Browser Extension Privacy Policy

SureBright Technologies, Inc. (“SureBright,” “we,” “us,” or “our”) operates SureBright Anywhere and the SureBright browser extension (the “Extension”). The Extension shows you protection plan offers for eligible products while you shop online and lets you buy a plan from the page you are on.

SureBright provides technology, administrative, customer support, and related services in connection with protection plans and warranties. Depending on the plan, SureBright may act as its administrator or obligor, or third parties may perform these roles. The terms and conditions of each plan identify its obligor and administrator and, where applicable, its insurer.

This Privacy Policy explains what information the Extension reads, what stays on your device, what is sent to us, who receives it, how long we keep it, and the choices you have. It applies to information collected through the Extension. The SureBright Anywhere Privacy Policy, available at www.surebrightanywhere.com/privacy-policy, applies to your use of our website and customer portal. For information collected through the Extension, this Privacy Policy controls where it differs from the SureBright Anywhere Privacy Policy.

Before the Extension reads or sends any page information, it shows you a notice that summarizes the practices described in this Privacy Policy and asks you to agree. If you do not agree, the Extension does not read or send page information.

At SureBright, we are committed to handling personal information responsibly, transparently, and in accordance with applicable law.

A. Page Checks on Your Device

When the Extension is turned on, it runs on the web pages you visit so that it can tell whether a page offers a product for sale. It does this by scoring each page against a set of detection rules, such as whether the page contains product details, a price, and an add-to-cart button. This scoring happens on your device.

To read product details, the Extension first reads the product title, price, image, and description from the page. It may also read data that the website itself places in the page’s code, such as product and store-platform data added by the retailer’s e-commerce platform or analytics tools. The Extension uses only the product and store-platform information it needs from these sources and does not intentionally collect your retailer account credentials, payment information, or cart contents from them.

To identify which e-commerce platform a store uses, the Extension may check whether certain cookie names are present on the retailer’s website. It does not read the contents of those cookies and does not send them to us.

B. Product Information Sent to Us

When the Extension finds a product, it sends the product title and description to our product classification service to identify the product category. If the Extension cannot read the product details from the page, it sends a copy of the page’s main content, with scripts, styles, and similar code removed, to our product extraction service, which uses a third-party artificial intelligence provider to extract the product details. We use this page content only to identify the product.

To give you a price for a protection plan, the Extension sends the product category, the product price, and your country to our quote service. We use your IP address, through an IP geolocation provider, to determine your general location, such as your country and state or province, so that we offer the plans and prices that may apply to you based on your location. We do not collect precise geolocation information.

C. Page Diagnostics

To measure and improve how accurately the Extension recognizes product pages, the Extension sends us a diagnostic record for the pages you visit, including pages that it determines are not product pages. A diagnostic record includes the page address (URL) and its canonical address, the website domain, the detection rules the page matched, the page’s score and outcome, the product details the Extension read and where on the page it found each one, the structured product data the page publishes in its code, the store’s e-commerce platform, the result of the classification step (such as the product category, the title sent for classification, the length of the description, and how long the step took), a general description of your browser and operating system, timing and performance measurements, and the version of the detection rules.

We do not add your name, email address, or account identifier to diagnostic records, and the Extension sends them without your sign-in token. If you are signed in, the product record linked to your account, described in Section II.E, may refer to the related diagnostic record. We keep one record for each page and outcome, and when you visit the same page again, we increase a visit count instead of creating a new record. Because a page address can sometimes contain information about you, such as a search term or an order number, we use diagnostic records only to measure and improve product detection and the reliability of the Extension, and we do not use them to identify you.

The Extension does not send diagnostic records for search engine pages, files on your device, pages on your local or private network, or development and testing addresses. You can turn off page diagnostics at any time in the Extension settings. If you live in Quebec, page diagnostics are off by default, and you can turn them on in the Extension settings. Product detection and offers continue to work when page diagnostics are turned off.

D. Account and Contact Information

When you sign in to the Extension, we collect your email address. When you buy a protection plan, the Extension uses the name, telephone number, and postal address saved in your SureBright account and adds them to your order so that your plan can be issued. If your account does not hold this information, our payment processor, Stripe, collects it from you at checkout.

Sign-in uses a secure token that contains your email address and expires after about one hour. The Extension stores this token on your device and reads it from, and writes it to, a cookie on customer.surebright.com, so that signing in to either the Extension or our customer portal signs you in to both. Signing out of the Extension does not sign you out of the customer portal.

