Anymorph Inc. (주식회사 애니모프, "we", "us") operates the Qfollow Chrome extension (the "Service"). This policy explains what information the Service handles and why, how long we keep it, and what you can ask us to do. It applies wherever you use the Service, including under the Korean Personal Information Protection Act, the EU and UK GDPR, and California privacy law.
At a glance
When an AI answer finishes, the Service suggests two follow-up questions below it.
We handle only what the feature needs. Personal details are masked in your browser before anything reaches our server.
We do not ask for your name, email or any account.
We never sell your information or use it for advertising.
We do not collect anything for research.
1. What we handle and why
1-1. What the Service reads on the page
The Service runs only on ChatGPT (chatgpt.com), Gemini (gemini.google.com), AI Mode in Google Search (www.google.com/search) and the AI tab in Naver Search (search.naver.com). It reads the open conversation to tell when an answer has finished and to find the last question and answer. It also finds where on that page to show the suggestions.
1-2. What stays in your browser
Item
Purpose
A random install ID
To count the daily limit
When you accepted the notice, and whether the feature is on
To send nothing before you accept, and to respect it when you turn it off
Suggestions left today
To show in the popup
Daily counts (suggestions shown, picked, sent unchanged, sent edited, limit reached)
To show your usage in the popup
This never leaves your browser. Removing the Service deletes it.
1-3. What is sent to our server for the feature
Item
Purpose
When
The last question and answer, with personal details masked
To write follow-up questions
When the Service is on and an answer it saw being generated finishes (up to 30 times a day)
Which AI service it was (for example ChatGPT)
To check processing time and errors per AI service in our operating logs
Same as above
The random install ID
To count the daily limit
Same as above
The server passes only the first 1,000 characters of the question and the first 4,000 characters of the answer to the language model. After returning the suggestions, it does not store the question, the answer or the suggestions.
1-4. Records the server keeps
Usage counts: an irreversible transform of the random install ID, the date and a count. They enforce the daily limit and are deleted automatically after 7 days.
Operating logs: which AI service, processing time, amount of text processed (token counts) and error types. They contain no conversation content and no install ID, and are deleted after 30 days.
Connection data: your IP address is used to deliver the connection, but we do not store it.
1-5. What we do not handle
We use no cookies or advertising identifiers.
We never send earlier conversations, the conversation list in the sidebar, other tabs or other sites. Reopening a finished conversation sends nothing.
We do not seek sensitive information such as health data. If you write it in a conversation, our server still does not store it.
2. Legal bases
Consent: after you install the Service, a notice explains what is sent and why, and the Service sends nothing until you accept (GDPR Art. 6(1)(a); PIPA Art. 15(1)1). You can refuse; without consent you cannot use the suggestions.
Legitimate interests: usage counts and operating logs keep the Service available, prevent abuse and control cost (GDPR Art. 6(1)(f)). They hold no conversation content.
3. How long we keep it
Information
Kept for
Data in your browser
Until you remove the Service
Questions and answers sent to our server
Not stored after the suggestions are returned
Usage counts
7 days
Operating logs
30 days
Abuse monitoring by the language model provider
Up to 30 days (see International transfers)
When the period ends, the data is deleted so it cannot be recovered.
4. Sharing
We do not sell or share your personal information, including as "sale" and "sharing" are defined under California law. We disclose it only when the law requires, through due legal process.
5. Service providers
Provider
What they do for us
Microsoft Corporation (Microsoft Azure)
Runs our server in the Korea Central region and the language model
6. International transfers
To write the suggestions, information is transferred outside Korea as follows.
Country: United States. Depending on load, Microsoft may process a request in another country where it runs the model.
Items: the last question (first 1,000 characters) and answer (first 4,000 characters), with personal details masked
When and how: each time a suggestion is requested, over an encrypted connection (HTTPS)
Purpose: writing follow-up questions, and Microsoft's abuse monitoring
Retention: discarded right after processing, except that Microsoft may keep it in the United States for up to 30 days for abuse monitoring. It is not used to train models.
Safeguards: Microsoft's data protection terms, including the EU Standard Contractual Clauses.
How to refuse: turn off "Suggestions after answers" in the extension popup, or remove the Service. If you refuse, you cannot use the suggestions.
7. Your rights
You can ask to access, correct or delete your information, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent. In California you can also ask what we collect and ask us to delete it, and we will not treat you differently for asking. Contact us as shown below; we reply within 10 days in Korea and within the period your law sets elsewhere (30 days under the GDPR, 45 days under California law).
We do not ask for a name or an account, so our server records alone cannot identify you. Turning the feature off in the popup or removing the Service stops sending at once, and the usage counts left on the server are deleted automatically within 7 days.
In the EU or UK you can also complain to your data protection authority.
8. Security
Before anything leaves your browser, names, phone numbers, email addresses, Korean resident registration numbers, card numbers, bank account numbers and street addresses are masked. Masking follows fixed rules and may miss some details, so please turn the Service off for sensitive conversations.
Everything is sent over HTTPS.
Conversation content is not stored on our server, and install IDs are kept only in an irreversible form.
Service keys are held in a separate vault with the narrowest access needed.
The server serves only requests from this extension.
9. Children
The Service is not directed to children under 14, or under the minimum age in your country if that is higher, and we do not knowingly handle their information.
10. Chrome Web Store User Data Policy
The Service's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is used only to suggest follow-up questions after AI answers, and never for advertising, credit decisions or sale.
We post changes to this policy on this page 7 days before they take effect. For changes that matter to you, such as new items or purposes, we give 30 days' notice and ask for consent again where required.