Privacy Policy — Hark AI Agent

Summary

Hark sends data only when you act: your messages and — only when you choose — the open page or email, text you select, images you attach, and in Agent mode the page you ask Hark to work on.
None of your messages, pages or emails are sent before you agree to the data notice inside the extension. Hark never reads pages, emails, tabs or your browsing history in the background.
That content goes to our server and our AI provider only to answer you or perform the task you asked for. We do not store your conversations, page content or email content on our servers.
Your chat history, Tracker items and settings are stored locally in your browser. You can delete them at any time.
In Agent mode Hark asks for your approval before sending, submitting, booking, buying or deleting anything, and it never reads or types passwords, one-time codes or payment card details.
We don’t sell or share your data, don’t show ads, don’t use your data to train AI models and don’t use it for anything other than running Hark. This website has no cookies and no analytics.

1. Who we are

This Privacy Policy explains how the Hark AI Agent: Personal Assistant & Chat browser extension, its server and the website harkaiagent.com (together, “Hark”) handle your information. Hark is developed and operated by Roman Vlasov, an independent developer (“we”, “us”), who is responsible for the processing described here (the “controller” under the GDPR). The extension is published in the Chrome Web Store under the publisher name NextApps AI. Contact: romanvlasovdev@gmail.com.

2. What data the extension processes, when and why

Data	When	Why	Stored by us?
Your messages, the conversation context (earlier messages of the same chat), the model you chose and your interface language	When you send a message	To generate an answer	No
Content of the open web page: address (URL), title, visible text and text you selected	Only when you turn on “Use this tab”, tap a page action (for example “Summarize this page”) or use the “Ask Hark about this page” menu	To answer questions about that page	No
Content of the open email or email thread in Gmail or Outlook on the web: subject, sender and recipient names and addresses, dates and message text	Only when you turn on “Use this email” or tap an email action (summarize, draft a reply, add tasks to Tracker)	To summarize it, draft a reply or find tasks and dates	No
Selected text	Only when you use a right-click action (Ask, Summarize, Add to Tracker)	To perform that action	No
Images you attach to a message (resized in your browser before sending)	Only when you add an image with the image button, paste it or drop it into the message box	To answer your question about the image	No (a small preview is kept only in your browser’s chat history)
Voice input	Only while the microphone button is on	To turn your speech into text in the message box. Speech recognition is provided by your browser (Google Chrome’s built-in speech service, under Google’s terms); Hark does not record, receive or store audio — only the resulting text, once you send it, is processed like any other message	No
Page or email text for a Tracker scan	Only when you tap “Scan this page/email”	To find orders, bookings, deadlines and bills you may want to save	No (the items you choose are saved only in your browser)
Agent page snapshots: page address and title, a list of buttons, links and form fields with their labels and current values (never the values of password or payment-card fields), and visible text	Only while an Agent task you started is running, and only on the tab you started it from	To decide the next step of your task	No
Personal details you give the Agent for a task (for example your name, phone number or a search query) and the text it types into forms	Only during an Agent task, as part of the task you described	To complete the task on the website you chose	No
Anonymous install ID (a random identifier, not linked to your identity), extension version, daily request count and last activity date	When you first use Hark after agreeing (or start a checkout), and with each request	To run the service, apply free-plan limits, link a purchase to your browser and protect the service from abuse	Yes, until you delete your data or stop using Hark
Technical data: IP address and request time	With each request to our server	Short-term rate limiting and security	Not in our database; kept only in memory and in short-lived hosting logs
Billing information: subscription ID, plan, status, trial and renewal dates, payment-provider customer ID, and a masked (for example “ro•••@gmail.com”) and a keyed-hash form of the email used at checkout	Only if you buy Hark Pro	To give you Pro, show your plan and let you manage or restore it	Yes, while the subscription exists and afterwards as long as accounting and tax law require
The email you type in “Restore purchase”	Only when you ask to restore a subscription in another browser	To look up your subscription and email you a one-time code	Not in plain text — only a keyed hash; the code is stored as a hash and expires after 15 minutes

To show which tab it will work on, Hark may read the address and title of your active tab locally on your device. This information is not sent anywhere unless you use one of the actions above. If you open Hark Pro checkout before agreeing to the data notice, only the anonymous install ID and the plan you chose are sent, so the purchase can be linked to your browser.

