TATOMA Connected Apps — Privacy Policy

Effective Date: April 18, 2026 Last Updated: April 18, 2026

This privacy policy explains how the TATOMA Prompts browser extension, desktop apps, and other connected applications ("Connected Apps") collect, use, and protect your data. Connected Apps are developed by Tatoma B.V. and provide quick access to your TATOMA prompt libraries outside of the main web platform.

This policy supplements the TATOMA Privacy Policy. For general data handling practices, please refer to that document.

What Are Connected Apps?

Connected Apps are companion applications that let you access your TATOMA prompt libraries from your browser, desktop, or mobile device. They include:

TATOMA Prompts browser extension (Chrome, Edge)
TATOMA Prompts macOS desktop app
TATOMA Prompts Windows desktop app (coming soon)

Data We Collect

Authentication Token

When you sign in to a Connected App, an authentication token is generated and stored locally on your device:

Browser extension: Stored in Chrome's local storage (chrome.storage.local)
Desktop apps: Stored in the operating system's secure credential store (macOS Keychain, Windows Credential Manager)

The token is a random string — it does not contain your password, email, or personal information. Tokens expire automatically after 90 days and can be revoked at any time from your Connected Apps settings.

Prompt Data (Cached Locally)

Connected Apps cache your prompt library data locally for fast access and offline use:

Library names, descriptions, and visibility settings
Prompt titles, body text, type, and quality metadata
Recently used prompt history

This data is fetched from the TATOMA platform and stored locally on your device. It is not shared with any third party. Cached data is cleared when you sign out.

Saved Prompts (Browser Extension, v0.1.0+)

When you explicitly save a prompt — whether by clicking "Add prompt" manually, using the "Save as prompt" right-click context menu, or using the contextual "Save from {Platform}" button on a supported AI platform — the extension sends the following to prompts.tatoma.eu:

The prompt text you typed or captured
A creation_origin value indicating the save surface (e.g., extension)
A creation_tool value indicating which context you saved from (one of: manual, context-menu, claude, chatgpt, copilot, gemini, m365)

Prompt saves only occur on direct user action — clicking a button or a menu item. The creation_origin and creation_tool values help you later identify where a prompt came from inside your library.

The contextual "Save from {Platform}" button asks what you want to save, and the two answers differ in what leaves your browser:

A specific message. We read the messages you have sent in that conversation so you can pick one, and save that one verbatim. No language model is involved.
A reusable prompt based on the entire conversation. The messages you sent are additionally sent to a language model, via prompts.tatoma.eu, which distils them into one reusable prompt: it replaces the one-off specifics with {{variable}} placeholders and suggests a title. Long messages are shortened before they are sent, keeping the start and end of each. You see the result before saving and can restore your own text with one click.

Reading the conversation means reading the messages you sent in it, not just the most recent one, which requires scrolling that page to load messages the site had unloaded. The extension returns the page to where you left it. It never reads the assistant's replies, and nothing is saved to your library until you click Save.

Prompt Coaching (Browser Extension)

On a supported AI site where coaching is turned on, the extension reads what you type in that site's prompt field and sends it to prompts.tatoma.eu continuously, on each settled pause while you type, so we can suggest improvements as you write. No click is required. This is a separate mechanism from the one-time "Save from {Platform}" capture above.

Coaching is on by default for every supported site and can be turned off per site, at any time, from the extension's Settings pane. Turning a site off does more than stop the requests: the coaching script is unregistered for that site, so no coaching code is loaded into those pages at all. Any copy already running in an open tab is torn down immediately, and if one survives, the server request is refused. Saving prompts from that site is unaffected, because it is a different action that you trigger yourself.

Each request contains only your current draft text and which platform you're on. No conversation history, thread metadata, or other page content is included.

Usage Events

When you copy or insert a prompt, the Connected App sends a usage event to the TATOMA platform:

Which prompt was used (prompt ID)
What action was taken (copied or inserted)
Which Connected App was used (browser extension, macOS app, etc.)
Your user ID and organization ID

These events are used for your organization's usage analytics and are visible in the Prompts app's reports dashboard. They follow the same data retention policy as other platform usage data.

Extraction Failure Telemetry (Browser Extension, v0.1.0+)

When you click "Save from {Platform}" on a supported AI surface but the extension fails to extract your latest prompt (selector drift, closed shadow DOM, page still loading), an anonymised failure event is sent to prompts.tatoma.eu:

platform — which of the five supported AI platforms was affected (Claude, ChatGPT, Copilot, Gemini, or M365 Copilot)
reason — a short failure code (no_match, dom_error, shadow_dom_blocked, page_not_ready)

This event does not include the URL, page content, your prompt text, or any free-text field. It exists solely so we can detect and fix breakage when upstream AI platforms change their page structure.

Language Preference

Your chosen language (English, Dutch, or Danish) is stored locally on your device.