E. Product Activity Linked to Your Account

While you are signed out, the Extension keeps a record of the product pages it recognizes, and this record stays on your device. When you sign in, it uploads that record to your SureBright account and continues to add to it while you are signed in. This record covers product pages only, not cart, checkout, category, or search pages. For each product, it includes the product title and category, the first and most recent price seen, the number of visits, how you engaged with the offer (for example, whether the offer was shown or clicked, whether you opened the offer panel, chose a plan, added coverage, started checkout, or dismissed the offer), the dates and times of these events, and a random identifier created for your browser. It may also refer to the related diagnostic record and to your checkout session, but it does not contain payment information.

We use this record to show you your recent products and offers, to let you return and buy a plan from the Extension or our website, and to understand and improve how our offers perform.

F. Purchases

When you choose to buy a plan, the Extension creates a checkout request and opens a checkout page hosted by Stripe in a new tab. You enter your payment details directly with Stripe, and we do not receive or store your full card details. When Stripe confirms your payment, we create your order and your plan.

For each purchase, we keep the product title, price, retailer website, condition, and quantity; the plan and its price; your contact details; and the resulting order and plan references. These records become part of your SureBright account.

G. Information Stored Only on Your Device

The Extension stores the following information on your device and, except as described in Sections II.D through II.F, does not store it on our servers: your sign-in token, your settings and preferences, your cart of selected protection plans, the offers you dismissed, the strip of recently viewed items, your onboarding status, interface and reminder settings, a device identifier, a reference to your current checkout session, a saved copy of your account profile (such as your name and address) used to complete checkout, and, while you are signed out, the record of product pages described in Section II.E. Dismissed offers expire after thirty (30) days, and the recently viewed strip holds up to ten (10) items. Removing the Extension deletes this information from your browser but does not sign you out of the customer portal.

H. Information the Extension Does Not Collect

Other than the sign-in cookie on customer.surebright.com described in Section II.D, the Extension does not collect the contents of cookies on the websites you visit. It is not designed to collect, and we do not intentionally collect, passwords or payment card details you enter on retailer websites or the content of your emails or messages. We do not intentionally collect or retain shipping addresses or payment card details from cart or checkout pages. The Extension does not ask for government-issued identification. Except for the diagnostic records described in Section II.C, the Extension does not keep a record of the pages you visit that are not product pages.

The Extension asks your browser for the following permissions:

1. storage, to keep your settings, your sign-in token, and the other information described in Section II.G on your device;
2. tabs, to recognize the page you are viewing and to open the Stripe checkout page in a new tab;
3. cookies, to share your sign-in with customer.surebright.com and to check for the cookie names described in Section II.A;
4. notifications, to show you messages about your quotes, purchases, and plans, including reminders about a quote or checkout you started and did not finish. Your browser may ask you to allow this permission when you install or update the Extension, and you can turn notifications off in your browser settings at any time; and
5. access to surebright.com and its subdomains and to our application programming interface hosted by Amazon Web Services, to send and receive the information described in this Privacy Policy.

The Extension also runs on the web pages you visit, as described in Section II.A, so that it can recognize product pages wherever you shop.

We use information collected through the Extension only to provide and improve the Extension’s single purpose, which is to find protection plans for the products you shop for and to help you buy and manage them. Specifically, we use it to:

1. recognize product pages, read product details, and identify product categories;
2. check whether a protection plan is available and give you a price that applies based on your location;
3. show you offers, complete your purchase, issue your plan, and send you your plan documents;
4. keep you signed in and show you your recent products and offers in the Extension and our customer portal;
5. send you service messages about your quotes, purchases, and plans by email or browser notification and, if you start a quote or checkout and do not finish it, reminders about it, which you can stop at any time;
6. measure and improve the accuracy of product detection, classification, and pricing, and the performance and reliability of the Extension;
7. provide customer support; and
8. protect against fraud, abuse, and security threats, and comply with our legal obligations.

We do not use information collected through the Extension for personalized advertising, to determine creditworthiness, or for lending purposes, and we do not use it to contact merchants or retailers about our business.

We share information collected through the Extension only as needed to provide and improve the Extension and, except as described below, only with:

1. Stripe, our payment processor, which receives the payment details you give it directly, your order amount, and your contact details, to process your payment;
2. Amazon Web Services, which hosts our services and sends our transactional emails, and so processes the information described in this Privacy Policy that is sent to us;
3. our artificial intelligence provider, which receives the page content described in Section II.B and product titles, to extract product details and identify product categories;
4. our analytics provider, which receives your name, email address, telephone number, postal address, and order and product details when you start a quote and when you buy a plan, to help us measure and improve our offers and to send the service messages and reminders described in Section IV, and which is contractually restricted to processing this information on our behalf and does not use it for advertising;
5. our IP geolocation provider, which receives your IP address, to determine your general location; and
6. the insurer, obligor, or administrator of your plan, which receives your contact details and information about the covered product and your plan, to issue and administer your plan and handle your claims.

