Privacy Policy

Overview

JT Power Tools ("the Extension") is committed to protecting your privacy. This Privacy Policy explains how the Extension handles information when you use it with JobTread.

Information We Collect

Local Storage (All Users)

Feature settings stored locally in your browser using Chrome's sync storage:

• Feature toggle states (on/off)
• License key (if you subscribe to premium features)
• Dark mode preference
• Theme color preferences
• Message signature text
• Quick Notes content and folder preferences
• Message templates
• Saved availability filter views
• UI preferences (sidebar width, panel width, collapse states)

This local data:

• Stays entirely within your browser
• Syncs across your Chrome devices (via Chrome's built-in sync)
• Is automatically deleted when you uninstall the Extension

Cloud Storage (Premium Users with Account)

If you create an account and enable cloud sync, the following data is stored on our servers:

Account Information

• Email address (for login)
• Display name (optional)
• Hashed password (never stored in plain text)
• License key association

Personal Notes (My Notes)

• Note titles and content
• Folder organization
• Pin status
• Creation and modification timestamps
• Notes are associated with your account only

Team Notes (Shared with your organization)

• Note titles and content
• Folder organization
• Pin status
• Author information (your display name or email)
• Creation and modification timestamps
• Notes are shared with all team members in your JobTread organization

What We DON'T Collect

• JobTread login credentials
• Project data, client information, or budget data
• Browsing history or usage patterns
• Analytics or tracking data
• Payment information (handled by Gumroad)

Premium License Verification

If you subscribe to premium features:

• Your license key is verified with Gumroad's servers via our secure proxy
• Only your license key is sent to Gumroad for verification
• Gumroad may collect information according to their privacy policy: https://gumroad.com/privacy
• We do not receive or store your payment information
• License verification is entirely optional (only for premium features)

Server-Side Data Storage

Our cloud services run on Cloudflare Workers with Cloudflare D1 database:

• Data is encrypted in transit (HTTPS/TLS)
• Hosted in Cloudflare's global network
• Subject to Cloudflare's security practices: cloudflare.com/trust-hub

License Validation Service

• Data stored: License key, email (from Gumroad), subscription tier, validation timestamps
• Purpose: Verify license validity and determine feature access tier
• Retention: Stored while license is active; deleted upon request
• Security: Encrypted at rest, HTTPS-only transmission, rate-limited access

Account & Notes Sync Service (Premium Users)

Premium users who create an account can sync notes to our servers:

• Account data stored: Email, display name, hashed password, license association
• Personal notes: Synced to your account only — titles, content, folders, timestamps
• Team notes: Shared with your organization — titles, content, folders, author info, timestamps
• Purpose: Cross-device note sync and team collaboration
• Security: Passwords hashed using industry-standard algorithms, access tokens expire and require refresh
• Retention: Retained while your account is active; permanently deleted when you delete your account or individual notes

API Proxy Service (Power User Tier Only)

Power User subscribers who connect their JobTread API have additional data stored:

• Data stored: JobTread organization ID and name, API grant key (encrypted), device IDs, API usage logs
• Purpose: Enable API features, prevent license sharing across organizations
• Organization lock: License is locked to one JobTread organization to prevent unauthorized sharing
• JobTread data: We cache job names/IDs and custom field definitions temporarily (2 minutes to 1 hour) to improve performance. We do NOT store your actual project data, financials, or client information.
• Retention: Data deleted when you disconnect JobTread or upon request

MCP Server (Power User Tier Only)

Power User subscribers can connect AI assistants (such as Claude, ChatGPT, or Cursor) to their JobTread data through our Model Context Protocol (MCP) server:

• Authentication: Requires both your license key and JobTread grant key (combined as a Bearer token)
• Access type: Read-only — AI assistants cannot modify your JobTread data
• Data accessible to AI: Job names/IDs, customer/account info, vendor/subcontractor info, tasks/to-dos, job budgets, and schedule data
• Data NOT accessible: Files, attachments, documents, or raw financial data beyond budget line items
• How it works: When you query an AI assistant, it sends requests to our MCP server, which proxies read-only API calls to JobTread on your behalf
• Data storage: The MCP server does not persist your JobTread data. Query results are returned to the AI client in real-time and not stored on our servers
• Third-party AI platforms: When you use MCP with an AI assistant, your JobTread data is sent to that AI platform (e.g., Anthropic for Claude, OpenAI for ChatGPT). These platforms have their own privacy policies governing how they handle your data
• Rate limits: 60 requests per minute, 5 concurrent connections
• Opt-in only: MCP is entirely optional and requires manual setup by the user

Permissions Explained

The Extension requests the following Chrome permissions:

storage

• Purpose: Save your feature preferences locally in Chrome
• Data: Toggle states, license key, theme preferences
• Storage: Local only, synced via Chrome

activeTab

• Purpose: Apply features to the current JobTread tab
• Access: Only when you actively use JobTread pages
• Data: No data is read, only features are applied

Host Permission: https://*.jobtread.com/*

• Purpose: Enable features on JobTread pages
• Access: Limited to JobTread domains only
• Data: Modifies display and behavior, does not read private data

Host Permission: https://*.workers.dev/*

• Purpose: Communicate with our Cloudflare Workers for license validation, notes sync, and API proxy
• Access: Only when verifying license, syncing notes, or using API features
• Data: License key, device ID; for sync: notes content, account credentials; for API features: JobTread grant key and organization info

