Terms Privacy Refunds

Last updated 12 September 2026

Privacy Policy — Chrome Extension

This Privacy Policy covers the Aquara Chrome browser extension and explains what information the extension collects, how that information is used and stored, and when information may be shared with third parties. Contact: admin@aquara.ai.

Aquara's Chrome extension is a business-intelligence tool designed to identify the company associated with the website a user is visiting and provide authenticated users with relevant company information, transaction history, professional business contacts, and other business intelligence. The data access described in this policy is used to provide, maintain, secure, and improve this user-facing functionality.

1.Account information

When you create an Aquara account, we collect:

  • Your email address;
  • Your phone number; and
  • Optionally, the organization name you select.

Account authentication is handled through Supabase Auth, our authentication provider.

Your phone number is stored on your account record and may be used to contact you regarding your account or Aquara's services. It is not used for SMS advertising or marketing and is not used to sign you in.

When you sign in, Supabase Auth also records technical session information for each of your active sessions, including the IP address the session was created from and when it was last active. Aquara uses this session information to keep you signed in securely and to detect when an account is being actively used from an unusual number of locations at once, which may indicate the account is being shared beyond its authorized user — in which case Contacts and Transaction History are temporarily paused for that account until the extra sessions go idle, as described in Section 9. Session information is not used to determine your precise physical location and is not used for advertising.

We use account information to:

  • Create and authenticate your Aquara account;
  • Associate your account with the appropriate organization, where applicable;
  • Provide access to Aquara's services;
  • Communicate with you about your account;
  • Provide customer support;
  • Detect and limit sharing of a single account across multiple people or devices; and
  • Protect Aquara against unauthorized, fraudulent, or abusive use.

2.Domains of websites you visit

Once you are signed in and the extension has permission to operate on a website, Aquara automatically detects the domain of the website you are visiting. You do not need to click or otherwise interact with the extension for this to occur.

For each website you visit while the extension is active and has site access, Aquara automatically sends the website's domain (hostname), for example example.com, to our backend and stores it in our database.

We use the domain to:

  • Identify the company associated with the website;
  • Determine whether that company already exists in Aquara's database;
  • Retrieve relevant company information;
  • Retrieve professional business contacts;
  • Retrieve transaction history and related business information;
  • Create or improve company records in Aquara's database; and
  • Provide and improve the extension's business-intelligence functionality.

Because domains are automatically transmitted and stored as you browse while the extension is active, this information may constitute browsing history.

Aquara does not use browsing activity to:

  • Serve advertising;
  • Create advertising or behavioral profiles;
  • Retarget users;
  • Track users across websites for advertising purposes;
  • Determine creditworthiness or eligibility for lending; or
  • Sell information about users' browsing activity.

We do not sell or rent users' browsing activity.

The extension collects and stores the domain/hostname. It does not collect the full URL, URL path, URL query string, page content, form data, passwords, keystrokes, cookies, or information you type into websites.

Page metadata for unmatched domains. When the website's domain does not yet match a company in Aquara's database, the extension additionally reads that page's title, meta description, and site name — the same publicly declared metadata a site provides for link previews — and sends those values, together with the domain, to Aquara's backend so the company record can be created or enriched. This metadata is not collected for websites whose domain already matches a company in Aquara's database.

Automatic domain detection and processing are part of the extension's core functionality.

Users can prevent Aquara from accessing particular websites by changing the extension's site-access permissions through Chrome. Users can also stop this collection by signing out of Aquara or uninstalling the extension.

3.Information stored on your device

Certain information is stored locally in your browser's extension storage, including:

  • Session tokens, which allow you to remain signed in; and
  • Cached company lookups.

Cached company information may include business information such as company names and the names, professional job titles, work email addresses, and phone numbers of business contacts displayed by Aquara.

Cached information is stored temporarily to improve extension performance.

Aquara uses session tokens solely to maintain your authenticated session. Session tokens are not used for advertising, behavioral profiling, or tracking activity unrelated to Aquara's functionality.

Local cached information is deleted when you sign out.

4.Information the extension does not collect

The Aquara Chrome extension does not collect:

  • Full URLs, URL paths, or query strings;
  • Full webpage content, other than the limited page metadata described in Section 2 for unmatched domains;
  • Text you select on webpages;
  • Text you type into websites;
  • Passwords;
  • Form inputs;
  • Cookies belonging to websites you visit;
  • Private communications;
  • Files or photographs;
  • Financial information entered on websites;
  • Health information entered on websites;
  • Precise geolocation information;
  • Advertising identifiers; or
  • Data for behavioral or targeted advertising.

