Privacy Policy

Summary

• Hark sends data only when you act: your messages and — only when you choose — the open page or email, text you select, and in Agent mode the page you ask Hark to work on.
• None of your messages, pages or emails are sent before you agree to the data notice inside the extension. Hark never reads pages, emails, tabs or your browsing history in the background.
• That content goes to our server and our AI provider only to answer you or perform the task you asked for. We do not store your conversations, page content or email content on our servers.
• Your chat history, Tracker items and settings are stored locally in your browser. You can delete them at any time.
• In Agent mode Hark asks for your approval before sending, submitting, booking, buying or deleting anything, and it never reads or types passwords, one-time codes or payment card details.
• We don't sell or share your data, don't show ads, don't use your data to train AI models and don't use it for anything other than running Hark.

1. Who we are

This Privacy Policy explains how the Hark AI Agent: Personal Assistant & Chat browser extension and its server ("Hark") handle your information. Hark is published by NextApps AI, the brand of independent developer Roman Vlasov ("we", "us"), who is responsible for the processing described here (the "controller" under the GDPR). Contact: romanvlasovdev@gmail.com.

2. What data is processed, when and why

To show which tab it will work on, Hark may read the address and title of your active tab locally on your device. This information is not sent anywhere unless you use one of the actions above. If you open Hark Pro checkout before agreeing to the data notice, only the anonymous install ID and the plan you chose are sent, so the purchase can be linked to your browser.

3. What Hark never does

• It never reads pages, emails, tabs or your browsing history in the background or collects your browsing activity.
• It never reads, stores or types passwords, one-time codes, bank details or payment-card numbers.
• It never sends emails or messages on your behalf without your approval, and never sends emails from your account by itself.
• It never sells, rents or shares your data with advertisers, data brokers or other resellers, and never uses it for advertising, profiling, creditworthiness or lending.
• It never runs remote code: all code is packaged in the extension.

4. Agent mode

• The Agent works only in the tab where you start a task and only until the task finishes or you press Stop.
• It uses a fixed set of actions built into the extension (click, type, choose an option, scroll, press a key, open a web address). The AI model only chooses which of these actions to take next; no code from our server or the AI is executed in your browser.
• Before any step that sends a message, submits a form, books, orders, pays, subscribes or deletes something, Hark shows you exactly what it wants to do and waits for your approval.
• When a login, verification or payment step is needed, Hark asks you to complete that step yourself.
• The website you use the Agent on receives whatever is typed or submitted there, under that website's own privacy policy.

5. Email in Gmail and Outlook

Hark does not connect to your mailbox and does not use the Gmail or Microsoft Graph APIs. It reads only the email that is open in your browser tab, and only when you ask. Drafted replies are inserted into the reply box for you to review and send yourself. Email content is a personal communication: it is used only for the action you requested, is not stored on our servers and is not read by people (see section 10). Hark is not affiliated with or endorsed by Google or Microsoft; Gmail and Outlook are trademarks of their owners.

6. Data stored only in your browser

Your chat history, Tracker items (tasks, orders, bookings, deadlines, bills and notes you save), settings (theme, interface language, default model and other preferences) and your anonymous install token are saved in your browser's local extension storage on your device. They are not synced to our servers. Use Settings → “Clear chat history” or “Delete all my data” to remove them, or uninstall the extension.

7. AI processing

To answer you, the content you send is forwarded by our server to OpenRouter, which routes it to the AI model provider. Hark currently uses OpenAI models; if this changes, we will update this page. We do not use your content to train or improve AI models, and we do not allow it to be used for advertising. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models by default. AI providers may keep request data for a limited time for abuse monitoring under their own policies. Hark does not make decisions about you that have legal or similarly significant effects.

8. Service providers and sharing

We share data only with these service providers, only as needed to run Hark, and they may use it only to provide their service to us:

• OpenRouter and the AI model provider it routes to (currently OpenAI) — generate answers, drafts, Tracker items and Agent steps from the content you send.
• Railway — hosts our server and database (anonymous install ID, hashed access token, request counters, billing records). Standard infrastructure logs (such as IP address and request time) may be kept for a short period for security and reliability.
• Dodo Payments — our merchant of record for Hark Pro. When you buy Hark Pro, Dodo Payments collects and processes your payment details, name, email and billing address under its own privacy policy, and sends receipts. We never see or store your card details.
• Resend — sends the one-time restore code to the email you enter in “Restore purchase”.

