Privacy Policy

The short version

Corollary is built local-first. In the default configuration, no text from your Overleaf documents is ever sent anywhere — inference runs on your own machine via Ollama. We collect nothing unless you explicitly opt in to a cloud feature.

What we collect

Corollary collects data only in the following specific cases:

• Corollary Cloud (free tier): When you use the managed cloud inference feature, prompts are forwarded through our edge worker to the upstream inference provider. We do not log prompt content or completions. Free-tier usage is metered by an anonymous device UUID stored only in your browser — no email or account is required.
• Corollary Cloud (Pro tier): Your license key is validated against our licensing server on first use. We receive only the key itself and a timestamp — no document content.
• Checkout: If you purchase a Pro subscription via Lemon Squeezy, Lemon Squeezy processes your payment and delivers a license key to your email. We receive only what Lemon Squeezy shares with sellers (order ID and email). We do not store card details.

What we never collect

• The content of your LaTeX documents or any text you pass to the AI.
• Your Overleaf credentials or session cookies.
• Your API keys — these are stored in chrome.storage.sync and never transmitted to Corollary servers.
• Any analytics, crash reports, or telemetry of any kind.

Third-party providers (BYOK)

When you configure a third-party API key (OpenAI, Anthropic, Groq, or Gemini), your prompts are sent directly from your browser to that provider's API — Corollary does not proxy or inspect them. Each provider's own privacy policy applies.

Local inference (Ollama)

When using Ollama in local mode, all inference happens on your machine. No text is sent over the network. If you opt in to Ollama Cloud (via ollama signin and a :cloud-suffixed model), your local Ollama daemon forwards prompts to Ollama's servers under Ollama's own privacy policy.

Storage

Settings (provider preferences, model choices, API keys) are stored in chrome.storage.sync, which Chrome may synchronise across your signed-in devices. All stored values are local to your browser profile.

Cookies

This website uses no cookies and no analytics. There are no third-party scripts on any page.

Changes

If we ever change what data we collect, we will update the date at the top of this page and, for material changes, post a notice in the extension's changelog.

Contact

Questions about privacy? Email corollary@grimvier.com.