Grabify Privacy Policy and Terms

Overview

Grabify processes captured content locally. Grabify's servers do not receive your captures.

Captured images, annotations, notes, PDFs, and PowerPoint files are processed on your device. In-progress sessions are stored in the extension's local browser database so they can be restored. Captured content leaves your device only when you explicitly enable and use an optional export integration.

Record mode: Chrome's display-sharing picker lets you choose the browser tab, window, or screen to record and whether available system or tab audio is included. Recording chunks are held only in page memory, assembled on-device, and downloaded locally as a WebM file when you stop. Grabify does not upload Record-mode video or audio to its servers, and optional export integrations do not receive a recording automatically. The file leaves your device only if you later choose a separate sharing or upload action.

Grabify does not continuously log your browsing history, include third-party advertising trackers, build an advertising profile, sell personal information, or sell captured content.

Data sent to Grabify

Random device identifier: A random identifier is created only when you press Send on feedback. It may be stored through Chrome sync and sent to rate-limit voluntary feedback and prevent abuse. It does not itself contain your name or email.
Account and purchase information: If you buy Pro or credits, your email address, license key, subscription or purchase status, plan, and credit balance are processed to provide and administer the purchase.
Credit usage: The license key, number of credits used, and a random spend identifier keep balances accurate and make retries idempotent.
Checkout claim token: A short-lived random token lets the extension activate a completed purchase automatically. It is not connected to captured content.
Voluntary feedback: Only after you press Send, Grabify receives your message, current page URL, browser user-agent string, and random device identifier. The extension displays this disclosure before submission.
Optional uninstall feedback: After uninstall, Chrome may open a Google feedback form. Nothing is submitted unless you choose to complete and send that form.
Service request metadata: Hosting and security providers may process standard information such as IP address, request time, and HTTP headers to deliver, secure, and troubleshoot the API.

Stripe handles card and bank information. Grabify does not receive or store those payment credentials.

Local data and credentials

Captures and recoverable sessions are stored in the extension's local IndexedDB database. Preferences, capture settings, local funnel events, and non-sensitive integration configuration are stored in local Chrome extension storage. Sensitive integration values—including webhook URLs, custom headers and fields, Airtable tokens, and Cloudinary upload presets—are held only in Chrome's in-memory session storage. They are not written to local or sync storage and must be re-entered after Chrome restarts or the extension reloads. License status, usage counters, the one-time review-credit grant, and a random device identifier created for voluntary feedback may be stored through Chrome sync. Websites cannot read these extension storage areas. Local funnel events are not sent to Grabify.

Optional integrations

Airtable and Cloudinary: When configured and enabled, the completed PDF is uploaded through the Cloudinary account and unsigned preset you provide; the hosted link and configured company name are then sent to your selected Airtable base.
Custom webhook: When configured and enabled, the completed PDF plus the metadata and headers you configure are sent to that HTTPS endpoint.

These transfers occur at your direction and are governed by the destination provider's terms. Integrations are disabled by default.

Service providers and sharing

Stripe processes checkout and subscriptions. Vercel hosts the Grabify API. Upstash stores operational records for licenses, purchases, credits, and voluntary feedback, plus historical referral records created by older versions. Google Chrome sync may sync small extension records through your signed-in Chrome profile. Google Forms may host the optional uninstall-feedback form.

Grabify does not sell data or transfer it for advertising, credit scoring, or purposes unrelated to capture and export, licensing, billing, user-requested support, security, and service reliability.

Extension permissions

activeTab: Captures the tab where you invoke Grabify.
scripting: Displays and runs the packaged capture and export tools on the selected page.
storage: Saves sessions, preferences, entitlements, and integration settings.
unlimitedStorage: Prevents larger user-created sessions from being discarded before export.
Website access: Lets Grabify work on pages and embedded presentation frames users choose to capture. Only after you invoke Grabify from the toolbar, the isolated keyboard bridge is injected into accessible frames and forwards capture shortcut data while the panel is active. It is not a persistent content script, does not run before invocation, and does not collect page contents or transmit browsing activity.

Purchases and subscriptions

Grabify (Chrome Web Store developer: mreiffy) is the seller of Pro subscriptions and credit packs. For purchase or billing support, contact Grabify at mreiffy@gmail.com. Google distributes the extension through the Chrome Web Store but is not the seller, payment processor, or billing-support provider for these purchases. Stripe processes payments for Grabify.

Monthly and annual Pro subscriptions automatically renew at the price and billing interval shown at checkout until canceled. Cancel before the next renewal through Manage Subscription in the extension, which opens the Stripe customer portal, or email Grabify support. Cancellation stops future renewals; Pro access ordinarily continues through the end of the paid billing period.

Credit packs and other digital purchases, including subscription charges already processed, are final and non-refundable except where required by applicable law. For a duplicate charge, incorrect amount, or other billing error, email mreiffy@gmail.com with the purchase email and charge details so Grabify can investigate.

Full Page capture is available during the initial free trial and requires Pro access after the trial ends.

Authorized use

You may capture and export only content you own or are explicitly authorized or otherwise legally entitled to copy. Grabify does not grant access rights or permission to copy content and must not be used to bypass paywalls, DRM, login restrictions, or other access controls, or where a website's terms or applicable law prohibit copying.

Retention and your choices

Local sessions and settings remain until replaced, cleared, or the extension's data is removed.
Voluntary feedback and its accompanying URL, browser information, and device identifier are retained for up to 180 days.
Checkout claim tokens expire after one hour; duplicate-credit spend identifiers expire after 90 days.
License, purchase, subscription, and fraud-prevention records remain while needed to provide the service, honor purchases, administer subscriptions, resolve disputes, satisfy legal or accounting duties, and prevent abuse. Historical referral records from older versions may remain only as needed to honor an already-earned legacy allowance, resolve disputes, satisfy legal or accounting duties, or prevent abuse.

You can disable integrations at any time in Grabify settings and remove local extension data through Chrome. To request access to or deletion of server-side information associated with a purchase, license, feedback submission, random device identifier, or historical referral record, email mreiffy@gmail.com. Include the relevant identifier so the record can be located.