Privacy Policy

Last updated April 17, 2026

This Privacy Notice for Blackmount.ai Inc. ("Blackmount," "we," "us," "our") explains how we collect, use, disclose, and protect personal information when you use our website (blackmount.ai), web app (app.blackmount.ai), browser extension, and mobile/desktop apps (together, the "Services"). If you do not agree, please do not use the Services. Contact us at support@blackmount.ai.

Summary of Key Points

By default we save URL, title, favicon, project/tags. Optional features such as Capture Content and Quick Voiceprocess additional data only with your consent and can be disabled at any time.
AI processing (if enabled) generates summaries/tags/embeddings. We configure vendors not to train on your data where controls exist and require contractual limits.
We do not sell or "share" your personal information for cross-context behavioral advertising.
You have rights to access, delete, correct, export, and appeal decisions. See Your Rights.

1) Who is responsible

Controller: Blackmount.ai Inc., PO Box 641, Palo Alto, CA 94301, USA. Email: support@blackmount.ai.

EEA/UK users: We rely on appropriate safeguards (e.g., Standard Contractual Clauses) for transfers to the U.S. If we appoint an EU/UK representative or DPO, we will update this page.

2) Information we collect

Information you provide directly and information generated by your use of the Services:

Account & Contact	Name, email, password (hashed), organization (if any), support messages.
Product Data	Bookmarks & Sessions (default): title, URL, favicon, project/tags, timestamps. Optional — Capture Content: with your consent, we may extract limited on-page text (or generate an AI summary/embeddings). Optional — Quick Voice: audio you record, transcripts you create.
Device & Diagnostics	Device/OS/browser, crash/performance logs, basic analytics, cookies/local storage (auth, preferences, feature flags).
Legal Consent Records	IP address and user-agent string when you accept our Terms of Service or Privacy Policy (required for legal compliance and GDPR consent verification).
Payments	Processed by PCI-compliant providers (e.g., Stripe). We do not store full card numbers.

Sensitive information: We do not intend to collect sensitive categories. Do not include secrets, credentials, or special category data in notes/recordings. If you enable Capture Content on pages that contain such data, you are responsible for ensuring you have a lawful basis to process it.

3) How we use information

Provide and improve Services, personalize projects/search.
Generate summaries/tags/embeddings (only if AI features are enabled).
Communicate about updates, security, and support.
Detect, prevent, and respond to fraud, abuse, or security incidents.
Comply with law and enforce terms.

Legal bases (EEA/UK): consent (AI features, microphone), contract (provide the service), legitimate interests (product safety, improvement, minimal analytics), compliance with legal obligations.

4) AI processing & "Capture Content"

AI features are opt-in. When enabled, we minimize inputs (title, selected text, first portion of content, deduplicated) and apply pattern-based redaction (e.g., obvious credentials, card numbers) before sending to model providers strictly to deliver the feature.

We use AI and machine learning models strictly to deliver features such as transcription, summarization, embeddings, and personalized recommendations. We do not use user data to train foundation models. Your data is processed only to provide and improve your individual experience.

Vendors & training: We configure available controls to disable training on your data and require contractual limits. A live list of subprocessors is maintained at /legal/subprocessors (or available on request).
Outputs: summaries, tags, and embeddings are stored with your bookmark/session and deleted when you delete that item or disable AI features.
No automated decisions with legal or similarly significant effects.

4b) AI Features and Third-Party Processing

Blackmount offers optional AI-powered features including text summarization, title generation, and content tagging. These features are off by default and are only activated when you explicitly enable them.

Third-Party AI Processor

When AI features are enabled, certain content is sent to Groq, Inc. ("Groq"), located at groq.com, for processing. Groq acts as a data processor on our behalf.

