Privacy policy

What we collect

Nothing. Sherpa has no server, no accounts, no analytics and no telemetry. No data about you or your usage is transmitted to us, because there is nowhere for it to be transmitted to.

What Sherpa stores, and where

All of it stays in your browser's local storage on your own device:

• Page content from sites you index — the text of the pages you asked Sherpa to crawl, plus the numeric vectors and search index derived from it.
• Your settings — which site is active, the answering mode, the confidence thresholds, and (if you configure one) your API key.
• Your conversations — the last 50, so you can return to an earlier answer.
• Your queries — logged locally to build the content gap report, which shows which questions the documentation failed to answer.

You can delete any single index, or erase everything Sherpa holds, from Settings → Delete everything. Uninstalling the extension also removes it all.

Network requests Sherpa makes

1. The site you asked it to index. Sherpa fetches those pages using your existing browser session, which is how it can reach documentation that requires you to be signed in. It requests permission for that one site at the moment you start a crawl, and holds no access to any other site.
2. Nothing else. The embedding model and its runtime are bundled inside the extension rather than downloaded, so even the first index makes no request to us or to any third party.

The one exception: bring your own key

Sherpa's default answering mode runs on your device and sends nothing anywhere.

If you choose to configure your own API key (OpenAI, Anthropic or Google), then for each question you ask, your question and the relevant passages retrieved from your index are sent to that provider so it can write the answer. This is off by default, the interface warns you before you enable it, and your key is stored only on your device and sent only to the provider you chose.

Your use of that provider is governed by their privacy policy, not this one.

Your credentials

Sherpa never sees, requests or stores your username or password for any site. It reuses the session your browser already has. If a site requires you to sign in, Sherpa pauses and asks you to sign in through the site itself.

Children

Sherpa is a developer and support tool. It is not directed at children and collects no personal information from anyone.

Changes

Any change to this policy will be published with a new "last updated" date before it takes effect.

Contact

Questions about this policy: sharaj.rewoo@mindtickle.com