Click2Call Privacy Policy

Click2Call does not collect, transmit, sell, share or store on any server any personal information. It looks for phone numbers in the web pages you open, entirely inside your browser on your own device, and keeps only its settings, also on your device. It has no account, no sign-in, no analytics, no advertising, no cookies, no tracking and no remote code. Nothing the extension sees ever reaches cyberscaler.

• Page content is read only on your device and only to find phone numbers. It is never logged, copied or sent anywhere.
• Your settings stay in your browser's local extension storage and are deleted when you remove the extension.
• When you click a number, your computer hands it to the phone app you chose for phone links. cyberscaler does not receive it.
• The only personal information we may ever hold is what you choose to send us yourself, for example when you email support.

The Click2Call by cyberscaler extension for Google Chrome and other Chromium-based browsers (the "extension") is published by Oregon Logistics, Inc., doing business as cyberscaler ("cyberscaler," "we," "us"), a company based in the United States. For data protection laws that use these terms, cyberscaler is the controller (or "business") for the limited information described in section 6, which is the only personal information we ever process in connection with the extension.

This policy covers the extension only. Our phone service, apps and website are covered by our main Privacy Policy. The websites you visit, your phone or softphone app, your browser and the Chrome Web Store each have their own privacy policies, which apply to what they do.

To do its job, the extension works with the following, all locally, inside your browser:

• Text of the pages you open. The extension scans the text of each page (including frames and web components) for patterns that look like phone numbers, using a phone-number library bundled inside the extension. It skips form fields and text you are typing in editors, and it does not read passwords, form entries, cookies or your browsing history.
• Phone numbers it finds. These are marked on the page as call buttons and counted for the toolbar badge. They exist only in that open page and disappear when you close or reload it.
• The address (origin) of the current site. Used only to check whether you turned Click2Call off for that site and to show the right on/off state.

None of this is stored after the page closes, combined into a history, or transmitted. The extension makes no network requests of its own: it does not contact cyberscaler, Google or anyone else, and it does not load code or data from the internet.

Placing a call. When you click a number, the extension opens a standard tel: phone link. Your operating system passes the number to the app you chose for phone links (for example the cyberscaler phone app or another softphone). That app, not the extension, places the call, and its own privacy policy applies. Copying a number (from the toolbar list) writes it to your device's clipboard, where it stays under your control. The extension never reads your clipboard.

What websites can see. The extension sends nothing to the websites you visit. To show call buttons it changes the page in your browser (it wraps numbers in call buttons and adds a stylesheet), and a site's own scripts can see those changes, so a site could infer that a click-to-call tool is installed. To limit this, the extension exposes only one file (its stylesheet) to web pages, at a random address that changes each browser session, so sites cannot probe for it at a fixed address.

Links you choose to open. The Settings page links to cyberscaler.ai and to our support email. If you open them, that is an ordinary website visit or email covered by our main Privacy Policy.

The extension saves only these settings, in your browser's local extension storage (not synced to your Google account by the extension):

• whether Click2Call is on, and whether numbers are highlighted;
• your highlight color, your country for local numbers, and whether to dial local numbers without the country code; and
• the list of sites where you turned Click2Call off (site addresses you added).

You can change these at any time on the extension's Settings page. Removing the extension deletes them. They are never sent to us. The extension does not set cookies, use the web storage of the sites you visit, fingerprint you or use any similar tracking technology.

Your controls. You can turn Click2Call off for a site or everywhere (right-click menu or Settings), remove it at any time, or limit where it runs in your browser's extension settings (for example "On click" or "On specific sites" under site access). Chrome does not run extensions in Incognito windows unless you allow it; if you do, the extension works there the same way, locally.

• Read and change data on the websites you visit (host access to http and https pages): phone numbers can appear on any site, so the extension must run on pages you open to find them and turn them into call buttons. The data is processed only on your device.
• tabs: to read the current tab's address so the toolbar icon, badge and right-click menu show the right state for that site.
• webNavigation: used only to list the frames inside the current tab, so numbers shown in embedded frames are included in the toolbar list and count. It is not used to track your browsing.
• contextMenus: to add the right-click menu (call numbers, turn Click2Call off for a site or everywhere, open Settings).
• storage: to save your settings on your device.