What data is sent to Groq:

Text content of voice note transcripts (for summarization)
Text content of bookmarks including title, description, and notes (for summarization)
Session metadata including titles (for AI-generated title suggestions)
Content tags and categories (for AI-generated tagging)

What data is NOT sent to Groq:

Voice audio recordings (transcription is performed on-device using Apple's Speech framework on iOS)
Email addresses or account credentials
Payment information
AI chat conversation bodies (the AI Chats feature on iOS is read-only and does not transmit chat content to Groq)

How we obtain your consent:

On iOS, the first time you use an AI-powered feature, the app presents a consent screen that names Groq, Inc. as the data recipient, describes what data will be sent, and requires your explicit approval before any data is transmitted.
In Settings, each AI feature toggle clearly identifies Groq, Inc. as the processor.
You can disable any AI feature at any time in Settings, which immediately stops future data transmission to Groq for that feature.

Data retention by Groq: Groq does not retain inference input data by default, except as may be required for service reliability and abuse monitoring. For details, see Groq's privacy practices.

Data protection: Groq provides the same or equal protection for personal data as described in this privacy policy. Data is transmitted to Groq over encrypted connections (TLS). Groq processes data in the United States. For users in the European Economic Area or United Kingdom, this constitutes a transfer of personal data to a third country, covered by Standard Contractual Clauses where applicable.

Your controls:

Disable AI features anytime in Settings
Request deletion of AI-generated content (summaries, titles, tags) by contacting support@blackmount.ai
All AI features are off by default — no data is sent to Groq unless you explicitly opt in

4c) Do Not Sell or Share

Blackmount does not sell or share your personal information as defined under the California Consumer Privacy Act (CCPA/CPRA). Groq acts solely as a data processor and does not use your data for its own purposes.

5) Browser extension specifics

Default "Save as Session": collects active tab URL, title, favicon, and your chosen project/tags. We request the minimum Chrome permissions and access page content only when needed and with your action.
Optional "Capture Content": the extension first checks eligibility with the web app (plan/limits). If approved and you confirm, we capture a limited text snippet and/or generate an AI summary/embeddings. We do not collect page content otherwise.
Form fields: the extension is designed not to read form fields such as passwords or payment details. If you believe sensitive fields were captured, contact us and disable Capture Content.

Permission	Why we need it
activeTab	Read the current tab's URL/title when you click "Save".
tabs	Enumerate open tabs to save/restore sessions on your command.
storage	Store extension settings and short-lived cache to improve UX.
scripting (on click)	Inject a lightweight content script only when you opt into "Capture Content".

No background collection: We do not continuously monitor or harvest your browsing history. Data flows only when you take an action (e.g., Save/Restore, Capture Content).

Chrome Web Store Restricted Use: We do not use or transfer personal and sensitive user data for purposes unrelated to the extension's core functionality, we don't sell data, and we don't share it for cross-context behavioral advertising.

5b) AI Chat Capture (supported AI chat platforms)

When you visit a conversation page on a supported AI chat platform — currently ChatGPT, Claude, Gemini, Grok, Meta AI, DeepSeek, and Perplexity — the Blackmount browser extension may capture conversation data from that page so you can view, search, and sync your own conversations across devices.

Metadata: conversation title, URL, message count, first user message, timestamp, and platform name. Metadata syncs automatically for signed-in users when the extension captures a conversation.
Conversation content: the full text of user messages and AI responses. Content syncs by default for signed-in users. You can opt out at any time from the extension settings or from Settings in the web app, which immediately stops future body uploads.
Your control: you can disable content sync at any time. Opting out permanently deletes all previously uploaded conversation content from your account on our servers. You can also disable AI chat capture entirely from the extension settings.
How we use it: only to let you view, search, and sync your own conversations. We do not sell this data, share it for advertising, or use it to train any AI or machine-learning models. Encrypted in transit (TLS 1.2+) and at rest.

We do not sell or "share" personal information for cross-context behavioral advertising. We disclose data only to:

Cloud hosting, databases, search/embedding, observability, email delivery, and payment processors.
Trusted AI service providers (OpenAI, Groq, Grok, Gemini) used to power select features, under strict confidentiality and contractual safeguards.
Authorized enterprise administrators (for organization accounts).
Regulators/law enforcement when legally required.
Successors in a business transfer with notice and your choices.

