# Privacy Policy for Bridge - Compatible with Joule 4 Consultant

**Effective Date:** January 9, 2026

## 1. Introduction
This Privacy Policy describes how **Bridge - Compatible with Joule 4 Consultant** ("we", "our", or "the Extension") handles your data. We are committed to protecting your privacy. **The core principle of our extension is that your data stays with you.**

## 2. Data Collection and Usage

We do NOT collect, store, or transmit your personal data to our own servers. The extension operates locally on your device, with limited communication to essential third-party services as described below.

### A. User Credentials (SAP Login) & API Keys
*   **What we store:** Your SAP login ID/Password and OpenAI API Key.
*   **Where we store it:** These are stored strictly in your browser's local storage (`chrome.storage.local`).
*   **How we use it:** 
    *   **SAP Credentials:** Used solely to facilitate the "Auto Login" feature on SAP websites.
    *   **API Key:** Used solely to authenticate your requests to the OpenAI API.
*   **Data Sharing:** This data is **NEVER** shared with us or any third parties. It never leaves your browser except to authenticate with the respective services (SAP and OpenAI).

### B. User Content (Text & Images)
*   **What we process:** The text descriptions you type and the screenshots you upload for analysis.
*   **How we use it:** This content is sent directly to the **OpenAI API** for the purpose of generating prompt suggestions.
*   **Data Retention:** We do not retain this data. Once the analysis is returned, the data is discarded from memory.

## 3. Third-Party Services

### OpenAI API
*   To provide AI-powered analysis, the extension sends your input (text and images) to OpenAI.
*   Please refer to [OpenAI's Privacy Policy](<https://openai.com/privacy>) for details on how they handle API data. Note that OpenAI generally does not train its models on data submitted via its API unless explicitly opted in.

### SAP BTP / Joule
*   The extension interacts with SAP's websites to display the Joule interface. Your interactions within the SAP iframe are governed by SAP's own privacy policies. We do not intercept or log your chat history with Joule.

## 4. Permissions Usage
*   **Host Permissions:** Used only to allow the extension to run on specific SAP domains and communicate with the OpenAI API.
*   **Scripting/ActiveTab:** Used only to inject text into the Joule chat input field upon your request.

## 5. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

## 6. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
*   Email: [[email protected]]