Charlotte Privacy Policy
About Us
We're the developers of Charlotte, Team For a Git Cause. Charlotte was originally created as a product for the Tech 4 Good Festival, organized by Engineering Good, Singapore.
What Data We Collect and Why We Collect It
Personal Information
When you create an account with us, you need to supply some personal information, such as an email address and first name.
How We Protect Your Data
Access Control
Your personal information is hosted on a Heroku-based database, with restricted access and secure passwords. Strict access configurations are in place to prevent unauthorized access. Only members of the development team have access to your personal information, and we log all access to our database for security purposes.
Your data remains solely on our servers and is not shared with any third parties.
Password Storage
We hash passwords before storing them to our database. In the case of a data breach, is impossible for an attacker to recover your original password.
What Permissions We Require
Our extension is configured with the minimum permissions required for it to function properly. When you install Charlotte, you will be prompted to grant these permissions.
Any processing of site data is performed only within your browser, and never stored externally on our servers or elsewhere.
Context Menus
This permission is needed to create a text-to-speech context menu that reads the user's selected text.
Active Tab
This permission is needed to execute scripts that apply accessibility features on the user's current tab, when the user invokes our extension. Note that this is a temporary permission that is only granted when you explicitly do so, e.g. when using a keyboard shortcut that activates Charlotte.
Storage
This permission is needed to store the user's accessibility settings locally.
Scripting
This permission is needed to apply accessibility features, which involves JavaScript that interacts with the DOM, such as by changing the font size property of elements. We do not collect or process any data from the user's DOM.
Data Breach Procedures
In the event of a data breach, all affected users will be notified of personal information that may have been exposed, such as name and email address. Until breach containment, all access tokens will be revoked and our services will be temporarily suspended.
Industry Standards Compliance
Charlotte is compliant with Singapore's Personal Data Protection Act (PDPA). To contact the Data Protection Officer, please contact us via the email below.
Your Data Rights
You can request to receive a copy of your data, or that we delete it. Please reach out to us via the email below.
Contact Information
You may reach us via email at [email protected].