Privacy & Security - BillahMart Extension

Prominent Disclosure of Data Usage

This extension collects and processes browsing activity (visited URLs), authentication-related data, account identifiers, connector credentials, and extension usage settings. Some of this data is transmitted to BillahMart servers over HTTPS for account security, access control, and misuse detection.

Data Categories We Collect

Browsing Activity: URLs you visit, navigation update events, and timestamp information.
Authentication Data: Password entered in extension, server-issued auth token, and account verification state.
Identifiers: Extension ID and generated unique user ID (example format: Phn-XXXXXXXXXX).
Server Connector Credentials: Proxy username/password (entered by user) and proxy host/port/user/pass values returned by server.
Cookie Operation Data: Cookie JSON received from backend for import, cookie JSON pasted manually by user, and cookie clear actions.
Local Settings & Usage State: Feature toggles and local preferences such as connector state, import count, theme, pinned history URLs, notice state, and last selected tab.

Data Sent to BillahMart Servers

Security Logging Service: Browsing activity logs are sent over HTTPS to BillahMart-managed logging infrastructure. Data may include account-linked identifier, visited URL, timestamp, and extension identifier.
Authentication & Account Services: BillahMart secure API services process password verification, token validation, and cookie/session operations required by extension features.
Notice Service: BillahMart notice services are queried to fetch product/admin updates.
Lifecycle Pages: The extension may open BillahMart-managed pages during install, enable, uninstall, or permission-change related events.

Why This Data Is Used

Account Security & Misuse Detection: URL activity is used to review account sharing, unauthorized usage, and abuse investigations.
Access Control: Password verification and token checks control who can use protected extension features.
Connector Operations: Proxy credentials and state are used to enable/disable server connector routing.
Session Management: Cookies are imported/cleared only for login/logout and account operation workflows.

What We Do Not Claim to Collect

We do not claim to collect keyboard keystrokes, clipboard contents, or website form text as part of normal extension operation.
We do not state that collected data is sold for advertising or data brokerage.

Local Device Storage

The extension stores account/session state, connector settings, preferences, and operational status data locally in browser extension storage.

User Controls

Users can control connector credentials, connector status, history view, manual import, reset actions, and cookie-clearing from extension UI.
Uninstalling the extension stops further extension-side collection and processing.

By installing and using BillahMart Extension, you acknowledge this data processing policy, including browsing activity collection and account-security related server transmission described above.

Last Updated: March 26, 2026