Our current subprocessors and their locations are listed at /legal/subprocessors. We will give advance notice of material changes where required.

7) Security

Encryption in transit (TLS 1.2+) and at rest.
Role-based access, least privilege, logging, and key/secret rotation.
Vulnerability management and incident response procedures.

No security program can guarantee 100% protection. If we learn of a breach affecting your data, we will notify you and regulators as required by law.

8) Data retention

Account	For the life of the account and for up to 30 days after closure (backup cycling), unless legal obligations require longer.
Bookmarks & Sessions (default)	Until you delete them or close your account.
AI summaries/embeddings (optional)	Deleted when the related bookmark/session is deleted or when you disable AI features.
Voice recordings/transcripts (optional)	User-controlled; default retention can be set in Settings.
Billing & tax records	Per applicable law (typically 7 years).

If you do not log in for 12 months, we may deactivate your account and delete your stored data. You may also request permanent deletion of your account and associated data at any time.

9) Your privacy rights & choices

Depending on your location, you may have the right to access, delete, correct, restrict, object, opt out of sale/share/targeted advertising, receive a portable copy, and withdraw consent.

Use Settings to export/delete data, manage AI features, and set retention.
Or email support@blackmount.ai. We will verify requests (e.g., email confirmation, session checks).
Appeals: If we deny your request, you may appeal by replying "Appeal" to our decision email or emailing support@blackmount.ai with subject "Appeal." If unresolved, you may contact your regulator.
Authorized agents (CA): You may designate an agent; we may require proof of authorization and your verification.
Non-discrimination: We will not discriminate for exercising privacy rights. Some features may require data processing to function.
You may permanently delete your account and all associated data at any time. Once deleted, data cannot be recovered.

Global Privacy Control (GPC): We do not sell/share personal information. If that changes, we will honor GPC signals as opt-out requests.

Do Not Track: We do not respond to DNT signals due to industry standards variability.

10) International transfers

We may transfer information to the United States and other countries where our cloud providers operate (AWS, GCP). For EU/UK users, such transfers rely on Standard Contractual Clauses (SCCs) or equivalent safeguards consistent with GDPR. You may request details of these safeguards at support@blackmount.ai.

11) Voice & local recording laws

Quick Voice requires microphone permission. Recording laws vary by jurisdiction (e.g., one-party vs. two-party consent). You are responsible for complying with applicable laws and obtaining consent from participants before recording.

12) Children's privacy

The Services are not directed to children under 13 (or older where required). We do not knowingly collect children's personal information. If you believe a child has provided personal information, contact us to request deletion. We may take steps to remove the account.

13) Paid features & subscriptions

We offer both free and paid subscription tiers (such as Pro plans with premium storage, extended voice recording, and enhanced AI features). Payments are processed securely through Stripe, a PCI-compliant payment processor. We do not store full credit card numbers. You may cancel your subscription at any time through Settings.

14) Changes to this notice

We will post updates here and update the "Last updated" date. For material changes, we will provide additional notice (e.g., email or in-app) and obtain consent where required.

15) Contact us

Email: support@blackmount.ai
Mail: Blackmount.ai Inc., PO Box 641, Palo Alto, CA 94301, United States

Data Disclosure (Chrome Web Store summary)

Data category	Collected	Used for	Shared
Account identifiers (email)	Yes	Authentication/support	No
Web content you save (URL/title/favicon; optional snippet)	Yes (user-initiated)	Core features (bookmarks/sessions, optional AI)	No
Diagnostics & crash data	Yes	Debugging, service reliability	No
Precise location, payments data, device IDs	No	—	No

We collect browsing data only when you explicitly save a page or enable "Capture Content". We do not collect or sell your general browsing history.

This notice summarizes our practices. Product UI may present additional, in-context disclosures and controls. A Data Protection Addendum and Subprocessors list are available at /legal or on request.