Third-Party Services

Cloudflare (License Validation, Notes Sync & API Proxy)

• Used for: License validation, account management, notes sync, team collaboration, and API features
• Data stored: License key, email, tier, account info, notes content, organization info (for API users)
• Infrastructure: Cloudflare Workers (serverless), D1 Database (encrypted), KV Cache
• Privacy Policy: https://www.cloudflare.com/privacypolicy/
• Note: Only used if you activate a premium license or create an account

Gumroad (Payment Processing)

• Used for: Premium license subscription and verification
• Data shared: License key only (for verification)
• Privacy Policy: https://gumroad.com/privacy
• Note: Only used if you subscribe to premium features

JobTread API (Power User Tier Only)

• Used for: API features like custom field filtering and MCP server
• Data shared: Your JobTread grant key (you provide this)
• Data accessed: Job names/IDs, custom fields (temporarily cached); via MCP: jobs, customers, vendors, tasks, budgets
• Note: Only used if you're a Power User subscriber who connects their API

AI Platforms (via MCP, Power User Tier Only)

• Used for: AI-assisted access to your JobTread data through the MCP server
• Data shared: JobTread data returned by MCP queries (jobs, customers, vendors, tasks, budgets) is sent to the AI platform you choose to use
• Supported platforms: Claude (Anthropic), ChatGPT (OpenAI), Cursor, and other MCP-compatible AI clients
• Privacy policies:
  • Anthropic (Claude): anthropic.com/privacy
  • OpenAI (ChatGPT): openai.com/privacy
• Note: Entirely optional. You choose which AI platform to connect, and data is only shared when you actively query through that platform

How We Use Your Data

We use your data to:

1. Apply visual styling (dark mode, custom themes, contrast fixes)
2. Enable productivity features (drag-and-drop, formatting, notes)
3. Sync your notes across devices (if enabled)
4. Share Team Notes with your organization members
5. Enable quick job switching with keyboard shortcuts
6. Apply budget hierarchy shading
7. Save your preferences locally
8. Verify premium licenses (optional)

We do NOT:

• Sell your data to third parties
• Use your data for advertising
• Share your data outside your organization (except Team Notes with teammates)
• Access your JobTread project or client data
• Monitor your activity beyond what's needed for features
• Use analytics or tracking
• Display advertisements
• Collect usage statistics

Data Retention

• Local data: Retained until you uninstall the Extension or clear browser data
• Cloud notes: Retained while your account is active
• Account data: Retained until you delete your account
• Deleted notes: Permanently removed from our servers
• API data: Deleted when you disconnect JobTread or upon request

Data Security

• All network communication uses HTTPS/TLS encryption
• Passwords are hashed using industry-standard algorithms
• Access tokens expire and require refresh
• Database access is authenticated and logged
• Chrome's built-in encryption protects locally synced data
• No plain-text sensitive data storage
• Extension code is open source and auditable on GitHub

Children's Privacy

The Extension is designed for business professionals and is not directed at children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date at the top of this page. Continued use of the Extension after changes constitutes acceptance of the updated policy.

Your Rights

You have the right to:

• View all data stored by the Extension (Chrome DevTools → Application → Storage)
• Export your notes (copy content manually)
• Delete local data (uninstall the Extension or clear storage)
• Delete cloud data (delete individual notes or your account)
• Opt out of cloud sync (use local-only mode)
• Request information about your data (contact us)
• Deactivate your premium license at any time

Open Source

The Extension's source code is publicly available on GitHub, allowing you to verify our privacy practices and security implementations:

https://github.com/King0lightai/JT-Power-Tools

We encourage security researchers and developers to review the code and report any concerns.

Contact

For privacy questions or concerns:

• GitHub Issues: github.com/King0lightai/JT-Power-Tools/issues
• Premium: jtpowertools.com/#pricing

Legal Disclaimer

JT Power Tools is an independent extension and is not officially affiliated with, endorsed by, or connected to JobTread or its parent company. JobTread is a trademark of its respective owner.

Consent

By installing and using JT Power Tools, you consent to this Privacy Policy.

Data Processing Summary

Data Type	Collected?	Stored Where?	Shared With?
Extension Settings	Yes	Local browser storage	Chrome sync only
Message Signature & Templates	Yes (user-created)	Local browser storage	Chrome sync only
Quick Notes (local mode)	Yes (user-created)	Local browser storage	Chrome sync only
Personal Notes (sync enabled)	Yes (if account created)	Cloudflare D1	Only you
Team Notes	Yes (if account created)	Cloudflare D1	Your organization's team members
Account Info (email, name)	Yes (if account created)	Cloudflare D1	No one
License Key	Yes (if Premium)	Local + Cloudflare D1	Gumroad (verification)
Email (from Gumroad)	Yes (if Premium)	Cloudflare D1	No one
JobTread Org Info	Yes (Power User API only)	Cloudflare D1	No one
JobTread Grant Key	Yes (Power User API only)	Cloudflare D1 (encrypted)	JobTread API
Job Names/IDs (cached)	Yes (Power User API only)	Cloudflare KV (temporary)	No one
MCP Query Results	Yes (Power User MCP only)	Not stored (real-time)	Your chosen AI platform
JobTread Project/Client Data	No (not stored by us)	N/A	AI platform via MCP (if enabled)
Usage Analytics	No	N/A	No one