Data We Do NOT Collect

Connected Apps do not collect, access, or transmit:

Your browsing history as a dataset — the browser extension reads the current tab's URL locally to check whether it matches a fixed allowlist of supported AI platforms, solely to decide whether to show the contextual "Save from {Platform}" button. URLs are never logged, stored, or transmitted to our servers or any third party.
Content of web pages you view — except on the supported AI sites listed below. There, while coaching is turned on for that site, we read what you type in that site's prompt field, continuously while you type, so we can suggest improvements; and we read the messages you have sent in that conversation when you click "Save from {Platform}" (see "Saved Prompts" and "Prompt Coaching" above). We never read the assistant's replies.
Keystrokes, mouse movements, or screen content
Data from any other browser extensions or applications
Emails, documents, or files outside the text you explicitly save as a prompt

Browser Permissions

The TATOMA Prompts browser extension requests the following permissions, each tied to a specific function:

Permission	Purpose
activeTab	Inject a content script into the active page when you explicitly invoke the extension (click the icon, use the right-click menu). Used for inserting prompts into text fields and — on supported AI platforms — reading your latest prompt. Only activates on user gesture.
tabs	Read the current tab's URL (hostname only is used) to check whether it matches one of the supported AI platforms, so the Save button can display "Save from {Platform}" contextually. URLs are matched locally against a fixed allowlist and are never logged, stored, or sent to our servers. Chrome's install prompt phrases this as "Read your browsing history" — that is Chrome's standard label for this permission and cannot be customized.
identity	Open a secure browser sign-in window via `chrome.identity`. No credentials are collected by the extension itself.
storage	Store your authentication token, language preference, and a short-lived prompt cache (5-minute TTL) locally. All data is cleared on sign-out.
scripting	Inject content scripts to (a) place prompt text into focused text fields when you click "Insert", (b) read your most recent sent message from a supported AI platform when you click "Save from {Platform}", and (c) run resident prompt coaching on a supported AI site where coaching is turned on. The coaching script is registered only for those sites, and unregistered for any site you turn off, so it can read the prompt field as you type; (a) and (b) still run only on your direct gesture.
sidePanel	Display the extension's UI as a persistent side panel (not a popup). Opens when you click the extension icon or use the context menu.
contextMenus	Add two right-click menu items: "Fill with prompt" on text fields (opens the side panel) and "Save as prompt" on selected text (saves it to your library).
Host access (`tatoma.eu`)	Communicate with `hub.tatoma.eu` (authentication) and `prompts.tatoma.eu` (prompt data, coaching drafts, usage events, extraction failure telemetry). No other domains are accessed for data transmission.
Host access to the supported AI sites (`claude.ai`, `chatgpt.com`, `www.chatgpt.com`, `copilot.microsoft.com`, `copilot.com`, `www.copilot.com`, `copilot.cloud.microsoft`, `m365.cloud.microsoft`, `gemini.google.com`)	Requested once, at install, as part of Chrome's install prompt. Allows the extension to read what you type in those sites' prompt fields: continuously, while you type, to suggest improvements, and once, when you click "Save from {Platform}", to read the messages you have sent in that conversation. This access is limited to the sites listed here and covers no other website. It can be withdrawn at any time from Chrome's extension settings (`chrome://extensions`). Separately, and without touching the browser permission, you can turn coaching off per site from the extension's Settings pane, which unregisters the coaching script for that site entirely.

The extension never reads data from websites other than tatoma.eu, the specific AI platforms listed in the table above, or the current tab's URL hostname (for contextual detection, as described above).

How We Use Your Data

Data	Purpose	Stored Where
Auth token	Authenticate API requests to the TATOMA platform	Locally on your device
Cached prompts	Fast search and offline access	Locally on your device
Saved prompts (body + creation_origin + creation_tool)	Store in your TATOMA prompt library	TATOMA platform servers
Prompt coaching drafts	Suggest improvements as you type	Sent to TATOMA per request
Usage events	Organization analytics and reporting	TATOMA platform servers
Extraction failure events (platform + reason)	Detect and fix breakage when AI platform DOMs change	TATOMA platform servers
Language preference	Display the app in your preferred language	Locally on your device
Current tab URL	Locally matched against a fixed allowlist to show contextual UI	Never stored or transmitted

Data Sharing

We do not sell, rent, or share your data with third parties. Connected Apps communicate exclusively with TATOMA's own servers:

hub.tatoma.eu — Authentication
prompts.tatoma.eu — Prompt data, usage tracking, and extraction failure telemetry

No data is sent to analytics services, advertising networks, or any other external parties.

Data Retention

Auth tokens expire after 90 days and are automatically invalidated. You can revoke them at any time.
Local cache is cleared on sign-out. Uninstalling the Connected App also removes all local data.
Saved prompts are retained in your TATOMA library until you delete them or delete your account.
Usage and extraction failure events follow the TATOMA platform's standard data retention policy (see Privacy Policy).

Your Rights

Under GDPR, you have the right to:

Access your data — view your Connected Apps and usage history in the TATOMA platform
Delete your data — revoke tokens and clear local data by signing out, delete individual saved prompts from your library, or request full account deletion via Manage Data
Object to processing — contact us at gdpr@tatoma.eu
Control coaching per site — coaching can be turned off for each AI platform independently, at any time, from the extension's Settings pane. Turning a site off unregisters the coaching script for that site immediately, tears down any copy already running in an open tab, and refuses any request a surviving copy still makes. Browser host access itself can be withdrawn from chrome://extensions.

Security

Auth tokens are stored in your device's secure credential store (Keychain, Credential Manager, or browser storage)
All communication uses HTTPS encryption
Tokens are SHA-256 hashed before server-side storage — even if our database were compromised, raw tokens cannot be recovered
Each Connected App gets its own token that can be independently revoked

Children's Privacy

Connected Apps are not directed at children under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Last Updated" date above. Continued use of Connected Apps after changes constitutes acceptance of the updated policy.

Contact

For privacy questions or to exercise your data rights:

Tatoma B.V. Willemstraat 1 5611 HA, Eindhoven The Netherlands

Email: gdpr@tatoma.eu