3. What Hark never does

It never reads pages, emails, tabs or your browsing history in the background or collects your browsing activity.
It never reads, stores or types passwords, one-time codes, bank details or payment-card numbers.
It never sends emails or messages on your behalf without your approval, and never sends emails from your account by itself.
It never records or stores audio from your microphone.
It never sells, rents or shares your data with advertisers, data brokers or other resellers, and never uses it for advertising, profiling, creditworthiness or lending.
It never runs remote code: all code is packaged in the extension.

4. Agent mode

The Agent works only in the tab where you start a task and only until the task finishes or you press Stop.
It uses a fixed set of actions built into the extension (click, type, choose an option, scroll, press a key, open a web address). The AI model only chooses which of these actions to take next; no code from our server or the AI is executed in your browser.
Before any step that sends a message, submits a form, books, orders, pays, subscribes or deletes something, Hark shows you exactly what it wants to do and waits for your approval.
When a login, verification or payment step is needed, Hark asks you to complete that step yourself.
The website you use the Agent on receives whatever is typed or submitted there, under that website’s own privacy policy.

5. Email in Gmail and Outlook

Hark does not connect to your mailbox and does not use the Gmail or Microsoft Graph APIs. It reads only the email that is open in your browser tab, and only when you ask. Drafted replies are inserted into the reply box for you to review and send yourself. Email content is a personal communication: it is used only for the action you requested, is not stored on our servers and is not read by people (see “Chrome Web Store Limited Use”). Hark is not affiliated with or endorsed by Google or Microsoft; Gmail and Outlook are trademarks of their owners.

6. Data stored only in your browser

Your chat history (including small previews of images you attached), Tracker items (tasks, orders, bookings, deadlines, bills and notes you save), settings (theme, interface language, default model and other preferences) and your anonymous install token are saved in your browser’s local extension storage on your device. They are not synced to our servers. Use Settings → “Clear chat history” or “Delete all my data” to remove them, or uninstall the extension.

7. The harkaiagent.com website

The website is a set of static pages. It has no accounts, no forms that collect personal data, no advertising and no analytics or tracking scripts, and it does not set cookies. Like any website, it is delivered by a hosting provider whose servers process standard request data (IP address, browser type, requested page and time) in short-lived logs for security and reliability.

After you install the extension, it opens the welcome page on this website. The link includes only the extension’s version and your interface language, so the page can show the right instructions in your language; it does not include your install ID or any personal data. The “Add to Chrome” buttons lead to the Chrome Web Store, which is operated by Google under its own policy.

8. AI processing

To answer you, the content you send is forwarded by our server to OpenRouter, which routes it to the AI model provider. Hark currently uses OpenAI models; if this changes, we will update this page. We do not use your content to train or improve AI models, and we do not allow it to be used for advertising. Under OpenAI’s API terms, data sent through the API is not used to train OpenAI’s models by default. AI providers may keep request data for a limited time for abuse monitoring under their own policies. Hark does not make decisions about you that have legal or similarly significant effects.

9. Service providers and sharing

We share data only with these service providers, only as needed to run Hark, and they may use it only to provide their service to us:

OpenRouter and the AI model provider it routes to (currently OpenAI) — generate answers, drafts, Tracker items and Agent steps from the content you send.
Railway — hosts our server and database (anonymous install ID, hashed access token, request counters, billing records). Standard infrastructure logs (such as IP address and request time) may be kept for a short period for security and reliability.
Dodo Payments — our merchant of record for Hark Pro. When you buy Hark Pro, Dodo Payments collects and processes your payment details, name, email and billing address under its own privacy policy, and sends receipts. We never see or store your card details.
Resend — sends the one-time restore code to the email you enter in “Restore purchase”.
Our website hosting provider — delivers harkaiagent.com and keeps standard short-lived request logs.

