Privacy Policy

1. Who we are and what this covers

RK Digitalabs owns and operates RK PromptPilot and RK FlowPilot. RK PromptPilot automates user-supplied prompt and media-generation workflows. RK FlowPilot automates supported Google Flow workflows from a Chrome side panel. References to “we”, “us” and “our” mean RK Digitalabs.

Both extensions are independent third-party software. Neither is affiliated with, sponsored by, endorsed by, or officially associated with Google, Google Flow, OpenAI, Microsoft or another third-party platform.

2. Information we collect and store

• Account data — email, authentication records and optional profile information. Passwords are handled by the authentication service in hashed form; we do not see plaintext passwords.
• Payment and subscription data — billing email, selected plan, amount, currency, payment and order identifiers, payment status, plan type, start date, expiry date and subscription status. Razorpay handles payment credentials directly.
• Referral data — referral code, discount, billing email and redemption records needed to enforce promotion rules and report partner activity.
• Support data — the name, email, browser, issue category, message and any attachment you choose to submit through support.
• Security and technical data — request IP addresses, request metadata and error logs used for security, fraud prevention, diagnostics and service operation.

3. RK PromptPilot

RK PromptPilot lets you paste your own prompts and automates supported prompt-entry, generation and download steps. The prompts, queue and workflow settings are kept in extension storage on your device and are not sent to RK Digitalabs by the inspected implementation.

The extension interacts with the supported third-party page in your browser. Generated files are downloaded locally; we do not receive copies merely because the extension downloaded them.

4. RK FlowPilot

RK FlowPilot is a Chrome side-panel extension that automates media-generation workflows inside your existing Google Flow session. Prompts and source media are used in your browser to operate the workflow; the inspected implementation does not upload them to RK Digitalabs servers.

• Local extension data — queue state, workflow settings, logs, free-session usage, and the optional subscription email after successful verification.
• Generated files — completed media is downloaded to your local Downloads destination, by default Downloads/RK FlowPilot/<selected folder>/.
• Subscription verification — the email you enter is sent to the existing RK PromptPilot subscription endpoint. The backend checks whether the account subscription is active.
• IP information — the request may carry and the service may log your public IP as secondary audit/security information. Account/email is the subscription identity; changing Wi-Fi, ISP, hotspot or public IP does not by itself invalidate Premium.
• Advertising — RK FlowPilot does not run advertising in the inspected implementation.

5. Extension permissions and page access

The final extension manifest is the source of truth for the exact permission list. The FlowPilot extension package and manifest were not present in this website repository at the time of this audit, so the store listing and this section must be reconciled against the release build before submission.

• Supported Google Flow host access, if present — to interact with Flow pages you choose to automate.
• Side Panel, if present — to display FlowPilot controls beside the supported page.
• Storage or Unlimited Storage, if present — to retain settings, queues, logs and session usage locally.
• Scripting or Debugger, if present — to interact with supported controls and input mechanisms.
• Downloads, if present — to save completed media locally.
• Alarms or Offscreen, if present — to support long-running processing when browser service workers suspend and resume.

6. Prompts, source media and third-party AI services

The extensions do not operate an AI model or send prompts to an AI provider on your behalf. They enter the information into the third-party workflow you are already using in your browser. That platform's own terms and privacy policy govern its processing.

We do not claim to store your prompts, source images or generated output on RK Digitalabs servers based on the current inspected implementation.

7. Subscription, IP and account identity

Premium access is account-first. A valid, active subscription associated with the verified subscription email is the basis for entitlement. IP may be recorded as audit/security metadata, but it is not a required match for Premium access.

8. How we use information

• To provide accounts, subscriptions and extension entitlement checks.
• To process and reconcile payments and maintain financial records.
• To validate referral codes, enforce limits and record redemptions.
• To respond to support requests and diagnose errors.
• To prevent fraud, abuse, unauthorised access and payment misuse.
• To meet legal obligations and establish, exercise or defend legal claims.

9. Service providers and sharing

• Lovable Cloud — hosts the application database and authentication records.
• Razorpay — processes payment credentials and returns transaction metadata, status and identifiers needed to verify payment.
• Hosting, edge and delivery infrastructure — serves the site and endpoints and may process ordinary request metadata and logs.
• Chrome Web Store and Microsoft Edge Add-ons — distribute extensions under their own policies.
• Third-party workflow platforms — receive information you choose to enter into them through your own browser session and govern that processing under their own policies.

10. Cookies, sessions and local storage

The website uses necessary authentication/session storage and payment-provider checkout mechanisms. The extensions use browser extension storage, which is separate from website cookies. We do not use advertising or cross-site tracking cookies in the inspected implementation. See the Cookie Policy for details.

11. Retention and security

We retain account, subscription, payment, referral, support and security information for as long as reasonably necessary to provide the service, prevent abuse, resolve disputes, keep accounting records and meet legal obligations. Removing an extension clears its local storage; server records may remain where retention is required.

We use HTTPS/TLS in transit, authenticated access, row-level database security, server-side payment/referral verification, restricted administrative access and server-side secret configuration. No system is completely secure and no security certification is claimed.

12. Your rights and choices

• Request access, correction, export or deletion of personal information, subject to legal and accounting retention requirements.
• Cancel a subscription under the Refund & Cancellation Policy.
• Remove either extension at any time to clear its local storage.
• Contact rkdigitalabs@gmail.com for privacy requests or questions.

13. Changes and business details

We may update this policy as the products evolve. The effective and last-updated dates above will be revised when material changes are made.

• Operator: RK Digitalabs
• Legal entity: RK Digitalabs
• Registered address: New Delhi, India
• GSTIN: 07AJEPB5392F1ZE
• Udyam registration number: UDYAM-DL-06-0215260
• Privacy contact: rkdigitalabs@gmail.com