Overview
WooInline Editor ("the Extension") is a Chrome browser extension that allows WooCommerce store owners to edit product data directly on their storefront. This policy explains what data the Extension handles and how it values your privacy.
Data We Store Locally
The Extension stores the following data exclusively in your browser using chrome.storage.local. This data remains on your local device and is never transmitted to our servers:
- WooCommerce store URL – the domain of your WooCommerce store.
- WooCommerce REST API credentials – Consumer Key and Consumer Secret used to authenticate API requests to your store.
- Field mappings – CSS selector paths indicating which storefront elements correspond to WooCommerce product fields.
- Gemini API key – if configured, your Google Gemini API key is stored locally on your device to power the AI writing assistant.
- Google account email – your signed-in Chrome account email is read once via the Chrome Identity API and cached locally on your device for optional display. It is never sent to us or any third party.
Data Sent to Third Parties
Depending on your usage of the Extension, data is communicated to the following third-party endpoints directly from your browser:
- Your WooCommerce store: Product read and update requests are sent directly to your own WooCommerce REST API using the credentials you provide. We have no access to this traffic.
-
Google Gemini API: When you use the AI writing assistant, the product name and current field content (title, short description, or full description) are sent to Google's Generative Language API (
generativelanguage.googleapis.com) using your API key. This data is processed in accordance with the Google Privacy Policy and Gemini API Terms of Service. - catbox.moe (image hosting): When you upload a product image, the file is uploaded to catbox.moe to generate a public URL for your WooCommerce product. Uploads are subject to catbox.moe's terms.
-
AI background removal (img.ly CDN): When using background removal, the image is processed locally on your device. The AI model files are downloaded once from img.ly's CDN (
resources.img.ly). Your images are never uploaded to img.ly.
| Third Party | Data Sent | When | Opt-in? |
|---|---|---|---|
| Your WooCommerce store | Product data (via REST API) | When editing a product | Required |
| Google Gemini API | Product name & field content (text) | When using AI writing assistant | Opt-in |
| catbox.moe | Product image file | When uploading a product image | Opt-in |
| img.ly CDN | Model download only (no user data) | First use of background removal | Opt-in |
Data We Do Not Collect
The Extension has no backend server. We do not collect, transmit, or have access to any personal data, browsing history, or store statistics. We never receive your API credentials, product details, or images.
Permissions Explained
The Extension requests the following permissions to function correctly:
- storage – To save your API credentials, AI configurations, and selectors locally.
- activeTab / scripting – To inject the inline editor interface into product pages you browse.
- contextMenus – To enable mapping fields via right-click context menu options.
- offscreen – To run background removal AI scripts locally.
- identity – To retrieve your signed-in Chrome account email for local identification.
- host_permissions (*://*/*) – Required to perform API queries directly to your store, Gemini, and catbox.moe.