Privacy Policy

The short version

Local features of the Bookmark Commander extension (search, side panel management, duplicate and dead link cleanup) run entirely in your browser — your bookmarks never reach our servers. Data leaves your machine only when you explicitly use a cloud feature: AI organize or cloud backup.

Who is responsible

Bookmark Commander is a product of Xeviora, a brand operated by LIU HU, a sole proprietor, who is the controller of the personal data described in this policy. Contact: support@xeviora.com

Data we collect

• Account data. When you create an account: email address, name, and — if you sign in with Google or GitHub — the basic profile those providers share.
• AI organize. When you run AI organize, the titles, URLs and folder paths of the bookmarks you selected, plus any instructions you type, are sent to our server and forwarded to our AI provider (OpenRouter) to compute folder suggestions. See "AI processing" below.
• Cloud backup. When you create a backup, your bookmark tree snapshot (titles, URLs, folder structure) is stored encrypted at rest in our storage (Cloudflare R2) until you delete it.
• Credits and subscription. Your AI credit history (grants and charges), your plan and subscription status, and the Paddle customer and subscription identifiers we receive from Paddle.

Payment processing

Payments are processed by our reseller and Merchant of Record, Paddle.com ("Paddle"). Paddle collects and processes your payment and billing information (such as name, email, billing address, country and payment details) as an independent data controller in order to process your order, calculate taxes, prevent fraud and meet its legal obligations. We never receive or store your full card details. We receive limited order information from Paddle (such as your email, country, plan and transaction status) to provide the service. See Paddle's Privacy Notice: https://www.paddle.com/legal/privacy.

AI processing

To provide AI organize, the content you submit — the titles, URLs and folder paths of the bookmarks you selected and any instructions you type — is sent to our AI service providers (OpenRouter and the model providers it routes to) for processing. We do not use your content to train models, we send it to our providers only so they can return results to you, and we do not retain the bookmark content after the request completes.

What we never collect

• Your browsing history or the content of pages you visit.
• Bookmarks you have not explicitly submitted to a cloud feature.
• Anything from local-only usage — no telemetry is required to use the extension.

Data retention and deletion

Backup snapshots persist until you delete them from the dashboard or the extension. Deleting a snapshot removes both the database record and the stored file. You can delete your entire account yourself from Settings → Danger zone: type the confirmation code shown there and your account, every backup and your credit history are removed immediately and permanently. No email request and no waiting period. Paddle keeps its own order records as required by law.

Service providers

We rely on the following providers, each receiving only the minimum data needed for its function:

• Vercel — website hosting
• Neon — database (account, credit and subscription records)
• Cloudflare R2 — cloud backup file storage
• OpenRouter and the model providers it routes to — AI processing for AI organize
• Resend — transactional email (password reset only)
• Google and GitHub — optional sign-in, used when you choose them
• Paddle — payments, as an independent controller (see "Payment processing")

Cookies

We use a single first-party session cookie for authentication, scoped to bookmark.xeviora.com only. No advertising or cross-site tracking cookies.

Your rights

Depending on where you live, you have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. You can delete your account and all stored data yourself from Settings; for any other request, email support@xeviora.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

Contact

Questions about this policy: support@xeviora.com