Introduction
This privacy policy describes how ClipMate ("we", "our", or "us") collects, uses, and shares information about you when you use our application.
Information We Collect
ClipMate is designed with privacy as a core principle. The desktop app reads the current clipboard locally at startup and as it changes to keep the live current-source preview up to date. These reads are ephemeral: they are not persisted as clipboard history or uploaded by sync. When you explicitly submit Smart Paste, the current clipboard text or image and your prompt are sent to our configured completion endpoint for that request. When you explicitly add content to Notes, including through the desktop selection-capture shortcut, ClipMate persists it locally as a Note and, when you are signed in, may sync it.
If you choose to create an account, we collect your email address, device and membership records, and daily Smart Paste usage counters. This account data supports syncing Notes and saved Smart Paste prompts, enforcing plan limits, managing your subscription, and providing access to account features.
Clipboard and Saved Content
The current clipboard remains controlled by your operating system. ClipMate does not record each clipboard change as history. Notes and saved Smart Paste prompts are durable content you create deliberately; signed-in users can sync that content across devices. Smart Paste only processes the source and prompt you submit for that request.
Browser Extension
When you explicitly invoke the ClipMate browser extension, it reads text selected on the active page and, when no usable selection is available, reads the current clipboard. Browser permissions may not expose selections inside arbitrary cross-origin child frames; those selections use the clipboard fallback, and an Insert context-menu action reports an unavailable-frame error instead of modifying an inaccessible frame. It displays the resolved source in the current-source preview before a request. The extension does not maintain persistent access to page content or collect general browsing history or background clipboard history.
Google and Apple sign-in are provided through Supabase. During authentication, the selected identity provider and Supabase process the account information required to authenticate you, and the resulting Supabase session is stored locally in browser extension storage. The extension stores deliberate Notes, saved Smart Paste prompts, settings, and sync metadata in that storage. While signed in, Notes and saved prompts may sync through Supabase; the ephemeral current source is not persisted or synced unless you deliberately add it as a Note. Submitting Smart Paste sends the displayed source, your prompt, interface language, and authentication token to the configured ClipMate completion endpoint. A successful prompt submitted in the app automatically copies its generated result to the system clipboard. Context-menu Copy actions also copy generated output, while Insert actions insert it into the accessible editable field where they were invoked without changing the clipboard. Temporary browser session storage holds pending invocation metadata and the active app-tab reference; unfinished prompt drafts and generated results are not persisted. The extension does not include analytics, advertising, tracking, or profiling.
Third-Party Services
ClipMate does not add third-party analytics, tracking pixels, or advertising. Our Cloudflare hosting may inject Cloudflare Web Analytics to provide aggregate site traffic measurements. Smart Paste uses Cloudflare AI Gateway and a model provider to process submitted prompts and clipboard payloads. Gateway responses may be cached for up to one hour using a per-user request cache key. This transient provider cache is separate from ClipMate account data; account deletion does not purge it, and it expires automatically within that hour. For users with an account, we use third-party services to manage subscriptions and transactional emails.
Data Security
The security of your current clipboard and local app data depends on your device's security measures. Smart Paste requests and synced Notes are sent over HTTPS. We recommend using appropriate device security features such as encryption, passwords, and biometric authentication.
Changes to This Policy
We may update this privacy policy from time to time. We will notify users of any material changes by posting the new privacy policy on this page.
Contact Us
If you have any questions about this privacy policy, please contact us through our support page.