The extension sends us nothing. We may receive information only in these situations, none of which involve the extension reading your pages:

• When you contact us. If you email support@cyberscaler.ai or otherwise write to us, we receive what you send: usually your name, email address and message, and anything you choose to attach. We use it only to answer you and keep a record of the request.
• Chrome Web Store statistics. Google operates the Chrome Web Store and provides publishers with aggregated statistics such as the number of installs, weekly users and their general region or language. These figures do not identify you, and we do not receive any information that does. Google's handling of your data is described in the Google Privacy Policy.
• Public reviews. If you post a rating or review on the Chrome Web Store, it is public under your Google profile name and is governed by Google's terms. We may read and reply to it there.

• We do not sell personal information, and we do not share it for cross-context behavioral advertising (as those terms are defined under California law), or for targeted advertising under any law.
• We do not use page content, phone numbers or browsing activity for advertising, profiling, analytics, creditworthiness, lending or any purpose other than the extension's single purpose.
• We do not use any data from the extension to train artificial intelligence or machine-learning models.
• We do not let any person read your pages or numbers, and we do not transfer them to third parties.
• We do not make automated decisions that produce legal or similarly significant effects about you.
• We do not collect sensitive or special-category information (such as health, biometric, precise location, financial account, government ID or children's data).

The extension's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension has a single purpose: finding phone numbers on web pages and letting you call them with one click.

The Chrome Web Store treats website content and browsing activity as user data. The extension handles website content (page text and the phone numbers in it) and the address of the current site only on your device, only to provide that single purpose, and does not collect or transmit it. It is not transferred to anyone, not used for advertising or personalized ads, not sold to data brokers or information resellers, not used to determine creditworthiness or for lending, and not read by any person. The extension contains all of its code in the published package and does not use remote code.

• Google distributes the extension through the Chrome Web Store and operates the Chrome browser. As part of normal browser operation, Chrome checks Google's servers for extension updates, and if you use Chrome sync, Google may sync the list of extensions you have installed. Google acts under its own privacy policy, not ours, and none of this involves data the extension reads from your pages.
• Your phone or softphone app receives the number when you click it, because you chose it to handle phone links. Its provider's privacy policy applies to the call.
• The websites you visit receive nothing from the extension. They can see the call buttons it adds to their pages (see section 3). Their own policies apply to your visit.
• Our email service provider stores messages you send to support@cyberscaler.ai on our behalf, under its terms for business customers, which require it to keep them confidential and secure.

If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, or the Swiss Federal Act on Data Protection (FADP) may apply.

Processing on your device. Reading page text to find phone numbers happens only in your browser, under your control, and no personal data is disclosed to us. We do not determine the purposes of anything you do with that content beyond providing the feature you asked for. Storing and reading the extension's settings on your device is strictly necessary to provide the service you requested, which is the basis for it under the ePrivacy rules (Article 5(3) of Directive 2002/58/EC and the UK Privacy and Electronic Communications Regulations).

Because the extension does not process personal data of people in these regions on our systems, and answering an occasional email is low-risk processing, we have not appointed a representative in the EU or the UK (Article 27(2) of the GDPR and UK GDPR). You can contact us directly at support@cyberscaler.ai.

Legal bases for the limited information we do process (section 6):

• Answering your messages: our legitimate interests in responding to and supporting users (Article 6(1)(f)), or taking steps at your request (Article 6(1)(b)).
• Keeping records needed for legal claims or obligations: legal obligation (Article 6(1)(c)) and legitimate interests.

Your rights. Subject to the conditions in the law, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing, including processing based on legitimate interests;
• data portability, where processing is based on contract or consent and carried out by automated means;
• withdraw consent at any time, where we rely on consent, without affecting earlier processing; and
• lodge a complaint with your local supervisory authority, for example your EU member state's data protection authority, the UK Information Commissioner's Office (ico.org.uk) or the Swiss Federal Data Protection and Information Commissioner.

Because the extension sends us no data, in most cases we will hold nothing about you unless you have written to us. See section 18 for how to make a request.

California. Many US privacy laws apply only to businesses above certain size or data-volume thresholds. We describe our practices and honor the rights below to the extent these laws apply to us. This section is our notice under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). In the past 12 months we have not collected personal information through the extension. The only categories we may have collected in connection with it are identifiers and the contents of communications (such as your name, email address and message) when you contacted us, from you directly, for the business purpose of responding to you and maintaining records. We have not sold or shared personal information, including that of consumers under 16, and we do not use or disclose sensitive personal information. We retain it as described in section 15.

California residents have the right to know what personal information we collect, use and disclose; to access it; to delete it; to correct it; to opt out of sale or sharing (which we do not do); to limit use of sensitive personal information (which we do not collect); and not to be discriminated against for exercising these rights. Under California's "Shine the Light" law (Civil Code section 1798.83), we do not disclose personal information to third parties for their direct marketing purposes. We do not offer financial incentives in exchange for personal information.