The extension does not contain advertising tracking pixels.

The extension does not use information from websites you visit to infer sensitive personal characteristics.

5.How Aquara uses information

Aquara uses information collected through the extension only as necessary to provide, operate, maintain, secure, and improve Aquara's disclosed business-intelligence functionality.

Specifically, we may use information to:

  • Authenticate users and maintain accounts and sessions;
  • Identify the company associated with a website being visited;
  • Determine whether a company already exists in Aquara's database;
  • Retrieve and display relevant company information;
  • Retrieve and display transaction history;
  • Retrieve and display professional business contacts;
  • Create or enrich company records;
  • Maintain and improve the reliability and performance of the extension;
  • Secure Aquara and prevent fraud, unauthorized access, and abuse;
  • Troubleshoot technical issues; and
  • Respond to customer-support and account-related requests.

Aquara does not use information collected through the extension for purposes unrelated to the extension's disclosed functionality.

6.How and with whom information is shared

Aquara does not sell personal information or browsing activity.

We do not share information collected through the extension with advertisers, advertising networks, or data brokers.

Aquara uses third-party service providers where necessary to operate the extension and its supporting infrastructure.

  • Supabase

    Backend infrastructure, database services, and authentication

    What they may process
    • Your email address;
    • Your phone number;
    • Your organization, if provided;
    • Authentication and account information; and
    • Website domains processed through the extension.
    Why
    To authenticate users, store account information, operate Aquara's database, and provide the extension's company-lookup and business-intelligence functionality.
  • Google favicon service

    Public favicon service used to display company and news-source logos

    What they may receive
    The domain associated with the company or source whose favicon is being requested.
    Why

    Requests are used to display the relevant favicon and do not intentionally include your Aquara account information.

    Aquara does not share user data with Google for advertising purposes through this functionality.

  • Anthropic

    AI research provider used to power company and transaction research

    What they may process
    • The domain, and the page's title, meta description, and site name, for a website whose domain does not yet match a company in Aquara's database; and
    • The company name and domain, when researching that company's transaction history.
    Why
    To research and populate company profiles and transaction history as part of Aquara's business-intelligence functionality, under Aquara's commercial API agreement with Anthropic.
  • FullEnrich

    Contact-data provider used to find professional contacts at a company

    What they may process
    The company's domain, when retrieving that company's professional business contacts.
    Why
    To source and enrich the professional business-contact records described in Section 8, as part of Aquara's business-intelligence functionality, under Aquara's commercial agreement with FullEnrich.
  • Stripe

    Payment processor for Aquara subscriptions

    What they may receive
    The payment and card details you enter directly on Stripe's own hosted checkout page, and your email address, when you start or manage a paid Aquara subscription.
    Why

    To process subscription payments. Choosing to upgrade opens Stripe's checkout page in a new tab; the Aquara extension and Aquara's backend do not receive, handle, or store your card details.

  • Resend

    Email delivery provider used to send account and service notifications

    What they may process
    Your email address, and limited details of the notification itself — for example, the company names associated with a completed transaction-history request — when Aquara sends you a notification email.
    Why
    To deliver transactional emails, such as notifying you when a transaction-history request you submitted has finished being reviewed.

Other disclosures

Except for service providers used to operate Aquara, we may disclose information where reasonably necessary to:

  • Comply with applicable law, regulation, legal process, or governmental request;
  • Protect the security and integrity of Aquara;
  • Investigate fraud, abuse, or security threats;
  • Protect the rights and safety of Aquara, our users, or others; or
  • Facilitate a merger, acquisition, financing, reorganization, or sale of all or part of Aquara's business, subject to applicable law.

Aquara does not sell, rent, or transfer Chrome extension user data to advertising platforms, data brokers, or information resellers for their independent advertising or marketing purposes.

7.Human access to user data

Aquara personnel do not routinely read or manually inspect individual users' browsing activity.

Human access to user data may occur where reasonably necessary to:

  • Provide support requested by a user;
  • Investigate security incidents, fraud, or abuse;
  • Maintain or troubleshoot Aquara's services;
  • Comply with applicable law; or
  • Perform permitted internal operations using appropriately protected, aggregated, or anonymized information where practicable.

Access to user information is limited to authorized personnel where access is necessary for their role.

For example, authorized administrators can view session counts and IP addresses for accounts flagged under the account-sharing safeguard described in Section 1, solely to confirm and resolve that flag.

8.Professional business contact information in Aquara

Aquara is a business-intelligence platform.

