. With OpenRouter, text goes to
    OpenRouter which routes it to the underlying model provider (e.g. Anthropic, Google,
    Meta). We (the extension developer) never see, store, or have access to any of your data.
  

What This Extension Does

Vibe Legal Redliner helps you redline contracts by comparing them against your playbook rules using AI. The extension processes your .docx files locally in your browser, sends the extracted text to an AI provider you choose, and applies the AI's suggested edits as tracked changes back into the document.

Important: The plain text extracted from your contract is sent to a third-party AI provider for analysis. When using OpenRouter, your text passes through OpenRouter and then to the model provider hosting your selected model. If your documents contain sensitive or confidential information, review the privacy policies of all providers in the chain before using this extension.

How Your Data Flows

You upload a .docx file. The file stays in your browser's memory and is never uploaded anywhere.
The extension extracts the plain text from the file locally using bundled libraries.
The extracted text is sent from your browser to your chosen AI provider using your own API key. With Google Gemini, the request goes directly to Google. With OpenRouter, the request goes to OpenRouter, which routes it to the model provider hosting your selected model (e.g. Anthropic, Google, Meta). We are not an intermediary in either case.
The AI provider returns suggested edits as structured data (JSON).
The extension applies those edits as tracked changes to the original .docx file, entirely locally in your browser.
You download the redlined document to your device.

What We Collect

Nothing.

We have no servers that receive your data.
We do not see your documents, your contract text, your playbooks, or your API keys.
We do not collect analytics, telemetry, usage data, or personal information of any kind.
We have no tracking pixels, cookies, or third-party scripts.

What Is Stored on Your Device

The following data is stored in your browser's extension storage (on your device only):

API key — stored in Chrome's extension storage. You can choose "session only" mode in Settings so the key is automatically cleared when the browser closes.
Preferences — your selected AI provider, model, and display preferences.
Custom playbooks — any playbook rules you create.

None of this data is transmitted to us or to any third party. You can clear it at any time by removing the extension.

Third-Party AI Providers

When you use this extension, your contract text is sent to the AI provider you select. The extension currently supports:

Google Gemini (direct) — Google's API Terms of Service
OpenRouter (routing service) — OpenRouter's Privacy Policy. OpenRouter forwards your request to the provider hosting your selected model (e.g. Anthropic, Google, Meta, Mistral). That provider's own privacy policy also applies.

You provide your own API key. We do not proxy, intercept, or log these requests. When using OpenRouter, your text may be processed by both OpenRouter and the underlying model provider — review both providers' data handling practices.

What Stays Local

Your original .docx file (never uploaded)
The redlined output document (generated locally)
All document processing libraries (Pyodide, JSZip, python-docx) are bundled with the extension and loaded locally — no external CDNs
Your API key and preferences

Changes to This Policy

If we change this policy, we will update the date at the top. Material changes (such as adding new third-party services) will be noted in the extension's changelog.

Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository.

This extension is open source. View the source code at github.com/sarturko-maker/vibe-legal-redliner.