Extension privacy
Updated October 24, 2026. This notice covers the AutoType Chrome extension. Website accounts and billing are also covered by the RewriteMax privacy policy.
Purpose and local documents
AutoType inserts a draft you provide into Google Docs or Word Online at your chosen pace. Draft text, document comparisons and optional saved checkpoints remain in browser-local storage. Google authorization tokens are handled within Chrome Identity and temporary extension memory and are sent only to Google for the authorized Docs API request. Reading Google Docs uses your separate read-only Google authorization. The extension does not send document text to RewriteMax or use it for advertising or model training.
Account and typing allowance
The extension sends an explicitly approved account credential to RewriteMax over HTTPS. Account services check membership, reserve typing units, and record usage and referral rewards. These requests include random task identifiers, cryptographic hashes identifying the draft and target document, and aggregate unit counts. They contain no plaintext document content. Website logout, account deactivation or extension disconnect revokes the corresponding connection.
As with other HTTPS services, RewriteMax receives request metadata such as IP addresses and timestamps for service delivery and security. The extension does not request GPS access or collect general browsing history.
Permissions
Active tab and debugger permissions are used only for the document you select, to insert text, handle pause/resume and inspect the editable surface. Offscreen processing parses document formats locally. Storage saves settings and optional checkpoints. Identity requests the Google Docs read-only scope; host access is limited to the Docs API and RewriteMax account service. No remotely hosted executable code is loaded.
Retention and control
You may clear a local checkpoint, disconnect Google access, or disconnect RewriteMax from the extension. Removing the extension removes its local data. Server task and usage records are retained for account security, billing consistency and dispute resolution under the website policy. Support and account deletion options are listed in the website privacy policy.
Limited Use
Use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and the Chrome Web Store User Data Policy. Google API data is not sold, used for personalized advertising, or read by humans unless you explicitly request support with specific content or disclosure is legally required.