THE DETAILS

Privacy policy

Last updated 27 September 2026

HeyPogo is a Chrome extension and website (heypogo.app) that carries out tasks on web pages when you ask it to. This policy explains what HeyPogo collects, why, who it is shared with, and how to have it deleted.

The short version

  • HeyPogo only looks at a web page when you give it a task on that page.
  • HeyPogo blocks recognised credential fields and payment actions. Detection is imperfect: do not use it on sensitive pages or include secrets in requests.
  • We do not sell your data, use it for advertising, or use it to train models.

What we collect

  • Your account: your Google account's email address, name and profile picture, when you sign in with Google. We never receive your Google password.
  • What you ask HeyPogo to do: the text of each request, the address of the page it started on, and a record of each step it took (for example “clicked ‘Easy Apply’”, the page address, and whether the step needed your approval). This is your task history.
  • Page content, while a task runs: to decide each step, the extension sends the server a summary of the page you gave it the task on — the page's title and address, its visible buttons, links and form fields, and some of its visible text. Recognised password, one-time-code and card fields are filtered before transmission. Unlabelled secrets and sensitive free text may not be recognised. Task results, generated replies and summaries can contain page content and are saved in task history.
  • Details you save: anything you add under “Your details” (such as name, phone, city, job title) and your standing instructions. These are used only to fill in forms when you ask HeyPogo to.
  • Credits and orders: your credit balance, a ledger of credits used and added, and your orders. Card details are handled entirely by our payment provider; HeyPogo never sees them.
  • Voice: if you turn on voice, speech is recognised by Google Chrome's built-in speech recognition, which may send audio to Google for processing. HeyPogo receives the resulting text as a request; HeyPogo does not receive the audio.
  • Website analytics: anonymous, cookie-free page-view statistics from Vercel Web Analytics, plus Google Analytics page views and browser information. Google Analytics uses cookies to distinguish browsers and sessions.

Who it is shared with

Only the service providers needed to run HeyPogo, each limited to its part:

  • AI model providers (via OpenRouter): your request and the page summary for each step, to decide what to do and to write text you asked for.
  • Vercel: hosts the website and server.
  • MongoDB Atlas: stores the data listed above.
  • Google: sign-in, speech recognition if you use voice, and website analytics.
  • Dodo Payments: our merchant of record, which processes purchases and issues invoices.

We may disclose information if required by law.

Chrome Web Store user data policy

The use of information received from the HeyPogo extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the features you use; it is not transferred to third parties except as listed above to provide those features, not used for advertising, not used to determine creditworthiness, and not read by humans except with your consent, for security, or as required by law.

Permissions the extension asks for

  • Site access — asked per site the first time you run a task there (or once for all sites, if you choose). Needed to read and act on the page.
  • Tabs, scripting — to run a task in the tab you are on and follow links it opens.
  • Side panel, storage, alarms — the HeyPogo panel, your panel state, and keeping a long task alive.
  • Identity — Google sign-in.
  • Microphone (only if you turn on voice).

How long we keep it, and deleting it

Account data, task history, saved details and orders are kept while your account exists. Sign-in sessions expire on their own. To delete your account and everything associated with it, email bayees1@gmail.com from the address you signed in with; we delete it within 30 days, except order records we must keep for tax and accounting. You can remove saved details yourself at any time from your account page.

The extension also keeps up to 25 recent tasks, including requests, results and step history, in local browser storage. Signing out clears that local task history. You can withdraw page-processing consent in extension Settings; this stops the current task and prevents new tasks until you consent again. Withdrawal does not delete server history. Files must be attached manually; HeyPogo does not upload files for you.

Security

Data is sent over HTTPS. Sign-in tokens are stored only as hashes on the server, and the website keeps its long-lived session in an httpOnly cookie that page scripts cannot read.

Children

HeyPogo is not intended for anyone under 16.

Changes and contact

We will update this page if what HeyPogo collects changes, and change the date above. Questions: bayees1@gmail.com.