Other states. Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, may have the rights to confirm whether we process their personal data, to access, correct, delete and obtain a portable copy of it, and to opt out of targeted advertising, sale and profiling. We do not sell personal data, use it for targeted advertising, or profile people. If we decline a request, you may appeal by replying to our decision with the subject line "Appeal"; we will respond within the time the law requires and, if we deny the appeal, tell you how to contact your state attorney general. Nevada residents may request that we not sell covered information; we do not sell it. We do not collect consumer health data as defined by Washington's My Health My Data Act or similar laws.

Global Privacy Control and Do Not Track. Because the extension does no tracking, selling or sharing, there is nothing to opt out of. We treat a Global Privacy Control signal as a valid opt-out request where the law requires it.

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25) may apply. You may request access to and correction of the personal information we hold about you and withdraw consent, subject to legal and contractual limits. Our privacy officer, the person in charge of the protection of personal information at cyberscaler, can be reached at support@cyberscaler.ai. You may also complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information. Information you send us may be stored outside Canada, including in the United States.

Wherever you are, we apply the same principles: we do not collect data through the extension, and we handle anything you send us only to respond to you. Where local law gives you rights over your personal information, we will honor them, including under:

• Brazil: the Lei Geral de Proteção de Dados (LGPD), including rights to confirmation, access, correction, anonymization, portability, deletion and information about sharing, and to petition the ANPD.
• Australia and New Zealand: the Australian Privacy Principles under the Privacy Act 1988 and the New Zealand Privacy Act 2020, including access and correction rights and complaints to the OAIC or the Office of the Privacy Commissioner.
• Japan, South Korea and Singapore: the Act on the Protection of Personal Information (APPI), the Personal Information Protection Act (PIPA) and the Personal Data Protection Act (PDPA).
• India: the Digital Personal Data Protection Act, 2023, as its provisions take effect.
• South Africa: the Protection of Personal Information Act (POPIA), including complaints to the Information Regulator.
• Ukraine, Mexico and other countries: Ukraine's Law on Personal Data Protection, Mexico's federal personal data law and any other law that applies to you.

The extension transfers nothing. If you write to us, your message is processed in the United States, where our team and providers are located. Where the law requires a transfer mechanism (for example for messages from the EEA, UK or Switzerland), we rely on the safeguards our service providers offer, such as the European Commission's Standard Contractual Clauses and the UK addendum, or on the transfer being necessary to answer a request you sent us.

• Page content and numbers found: not stored at all; they exist only while the page is open.
• Settings: on your device until you change them or remove the extension.
• Messages you send us: for as long as needed to resolve your request and then up to 3 years for our records, unless a longer period is required by law or needed for legal claims, or you ask us to delete them sooner where the law allows.

The extension runs inside the browser's extension sandbox, contains all of its code in the published package, loads no remote code, and requests only the permissions described above. Settings stay on your device. Messages you send us are kept with a reputable email provider, protected by access controls, and sent with encryption in transit where your email service supports it. No system is perfectly secure, but because the extension does not send or store your data elsewhere, there is no cyberscaler copy of it to be exposed. If a security incident ever affected personal information we hold, we would notify you and the authorities as the law requires.

The extension is made for businesses and adults and is not directed to children under 13 (or under 16 where the law sets a higher age). We do not knowingly collect personal information from children, including under the US Children's Online Privacy Protection Act (COPPA). If you believe a child has sent us personal information, contact us and we will delete it.

Email support@cyberscaler.ai with the subject "Privacy request" and tell us what you would like to do (for example access, correct or delete). You can also use an authorized agent where the law allows; we may ask for proof of the agent's authority and to confirm the request with you directly.

To protect you, we verify requests by matching them to the email address you used to contact us. We respond within the time your law requires (for example one month under the GDPR, or 45 days under the CCPA and most US state laws), and we will tell you if we need an extension. We will not charge a fee or treat you differently for exercising your rights. Because the extension collects nothing, we will usually be able to confirm that we hold no data about you, other than any messages you have sent us.

If we change how the extension handles information, we will update this page and its effective date before the change ships. If a change would mean collecting or sharing information in a new way, we will ask for your consent in the extension first where the law or the Chrome Web Store policies require it.

Oregon Logistics, Inc., doing business as cyberscaler, United States. Privacy questions and requests: support@cyberscaler.ai. Website: cyberscaler.ai.