Aquara's database may contain professional information about people associated with companies, including:

  • Names;
  • Professional job titles;
  • Work email addresses; and
  • Professional phone numbers.

This information may come from third-party business-data providers and publicly available sources and is made available to authenticated Aquara users as part of Aquara's business-intelligence functionality.

Professional business-contact information in Aquara's database is separate from an extension user's browsing activity.

Aquara does not add a user's browsing activity to professional contact profiles or use browsing history to create professional profiles about extension users.

If you are a professional whose information appears in Aquara and would like to request correction or removal, contact us at admin@aquara.ai.

9.Your choices and rights

Chrome site access

Chrome allows you to control the websites on which Aquara can operate.

You can manage Aquara's site-access permissions through Chrome's extension settings.

If you prevent the extension from accessing a website, Aquara will not automatically process that website's domain through the extension while that restriction applies.

Signing out

Signing out stops authenticated company lookups and removes locally cached Aquara information associated with your session.

Uninstalling

You can uninstall Aquara at any time through Chrome. Uninstalling removes information stored locally by the extension from your browser.

Account-sharing safeguard

If Aquara detects that your account is signed in from an unusual number of locations at once, as described in Section 1, Contacts and Transaction History are temporarily paused and the extension displays a notice explaining why. Signing out on your other devices restores access once the extra sessions go idle.

Privacy requests

Depending on your location and applicable law, you may have rights relating to your personal information, including rights to:

  • Request access;
  • Request correction;
  • Request deletion;
  • Request portability; or
  • Object to or restrict certain processing.

To submit a privacy request, contact admin@aquara.ai.

We aim to respond to valid requests within 30 days, subject to applicable law.

Where applicable, Aquara processes personal information in accordance with relevant privacy laws, including Brazil's Lei Geral de Proteção de Dados (LGPD).

10.Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal, security, and operational requirements.

In particular:

  • Account information is generally retained while your account remains active and may be deleted following a valid deletion request, subject to applicable retention obligations.
  • Website domain information and limited page metadata used to create or enrich company records may be retained as part of Aquara's company database. Other browsing-related records are retained only for as long as reasonably necessary to operate, maintain, improve, and secure Aquara's services.
  • Locally cached extension information is temporary and is removed when you sign out.

When information is no longer reasonably required, we delete or anonymize it, subject to retention that may be necessary for legal compliance, security, fraud prevention, dispute resolution, or enforcement of our agreements.

11.Data security

Aquara uses reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

Information transmitted between the Chrome extension, Aquara's backend, and our service providers is transmitted using secure encrypted connections, such as HTTPS/TLS.

Authentication and session information are handled using secure authentication mechanisms.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

12.Chrome Web Store Limited Use

Aquara's use and transfer of information received through the Chrome extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Information accessed through Chrome permissions is used only to provide or improve Aquara's disclosed user-facing functionality and for closely related operational purposes.

Aquara does not use or transfer this information for:

  • Personalized advertising;
  • Retargeting;
  • Interest-based advertising;
  • Determining creditworthiness or eligibility for lending;
  • Sale to data brokers or information resellers; or
  • Purposes unrelated to Aquara's disclosed functionality.

13.Chrome permissions and automatic domain processing

Aquara requires access to website domains because identifying the company associated with the website a user is visiting is a core feature of the extension.

When you are signed in and Aquara has permission to operate on a website, the extension automatically sends that website's domain to Aquara's backend and stores it in our database. This occurs without requiring you to click the extension.

The domain is used for the business-intelligence purposes described in this Privacy Policy.

Chrome allows users to manage and restrict an extension's access to websites through Chrome's extension settings.

Aquara does not intentionally collect user information through Chrome permissions in a manner materially different from what is disclosed in this Privacy Policy.

If we materially change how information is collected, used, or shared, we will provide any additional disclosure or obtain any consent required by applicable law or Chrome Web Store policies.

14.Children

Aquara is a professional business-intelligence service and is not directed to children under 16.

We do not knowingly collect personal information from children through the Chrome extension.

15.Changes to this Privacy Policy

We may update this Privacy Policy as Aquara and its services evolve.

When we make changes, we will update the "Last updated" date at the top of this page.

If a material change affects how the Chrome extension collects, uses, or shares user information, we will provide additional notice or obtain consent where required by applicable law or Chrome Web Store policies.

16.Contact

If you have questions about this Privacy Policy, Aquara's privacy practices, or would like to exercise a privacy right, contact:

Aquara
Email: admin@aquara.ai