Amazon Web Services and our artificial intelligence, analytics, and IP geolocation providers act on our behalf and may use the information only to provide their services to us. Stripe processes payment information as our payment processor and also under its own privacy policy, including for fraud prevention and legal compliance. Service providers that process product page content on our behalf are required to process that information only for purposes of providing services to SureBright and in accordance with applicable contractual restrictions. The insurer, obligor, or administrator of your plan uses your information to provide your coverage and to meet its own legal obligations.

We may also disclose information where required by applicable law or legal process, to protect against fraud, abuse, or security threats, or, after obtaining your explicit prior consent, as part of a merger, acquisition, or sale of assets.

We do not sell information collected through the Extension, share it for cross-context behavioral advertising, or transfer it to advertising platforms, data brokers, or other information resellers. Our staff do not read information collected through the Extension unless you ask us to (for example, when you buy a plan, file a claim, or contact customer support), the information has been aggregated and de-identified for internal operations, it is necessary for security purposes such as investigating abuse, or it is required by applicable law.

The use of information received from Google APIs, including Chrome extension APIs, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

You can control how the Extension handles your information:

1. if you do not agree to the notice shown when you install the Extension, the Extension does not read or send page information;
2. you can turn page diagnostics on or off in the Extension settings, and they are off by default if you live in Quebec;
3. you can dismiss an offer, and the Extension will not show it again for thirty (30) days;
4. you can sign out of the Extension to stop uploading product activity to your account; while you are signed out, the record of product pages stays on your device and is uploaded only if you sign in again, as described in Section II.E, and removing the Extension deletes it;
5. you can turn off notifications in your browser settings;
6. you can stop reminder and marketing emails by using the unsubscribe link in any reminder or marketing email; and
7. you can turn off the Extension at any time in your browser’s extension settings, and removing it deletes the information stored on your device; you can also ask us to delete information linked to your account as described in Section X.

The Extension does not place advertising or analytics cookies on the websites you visit. It uses the sign-in cookie on customer.surebright.com described in Section II.D and checks for cookie names as described in Section II.A. Our website and customer portal use cookies and similar technologies as described in the SureBright Anywhere Privacy Policy.

We do not currently respond to Do Not Track signals, because no common industry standard for them has been adopted. Because we do not sell or share information collected through the Extension, a Global Privacy Control signal does not change how the Extension works.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, or as otherwise required or permitted by applicable law. In particular:

1. we keep diagnostic records for as long as reasonably necessary to measure and improve product detection and the reliability of the Extension;
2. we keep the product record linked to your account while your SureBright account is open, unless you ask us to delete it sooner, in which case we delete it or otherwise remove it from active records, subject to any retention required by applicable law and to our legitimate security and system-backup processes;
3. we keep purchase and plan records for the term of the plan and afterwards for as long as needed to meet legal, tax, accounting, and regulatory requirements and to resolve disputes; and
4. information stored on your device stays there until you clear it or remove the Extension, except that dismissed offers expire after thirty (30) days and the recently viewed strip keeps only the ten (10) most recent items.

Retention periods may vary depending on the nature of the information, the sensitivity of the data, applicable legal requirements, contractual obligations, the warranty or claims lifecycle, and other relevant business or operational considerations.

When personal information is no longer reasonably required for these purposes, we securely delete or anonymize it or, where permitted by applicable law, aggregate or otherwise de-identify it, in accordance with applicable law and our internal retention practices.

We implement and maintain reasonable administrative, technical, physical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, loss, misuse, or destruction. The Extension sends information to us only over encrypted connections.

Such measures may include encryption of data in transit and at rest, access controls, authentication procedures, network and system monitoring, logging, vulnerability management, security testing, auditing, and other security practices intended to help protect the confidentiality, integrity, and availability of personal information.

Despite our best efforts, no method of transmission over the internet, electronic storage system, or security measure is completely secure or error-free.

Depending on your location and applicable law, you may have certain rights regarding your personal information, which may include the right to request access to, correction of, or deletion of certain personal information, the right to restrict or object to certain processing, and the right to opt out of certain data uses or disclosures, among other rights.

These rights are subject to applicable laws, legal requirements, exceptions, restrictions, and verification procedures. We may request information necessary to verify your identity, location, and authority before responding to a request. Where permitted or required by applicable law, we reserve the right to deny, limit, or decline a request, including where necessary to comply with legal obligations, prevent fraud, maintain security, complete transactions, enforce agreements, protect rights, or support legitimate business and operational purposes.

