PRIVACY POLICY

Last updated: 2 May 2025

1. Introduction

Hub is a Chrome extension for Current RMS that enhances your workflow by injecting custom modules (Shortages, Suppliers, Message Hub, etc.) and offering a paid Pro upgrade via Lemon Squeezy.

This policy explains what information we collect, how we use it, and your rights in relation to that data.

2. Data We Collect & Store

We collect and store the following information only on your device or within your Current RMS session:

Current RMS Subdomain & API Key

  • Purpose: Authenticate API requests to Current RMS for all Hub features (Shortages, Volume, Suppliers, Message Hub, etc.)

  • Storage: Chrome Sync Storage (chrome.storage.sync)

Feature Toggles (enabled/disabled Hubs)

  • Purpose: Remember your configuration across browser restarts

  • Storage: Chrome Sync Storage (chrome.storage.sync)

Lemon Squeezy License Key & Pro Status

  • Purpose: Validate paid subscription and unlock Pro-only modules (e.g. Total Volume Calculator)

  • Storage: Chrome Local Storage (chrome.storage.local)

    Device Identifier (Activation ID)

  • Purpose: Uniquely identify this device when creating or validating license activations

  • Storage: Chrome Local Storage (chrome.storage.local)

  • Notes: A short random ID (e.g., “724A”) used only for licensing and activation tracking.

Google Account & Calendar Connection (Optional)

What:

  • Google account email address used to connect Google Calendar

  • Google OAuth access token and refresh token (issued by Google)

Purpose:

  • Enable optional Google Calendar integration, allowing Hub to create, update, search, and delete calendar events that mirror Current RMS opportunities and activities.

Storage:

  • OAuth tokens: Chrome Local Storage (chrome.storage.local)

  • Connected Google account email (display only): Chrome Local Storage (chrome.storage.local)

Notes:

  • Hub only accesses Google Calendar data when the user explicitly connects Google Calendar and enables sync

  • Hub does not read unrelated calendar data or contacts

  • Users can disconnect Google Calendar at any time, which removes stored tokens

Product Volume Cache

  • What:

    • productVolumeMap (JSON mapping product IDs → volume in m³)

    • volumeLastRefresh (timestamp of last fetch)

  • Purpose: Speed up “Total Volume” calculations by avoiding hourly refetches of your entire product catalog

  • Storage: Injected page’s localStorage on the Current RMS domain

Per-Session Volume Totals

  • What: volume_total_<opportunityId> (last computed total volume)

  • Purpose: Immediately display the last total-volume calculation on popup reload

  • Storage: Injected page’s sessionStorage (cleared on tab close)

Message Hub Throttling

  • What:

    • lastOpportunityId (ID of the last opportunity shown)

    • lastPopupTime (timestamp of last popup)

  • Purpose: Limit the auto-popup of the Message Hub to once per hour per opportunity

  • Storage: Injected page’s localStorage on the Current RMS domain

3. How We Use Your Data

  • To authenticate and fetch data from Current RMS (shortages, availability, suppliers, etc.)

  • To validate your Lemon Squeezy license and unlock Pro features

  • To remember which modules you’ve turned on/off and your API credentials

  • To improve performance with caching and session-specific calculations

  • To throttle in-app reminders so they’re not disruptive

4. Data Sharing & Third-Party Services

We do not sell or share your data with third parties except:

  • Current RMS API – to retrieve your inventory, bookings, and opportunities

  • Lemon Squeezy API – to validate your paid subscription. We send the device identifier with activation requests so Lemon Squeezy can track activations per device.

  • Google Calendar API – used only when the user explicitly enables Google Calendar Sync, to create, update, search, and delete calendar events related to Current RMS opportunities and activities.

Lemon Squeezy handles payment processing and stores credit-card data on their servers.

For details, see their Privacy Policy.

5. Data Retention

All data is stored only on your device or in the Current RMS page session. You can clear it at any time by:

  • Using Chrome’s “Clear site data” (for page localStorage/sessionStorage)

  • Going to chrome://extensions → Hub → “Details” → “Storage” → “Clear data”

  • Uninstalling the extension, which removes all stored extension data

6. Security

  • Your API keys, license keys, and tokens are encrypted by Chrome and accessible only to this extension.

  • We never transmit your Current RMS API key or Lemon Squeezy license key to our own servers.

7. Your Rights

Since data never leaves your device, you have full control. You can:

  • View, modify, or delete stored settings via Chrome’s extension storage UI

  • Uninstall the extension to remove all data

  • Contact us for any questions or requests

8. Changes to This Policy

We may update this policy to reflect new features or legal requirements.

We’ll post the revised date above and link from the extension UI.

9. Contact Us

If you have any questions or need assistance, please reach out:

📧 Email: hub@clearsound.co.uk