This covers the openwalk.ai service and its browser extension. The short version: we store structure, never content; your AI key is yours; there are no trackers, no ads, and nothing is ever sold. The code is open source, so every claim here can be checked.
Your account. Signing in with Google gives us your email address, name, and Google account id. Sessions use a signed cookie; extension access tokens are stored as salted hashes and can be revoked in your dashboard at any time.
Your AI provider key. Stored encrypted (AES-256-GCM) and used for exactly one thing: making requests to Google AI (Gemini) on your behalf. You can replace or delete it in the dashboard.
Usage metering. Per request: token counts, model name, request kind, the site's origin, and a timestamp — shown in your dashboard and used to prevent abuse.
Shared site knowledge. As people use OpenWalk on a site, it learns the site's structure: page paths, titles, the labels of buttons and links, and which click leads where. This is deliberately value-free — never anything anyone typed, never page text, never personal data. Contributing is a setting in the extension you can turn off, and everything still works.
Walkthrough recipes and routing decisions. Completed walkthroughs keep their goal and step labels; routing decisions keep goal keywords only.
When you ask about the current screen, the visible page text and form values (passwords are masked in your browser before anything leaves it) are sent with that one request, rendered into a prompt for your AI provider, and discarded. The same applies to your recent chat messages sent for follow-up context. None of it is written to any database or log.
Your configured AI provider (Google AI (Gemini)) receives the prompts — that's the product working, under your own key and the provider's terms. Google handles sign-in. The service runs on Fly.io with the database on Neon (both encrypted in transit). No analytics scripts, no advertising, no data brokers, no selling — ever.
Dashboard: revoke extension devices, replace or delete your AI key. Extension settings: turn off knowledge contribution, remove site access per site (site access is only ever granted per site, when you toggle OpenWalk on). To delete your account and everything tied to it, email support@openwalk.ai from your account address.
Material changes to this policy will be reflected on this page with a new effective date.