Privacy Policy

We collect only what's necessary to provide the Service:

• Account info: name, email, and authentication identifiers from Clerk.
• Captures: screenshots, DOM data, and styles you explicitly capture from third-party sites.
• Prompts: generated AI development briefs you create from captures.
• Usage metrics: capture and prompt counts per month, to enforce plan limits.
• Billing: handled entirely by Stripe. We never see card numbers.

The SpecShot browser extension is the tool you capture with, and it is covered by this policy. What it does, precisely:

• It reads a page only when you ask it to. The extension loads a small script on the sites you visit, but that script does nothing except wait for a message. It reads no content, draws nothing, and sends nothing until you open the side panel and start a capture. Nothing runs on its own when a page loads.
• What a capture contains. The section you select, as structured data: its layout, computed styles, colors, fonts, text content, and a screenshot. We also store the address and title of the page you captured and the time you captured it, so you can find the capture again later.
• What it leaves behind. Form values and password fields are never collected. Where a form is part of the design you captured, we record its structure, meaning the field types, visible labels and placeholder text, and never what anyone typed into it.
• Where it sends things. Only to your own SpecShot account. The extension contacts no other server. It also sends SpecShot first-party usage counts, so we can see where captures fail: an event name from a fixed list, the capture mode you picked, and a coded failure reason, tied to your workspace once you connect. It never sends a web address, a page title, or anything on a page. You can turn usage counts off in the side panel, under the Connected badge. It contains no advertising code and no third-party tracking.
• Drafts stay on your machine. A capture you have not saved yet, including its screenshot, is held in your browser's local extension storage so it survives closing the side panel. It is removed when you save or discard it, and it is never uploaded on its own.
• Sending a prompt to an AI tool. If you choose to open an AI assistant from the panel, the extension fills that tool's message box with the prompt you generated. That happens in your browser, at your instruction, and what you then send is governed by that tool's own privacy policy.
• Captured DOM is data, never code. It is stored as JSON and is never executed or re-rendered as a live page.

You can:

• Export all your captures and prompts as JSON or Markdown at any time.
• Delete individual captures, prompts, or your entire account.
• Request a complete data export by emailing hello@specshot.cc.

Account deletion removes all your data within 30 days.

We use only essential cookies for authentication and session management. No tracking, ad-targeting, or third-party analytics cookies are set on visitor browsers without consent.

For agency customers handling EU client data, we offer a Data Processing Agreement (DPA). See our DPA for details.

Privacy questions or requests? Email hello@specshot.cc.