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have the right to: (a) know and access the categories and specific pieces of personal information we have collected about you, including the categories of sources, the purposes for which we use it, and the categories of third parties to whom we disclose it; (b) request deletion of your personal information; (c) request correction of inaccurate personal information; (d) receive a copy of your personal information in a portable format, where applicable; (e) opt out of the sale or sharing of your personal information and of targeted advertising or profiling, where applicable; (f) limit our use of your sensitive personal information, where applicable; and (g) not be discriminated against for exercising these rights. We do not sell or share personal information collected through the Extension. We use any sensitive personal information we process through the Extension, such as the sign-in token for your account, only to sign you in and keep your account secure, or where reasonably necessary for identity verification, fraud prevention, compliance, or security purposes, and we retain it only for as long as reasonably necessary for those purposes or as otherwise permitted or required by applicable law. You may designate an authorized agent to submit a request on your behalf, and we may require proof of the agent’s authority and ask you to verify your identity directly with us. To verify your identity, we will ask you to confirm information we already hold, such as your email address and a recent order or plan number. If we deny your request, you may appeal by replying to our response with the subject line “Privacy Appeal” within forty-five (45) days, and we will respond within the time required by applicable law. If you are not satisfied with the outcome of your appeal, you may contact the attorney general of your state. You may also submit requests by calling us toll free at +1-855-306-4874. We will confirm that we received your request within ten (10) business days and respond within forty-five (45) days. If we need more time, we may extend this period by up to another forty-five (45) days where permitted by applicable law, and we will tell you why. For the categories of personal information we collect, disclose, sell, or share across all of our services in the preceding twelve (12) months, see Section X.B of the SureBright Anywhere Privacy Policy, and for how to opt out, see Section X.A of that policy.

To submit a privacy-related request, please contact:
Email: info@surebright.com
Subject Line: “Privacy Request”

If you live in Canada, we collect, use, and disclose your personal information with your consent, or as otherwise permitted or required by law. You give your consent when you agree to the notice shown when you install the Extension, and you may withdraw it at any time by turning off page diagnostics, signing out, or removing the Extension, subject to legal or contractual restrictions. Withdrawing consent may mean that we cannot provide some services, such as issuing or administering a protection plan.

You may ask to access the personal information we hold about you, ask us to correct it, and ask how it has been used and to whom it has been disclosed. If you live in Quebec, you also have the right to ask us to stop disseminating your personal information or to de-index any hyperlink attached to your name that gives access to it, to receive computerized personal information that you provided to us in a structured, commonly used technological format, and to be informed of, and submit observations about, any decision made exclusively through automated processing of your personal information. The features of the Extension that link product activity to you are off until you agree to the notice shown at installation and sign in. If you live in Quebec, page diagnostics are also off unless you turn them on, as described in Section II.C.

Your personal information may be stored and processed outside Quebec and outside Canada, including in the United States, where it may be accessible to courts, law enforcement, and national security authorities under the laws of those jurisdictions. Before we communicate personal information outside Quebec, we assess whether it will receive adequate protection, as required by Quebec law.

We have designated our Chief Technology Officer as the person in charge of the protection of personal information at SureBright (our “Privacy Officer”). You can contact our Privacy Officer by email at info@surebright.com with the subject line “Privacy Officer,” by phone at +1-855-306-4874, or by mail at the address in Section XVI. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada or, if you live in Quebec, the Commission d’accès à l’information du Québec.

The Extension and our related services are intended for individuals who are at least eighteen (18) years old, or the age of majority where they live if that is higher. We do not knowingly collect or solicit personal information from, market to, or sell or share the personal information of, individuals under the age of 18.

If you believe that we may have collected information from a minor, please contact us at:
Email: info@surebright.com
Subject Line: “Children’s Privacy”

Our services run on Amazon Web Services in the United States. Personal information may also be processed, stored, or accessed in Canada and other jurisdictions where SureBright or its service providers operate. Where required by applicable law, we implement reasonable safeguards for cross-border data transfers. Section XI includes additional information for residents of Canada.

We use automated technologies, including tools provided by a third-party artificial intelligence provider, to recognize product pages, extract product details, classify products, and determine protection plan eligibility and pricing. The offers and prices the Extension shows you are generated automatically. If you believe an offer, price, or eligibility decision is wrong, you can contact us and a person will review it.

We may update this Privacy Policy from time to time. When we do, we will post the updated Privacy Policy and change the “Last Updated” date above.

If we change how the Extension collects, uses, or shares information, we will tell you in the Extension before the change takes effect and, where required by applicable law or by the Chrome Web Store, ask for your consent again.

SureBright Technologies, Inc.
Email: info@surebright.com
Phone: +1-855-306-4874 (toll free)
Mailing Address: 167 Madison Avenue, Ste 205 #251, New York, NY 10016