Add privacy policy for AI Emailer add-in

PRIVACY.md

@@ -0,0 +1,76 @@
+# Privacy Policy
+
+## Introduction
+
+Thank you for using the AI Emailer add-in. Your privacy is important to us. This privacy policy explains how we handle your personal data when you use our add-in.
+
+## Data Collection and Usage
+
+### Local Storage
+
+The AI Emailer add-in stores the API key locally in your browser's localStorage. This data is not transmitted to our servers. It is used solely for the purpose of authenticating requests to the Groq API.
+
+### Communication with Groq API
+
+The add-in communicates directly with the Groq API at `https://api.groq.com`. We do not store or process any user data on our servers. For information on how Groq handles your data, please refer to their privacy policy: [Groq Privacy Policy](https://groq.com/privacy-policy).
+
+## No Data Storage on Our Servers
+
+We do not store any user information on our website (`https://outlook.addin.pp.ua`). All data processing is done locally on your device or directly with the Groq API.
+
+## Third-Party Services
+
+Our add-in does not use any third-party services other than the Groq API. We do not share your data with any other third parties.
+
+## Legal Basis for Processing (GDPR)
+
+Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
+
+- **Consent**: By using our add-in and providing your API key, you consent to the processing of your data as described in this policy.
+- **Legitimate Interests**: We have a legitimate interest in providing and improving our service, which requires the use of your API key to authenticate requests to the Groq API.
+
+## Your Rights
+
+Under the GDPR, you have the following rights:
+
+- **Right to Access**: You have the right to request access to your personal data.
+- **Right to Rectification**: You have the right to request the correction of inaccurate personal data.
+- **Right to Erasure**: You have the right to request the deletion of your personal data.
+- **Right to Restrict Processing**: You have the right to request the restriction of processing of your personal data.
+- **Right to Data Portability**: You have the right to request the transfer of your personal data to another organization.
+- **Right to Object**: You have the right to object to the processing of your personal data.
+- **Right to Withdraw Consent**: You have the right to withdraw your consent at any time.
+
+To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.
+
+## Data Retention
+
+We only retain your API key in your browser's localStorage for as long as necessary to provide our service. You can remove this data at any time by clearing your browser's localStorage or uninstalling the add-in.
+
+## Data Security
+
+We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
+
+## International Data Transfers
+
+As our add-in communicates directly with the Groq API, your data may be transferred to and processed in countries outside the European Economic Area (EEA). By using our add-in, you consent to these transfers. We ensure that such transfers comply with applicable data protection laws.
+
+## Changes to This Privacy Policy
+
+We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.
+
+## Contact Us
+
+If you have any questions about this privacy policy or our data practices, please contact us:
+
+- Via our Github project: https://github.com/sctg-development/groq-outlook
+
+## Supervisory Authority
+
+If you are located in the European Union and believe we are not adhering to our obligations under data protection laws, you have the right to lodge a complaint with your local supervisory authority.
+
+Thank you for using the AI Emailer add-in.
+
+---
+
+This privacy policy was last updated on October 1, 2024.