Privacy Policy

InputLayer helps users improve prompts and AI inputs across supported platforms. In providing that service, we may process account information, billing-related data, usage information, device information, support communications, and user-submitted content.

By using our services, you acknowledge that your information may be processed in accordance with this Privacy Policy.

a. Account Information

We may collect your name, email address, authentication identifiers, account preferences, and subscription status.

b. User Content

We may process prompts, inputs, outputs, saved history, settings, and other content you submit through InputLayer.

c. Technical Information

We may collect IP address, browser type, operating system, device identifiers, app version, extension version, usage logs, error logs, and diagnostic data.

d. Payment and Subscription Information

Payments may be processed by third-party payment providers. We do not store full card details on our own systems unless expressly stated otherwise by the payment provider integration.

The InputLayer browser extension operates on ChatGPT, Claude, Gemini, and Perplexity. The following describes specifically what the extension accesses, stores, and transmits.

a. What the extension reads from AI platforms

When you click the enhance button, the extension reads the text you have typed into the AI platform's input field. If you are continuing an existing conversation, the extension may also read the recent message history visible on that page (up to the last 3 exchanges) to provide context-aware follow-up enhancement. This content is sent to the InputLayer API solely to generate an improved prompt and is not stored beyond what is described in section 2b.

b. What the extension stores locally

The extension stores the following in your browser using chrome.storage: your authentication token and session identifiers, your focus area preference (e.g. developer, student), and the position of the enhancement button on screen. No prompt content is stored locally by the extension.

c. What the extension transmits

The extension transmits your prompt text, detected platform, output type, and authentication token to the InputLayer API (theinputlayer.com) to perform enhancement. No data is sent to any other third party directly from the extension.

d. Cross-site tracking

InputLayer does not use the extension to track your activity across websites. Data read from AI platforms is used only to enhance the prompt you are actively writing and for no other purpose.

We use personal data and service data to:

• provide, operate, and improve InputLayer,
• authenticate users and secure accounts,
• process requests and generate enhanced prompt outputs,
• manage subscriptions, billing, and customer support,
• monitor performance, reliability, abuse, and fraud,
• comply with legal obligations, and
• develop new features, safeguards, and service improvements.

Where applicable, we process data on one or more of the following bases: performance of a contract, legitimate interests, legal obligations, consent, and protection of our rights, users, and services.

If you are located in a jurisdiction that requires a specific legal basis for processing, this section applies to the extent required by law.

We do not sell your personal data.

We may share data with:

• cloud infrastructure and database providers,
• authentication and security providers,
• AI model and inference providers used to deliver the service,
• payment processors and subscription infrastructure providers,
• analytics, logging, and monitoring providers, and
• legal authorities or counterparties where required by law or to protect our rights.

These providers may process data on our behalf under contractual, operational, or regulatory safeguards.

We retain information for as long as reasonably necessary to provide the service, maintain business and security records, enforce agreements, resolve disputes, and comply with legal obligations.

Retention periods may vary depending on the type of information, account status, support needs, abuse prevention, and regulatory requirements.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data and service data.

However, no platform, transmission method, or storage system is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to:

• access personal data we hold about you,
• request correction of inaccurate data,
• request deletion of certain data,
• object to or restrict certain processing,
• withdraw consent where processing is based on consent, and
• request a copy of your data where applicable.

To exercise applicable rights, contact us using the details below. We may need to verify your identity before fulfilling certain requests.

InputLayer is not intended for children under the age required by applicable law to use our services without parental or guardian authorization. If we learn that we collected information in violation of applicable law, we may delete it.

Your information may be processed in countries other than your own, including countries where privacy laws may differ. Where required, we take reasonable steps to apply contractual or operational safeguards for cross-border transfers.

By using the service, you acknowledge that such transfers may occur to the extent permitted by law.

We may update this Privacy Policy from time to time. Material changes may be communicated through the website, application, email, or other reasonable means. Continued use of the service after updates become effective constitutes acknowledgment of the revised Policy.

For privacy questions, legal requests, or data rights requests, contact: