Privacy Policy
1. Information We Collect
We collect information you provide directly and information generated as you use our services.
Information you provide directly:
- Account information — your name, email address, and password (stored only as a salted hash) when you create a BreakGround account.
- Authentication information — if you sign in with Google, we receive your email address and basic profile information from Google via OAuth 2.0. We never receive your Google password.
- Billing information — if you purchase a paid plan, our payment processor collects payment card details on our behalf; we only receive tokenized identifiers and invoice metadata.
- Content you create — flows, tooltips, beacons, surveys, and other in-product content you build using our tools.
- Communications — any messages you send us through the contact address below.
Information collected by the BreakGround Recorder Chrome extension (when used):
- Authentication tokens issued by BreakGround after you sign in, stored locally in your browser via chrome.storage.local.
- Your selected language preference and session state, stored locally via chrome.storage.local.
- Flow, tooltip, and beacon content you record, which includes: CSS selectors of elements you click; the visible text of those elements (truncated); the URL and title of the page you are recording on; and the value of form-field elements you click while actively recording.
The extension only captures the above data while you are signed in and actively recording a flow or selecting an element. It does not run a background recorder on other tabs or pages.
1b. Information Automatically Collected
Information automatically collected when you use our services:
- Usage data — pages viewed, features used, and performance telemetry on the dashboard and API.
- Device and log data — IP address, browser type, operating system, and timestamps, used for security and debugging.
- Cookies and similar technologies — used for authentication sessions and basic analytics on breakground.io. See our cookie notice for details.
1c. Information the Extension Does NOT Collect
- We do not record keystrokes, passwords, credit card numbers, or the content of non-form HTML elements.
- We do not capture screenshots or full-page HTML.
- We do not track browsing activity on websites where you are not actively recording a flow.
- We do not use the extension to collect information from end users of your application — only from you, the signed-in BreakGround account holder using the builder.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain BreakGround's dashboard, API, SDK, and Chrome extension.
- Authenticate you, keep you signed in across sessions, and protect your account.
- Store and render the flows, tooltips, beacons, and other content you create so you can publish them in your own applications.
- Communicate with you about your account, service updates, security notices, and support requests.
- Monitor usage, detect abuse, and improve product performance and reliability.
- Comply with legal obligations.
We do not use any information collected by the BreakGround Recorder Chrome extension — including information received via Google Sign-In — to serve advertisements, for interest-based or retargeted advertising, or for any purpose unrelated to providing BreakGround to you.
3. Data Sharing
We do not sell your personal information. We share data only in the following limited circumstances:
- Service providers — we use subprocessors (including cloud hosting, database, email delivery, error tracking, and payment processing providers) who process data on our behalf under strict confidentiality and data-processing agreements. A current list is available on request.
- Authentication providers — when you choose to sign in with Google, Google receives an authentication request as part of the standard OAuth 2.0 flow. Google's handling of that request is governed by Google's privacy policy.
- Legal and safety — we may disclose data when required by law, legal process, or to protect the rights, property, or safety of BreakGround, our users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection of your information.
Data captured by the BreakGround Recorder Chrome extension (selectors, element text, page URLs and titles, and the content you build) is transmitted only to https://api.breakground.io over HTTPS and is stored against your BreakGround tenant. It is not sold, shared, or transferred to any third party for advertising, analytics, or any other purpose unrelated to providing the BreakGround service.
4. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete an account, flow, tooltip, or beacon from the BreakGround dashboard, the corresponding records — including any content originally uploaded from the BreakGround Recorder Chrome extension — are removed from our active systems and purged from backups within our standard retention window.
Uninstalling the BreakGround Recorder Chrome extension from Chrome clears all data the extension had stored locally in chrome.storage.local (authentication tokens, language preference, and session state). Uninstalling the extension does not automatically delete the flows, tooltips, or beacons you previously uploaded to your BreakGround account; to delete that content, use the BreakGround dashboard or contact us.
5. Your Rights
You have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You may exercise these rights from the BreakGround dashboard account settings or by contacting us at the address below. We will respond within the timeframes required by applicable law.
You can uninstall the BreakGround Recorder Chrome extension at any time from chrome://extensions, which will end all data collection by the extension and clear its locally stored data.
6. Chrome Extension — Permissions and Data Destinations
The BreakGround Recorder Chrome extension requests the following Chrome permissions. Each is used only for the purpose described.
| Permission | Purpose |
|---|---|
| activeTab | Records interactions and injects flow previews into the tab you are actively working on. |
| Host permission for all URLs (<all_urls>) | Allows the recorder to attach to your web application on any domain, since customers host on many different URLs. |
| scripting | Injects element-highlighting overlays and previews into the page. No remote code is fetched or executed; all code is shipped inside the extension package. |
| storage | Stores your authentication tokens, language preference, and session state locally via chrome.storage.local. |
| identity | Enables Sign in with Google via Chrome's chrome.identity.launchWebAuthFlow API. |
| notifications | Displays desktop notifications for login confirmation and session expiration. |
| sidePanel | Renders the builder UI in Chrome's side panel alongside the web application you are instrumenting. |
All network requests originating from the extension are sent to: https://api.breakground.io (BreakGround's API, for authentication, flow/tooltip/beacon storage, and account operations) or https://accounts.google.com (Google's OAuth 2.0 endpoints, only when you use Sign in with Google). The extension does not send data to any other destination.
7. Google API Services User Data Policy — Limited Use Disclosure
BreakGround's use and transfer of information received from Google APIs (via the BreakGround Recorder Chrome extension's Sign in with Google feature) adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use the information received from Google (email address and basic profile) only to authenticate you to your BreakGround account.
- We do not transfer this information to third parties except as necessary to provide or improve the authentication feature itself, for security purposes, or to comply with applicable law.
- We do not use this information for serving advertisements, including personalized, retargeted, or interest-based advertising.
- We do not allow humans to read this information unless we have your explicit consent, it is required for security purposes or to comply with applicable law, or the data has been aggregated and anonymized.
8. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at [email protected].
