Privacy Policy

Last Updated: May 12, 2026

This Privacy Policy explains how caly-extension ("the Extension") processes data when you use extension features, including OpenCode/CalyAgent account and analytics functionality.

            Summary: Most extension data is stored locally in your browser. Some features send data to
            Caly services (for authentication, entitlement checks, waitlist handling, and analytics) when enabled or
            used by you.
        

1. Data We Process

Depending on feature usage and settings, the Extension may process the following categories of data:

Account and waitlist data: Email address, one-time passcode (OTP) flow metadata, and optional waitlist note submitted through the Account/OpenCode settings flow.
Analytics data: Product usage events, extension version, and a pseudonymous device/install identifier. If account-linked telemetry is enabled, a user account identifier may be associated with analytics events.
Configuration data: Extension settings (features, domains, language, UI state, OpenCode runtime configuration, and MCP presets).
Operational data: Runtime status checks and connection metadata required to operate local/native OpenCode functionality.

2. How Data Is Used

Provide core extension functionality and persist your settings.
Authenticate OpenCode/CalyAgent account access and evaluate feature entitlements.
Process waitlist requests and account access flows.
Measure feature usage and reliability to improve the product.

3. Local Storage & Processing

The Extension uses browser extension storage APIs to persist settings and runtime data locally on your device. This can include feature settings, UI state, and OpenCode runtime/account session state required by enabled features.

4. Analytics & Controls

The Extension includes analytics functionality. You can control this from settings:

Analytics toggle: Disable/enable analytics collection.
Account-linked telemetry toggle: Control whether analytics events are linked to your signed-in account context.

5. Third-Party / Remote Services

When relevant features are used, data may be sent to:

Caly backend services (services.calycode.com) for authentication, entitlements, waitlist, translations, and runtime configuration.
PostHog endpoint (hedgehog.calycode.com) for analytics events.
User-configured endpoints (for example, MCP or OpenCode provider endpoints) when you explicitly configure and use them.

We do not sell personal data.

6. Explanation of Permissions

To provide functionality, the Extension requires permissions such as:

storage: Save settings and runtime state.
scripting: Inject and run feature logic on supported pages.
tabs: Query and refresh supported tabs when required by features.
nativeMessaging: Communicate with the local native host for OpenCode runtime integration.
host permissions: Access Xano domains and optional user-approved domains to run extension features.

7. Changes to this Policy

We may update this policy to reflect product, legal, or operational changes. The "Last Updated" date will reflect the latest revision.

8. Contact Information

If you have any questions regarding this Privacy Policy or the Extension, please contact the developer:

Mihály Tóth
Email: [email protected]
Website: calycode.com