We may also disclose information if required by law or to protect against fraud, abuse or security threats. If Hark is ever part of a merger, acquisition or sale of assets, we will transfer user data only with your explicit prior consent. Hark does not use analytics, advertising, tracking tools or cookies; the Dodo Payments checkout page uses its own cookies under its own policy.

9. Browser permissions

• sidePanel — shows the Hark interface in Chrome's side panel.
• storage — saves your settings, chat history and Tracker locally.
• activeTab and scripting — read the current tab, or perform Agent steps in it, only after you click a Hark button, menu item or shortcut or start a task.
• contextMenus — adds the right-click actions.
• Access to websites (optional) — requested only when you first use “Use this tab”, an email action, a Tracker scan or the Agent, so Hark can read or act on the tab you ask about. You can turn it off in Hark's Settings or in Chrome's extension settings at any time.

10. Chrome Web Store Limited Use

The use of information received from Chrome APIs and from the pages and emails you share with Hark adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:

• User data is used only to provide and improve Hark's single purpose and its user-facing features described in the extension and in its Chrome Web Store listing.
• User data is transferred to third parties only as necessary to provide or improve these features (the service providers in section 8), to comply with applicable law, to protect against malware, spam, phishing or other fraud or abuse, or as part of a merger, acquisition or sale of assets with your explicit prior consent.
• User data is never used or transferred for personalized, re-targeted or interest-based advertising, never sold or transferred to advertising platforms, data brokers or other information resellers, and never used to determine creditworthiness or for lending.
• Humans do not read your data unless you explicitly agree for specific data (for example when you send it to us in a support request), it is necessary for security purposes such as investigating abuse, it is required by law, or the data is aggregated and anonymized for internal operations in line with applicable law.

11. Retention and deletion

Messages, page content, email content and agent snapshots are processed in memory and discarded once the answer or step is returned. The anonymous install record and request counters are kept while you use Hark; “Delete all my data” in Settings deletes them from our server immediately and clears your browser data. Billing records are kept while your subscription exists and afterwards as required by accounting and tax law. “Delete all my data” removes the link between this browser and your subscription but does not cancel the subscription. Restore codes expire after 15 minutes.

12. Security

All data is transmitted only over encrypted HTTPS connections. AI provider and payment keys are kept only on our server and are never included in the extension. Your install token is stored on our server only as a hash, emails only as a masked value and a keyed hash, and restore codes only as hashes. Pro access is granted only after the payment provider confirms the payment to our server with a signed notification. No method of transmission or storage is perfectly secure, but we work to protect your data and will notify you as required by law if a breach affects it.

13. International transfers

Our hosting and service providers may process data in the United States and other countries. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, it is protected by the providers' contractual safeguards, such as the European Commission's Standard Contractual Clauses.

14. Your rights and legal bases

Depending on where you live (for example under the GDPR, UK GDPR or US state laws such as the CCPA/CPRA), you may have the right to access, correct, delete or export your data, to restrict or object to processing, to withdraw consent at any time, and to complain to your local data protection authority. Because we store almost nothing about you, most requests can be handled with “Delete all my data”; for anything else write to romanvlasovdev@gmail.com and we will reply within 30 days. We do not sell or “share” personal information as these terms are defined in California law, and we do not use sensitive personal information to infer characteristics about you.

Our legal bases are: performance of the service you request (answers, Agent tasks, Tracker, subscriptions), your consent (the data notice in the extension, which you can withdraw by turning off website access or deleting your data), our legitimate interest in securing the service and preventing abuse, and legal obligations (accounting and tax records).

15. Children

Hark is not directed at children under 13 (or the minimum age for consent in your country, such as 16 in some EU countries), and we do not knowingly collect their data. If you believe a child has used Hark, contact us and we will delete the related data.

16. Changes to this policy

If we change what we collect or how we use it, we will update this page and the date above before the change takes effect, and we will tell you inside the extension and ask for your consent again where required.

17. Contact

Questions or requests about privacy: romanvlasovdev@gmail.com.