We may also disclose information if required by law or to protect against fraud, abuse or security threats. If Hark is ever part of a merger, acquisition or sale of assets, we will transfer user data only with your explicit prior consent. Hark does not use analytics, advertising, tracking tools or cookies; the Dodo Payments checkout page uses its own cookies under its own policy.

10. Browser permissions

sidePanel — shows the Hark interface in Chrome’s side panel.
storage — saves your settings, chat history and Tracker locally.
activeTab and scripting — read the current tab, or perform Agent steps in it, only after you click a Hark button, menu item or shortcut or start a task.
contextMenus — adds the right-click actions.
Access to websites (optional) — requested only when you first use “Use this tab”, an email action, a Tracker scan or the Agent, so Hark can read or act on the tab you ask about. You can turn it off in Hark’s Settings or in Chrome’s extension settings at any time.
Microphone (optional) — Chrome asks for it only when you first use voice input. You can withdraw it in Chrome’s site settings at any time.

11. Chrome Web Store Limited Use

The use of information received from Chrome APIs and from the pages and emails you share with Hark adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:

User data is used only to provide and improve Hark’s single purpose and its user-facing features described in the extension and in its Chrome Web Store listing.
User data is transferred to third parties only as necessary to provide or improve these features (the service providers listed above), to comply with applicable law, to protect against malware, spam, phishing or other fraud or abuse, or as part of a merger, acquisition or sale of assets with your explicit prior consent.
User data is never used or transferred for personalized, re-targeted or interest-based advertising, never sold or transferred to advertising platforms, data brokers or other information resellers, and never used to determine creditworthiness or for lending.
Humans do not read your data unless you explicitly agree for specific data (for example when you send it to us in a support request), it is necessary for security purposes such as investigating abuse, it is required by law, or the data is aggregated and anonymized for internal operations in line with applicable law.

12. Retention and deletion

Messages, page content, email content, images and agent snapshots are processed in memory and discarded once the answer or step is returned. The anonymous install record and request counters are kept while you use Hark; “Delete all my data” in Settings deletes them from our server immediately and clears your browser data. Billing records are kept while your subscription exists and afterwards as required by accounting and tax law. “Delete all my data” removes the link between this browser and your subscription but does not cancel the subscription. Restore codes expire after 15 minutes.

13. Security

All data is transmitted only over encrypted HTTPS connections. AI provider and payment keys are kept only on our server and are never included in the extension. Your install token is stored on our server only as a hash, emails only as a masked value and a keyed hash, and restore codes only as hashes. Pro access is granted only after the payment provider confirms the payment to our server with a signed notification. No method of transmission or storage is perfectly secure, but we work to protect your data and will notify you as required by law if a breach affects it.

14. International transfers

Our hosting and service providers may process data in the United States and other countries. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, it is protected by the providers’ contractual safeguards, such as the European Commission’s Standard Contractual Clauses.

15. Your rights and legal bases

Depending on where you live (for example under the GDPR, UK GDPR or US state laws such as the CCPA/CPRA), you may have the right to access, correct, delete or export your data, to restrict or object to processing, to withdraw consent at any time, and to complain to your local data protection authority. Because we store almost nothing about you, most requests can be handled with “Delete all my data”; for anything else write to romanvlasovdev@gmail.com and we will reply within 30 days. We do not sell or “share” personal information as these terms are defined in California law, and we do not use sensitive personal information to infer characteristics about you.

Our legal bases are: performance of the service you request (answers, Agent tasks, Tracker, subscriptions), your consent (the data notice in the extension, which you can withdraw by turning off website access or deleting your data), our legitimate interest in securing the service and preventing abuse, and legal obligations (accounting and tax records).

16. Children

Hark is not directed at children under 13 (or the minimum age for consent in your country, such as 16 in some EU countries), and we do not knowingly collect their data. If you believe a child has used Hark, contact us and we will delete the related data.

17. Changes to this policy

If we change what we collect or how we use it, we will update this page and the date above before the change takes effect, and we will tell you inside the extension and ask for your consent again where required.

18. Contact

Questions or requests about privacy: romanvlasovdev@gmail.com.