Privacy Policy

Last updated — February 18, 2026

Overview

Breakawy is a browser extension that exports CRM account configuration data as JSON files. This policy explains what data the extension accesses, how it is handled, and your rights.

Data We Access

To function, Breakawy accesses the following data from your browser session:

Authentication tokens — Session tokens from the CRM's API servers, used to make authenticated requests on your behalf.
CRM account configuration — Workflows, pipelines, custom fields, custom values, and snippets associated with your CRM location.
Network request metadata — HTTP method, URL path, and status code of requests to the CRM's API servers, displayed in the extension's network monitor.

How Data Is Handled

All data stays on your device. Breakawy does not transmit any data to external servers, third-party services, or any infrastructure operated by us.
Authentication tokens are stored temporarily in your browser's local extension storage and are never shared or persisted beyond your browser session.
Exported JSON files are saved directly to your local Downloads folder using Chrome's built-in downloads API.
Network monitor logs are stored in local extension storage and can be cleared at any time from within the extension.

Data We Do NOT Collect

We do not collect personal information (name, email, phone number, etc.).
We do not use analytics, tracking pixels, or telemetry of any kind.
We do not store or transmit your CRM credentials or passwords.
We do not communicate with any remote server. The extension has no backend.

Permissions Explained

webRequest — Detects authentication tokens in requests to the CRM's API servers.
storage — Stores session state and network logs locally in your browser.
downloads — Saves exported JSON files to your Downloads folder.
tabs — Identifies your active CRM tab to route authenticated API requests.
scripting + activeTab — Injects data capture scripts into CRM pages, including whitelabel instances on custom domains.
host_permissions — Monitors requests to the CRM's API backend servers to capture authentication tokens and log API traffic.

Third Parties

Breakawy does not share data with any third party. There are no third-party scripts, SDKs, or services embedded in the extension.

Data Retention

Authentication tokens are held in local browser storage only while the extension is active and are cleared when the browser session ends or when the CRM issues a new token. Network logs can be manually cleared from the extension's Monitor tab. Exported files remain on your device under your control.

Your Rights

You can uninstall Breakawy at any time, which removes all locally stored data. You can clear the network log from within the extension at any time. No data exists on any server to request deletion of.

Children's Privacy

Breakawy is not directed at children under 13 and does not knowingly collect information from children.

Changes to This Policy

If this policy is updated, the revision date at the top will be changed. Continued use of the extension after changes constitutes acceptance of the revised policy.

Contact

For questions about this privacy policy, contact us at privacy@breakawy.com.