The Trove browser extension ("the extension") helps you import your airline flight credits and loyalty status into your Trove account. This policy explains what it accesses and why. It complements Trove's main Privacy Policy, which governs how your data is stored and used once it reaches Trove.
1. What the extension accesses
- Visible text of an airline page you explicitly scan.When you click "Scan this page" on a supported airline site, the extension reads the visible text of that page (account, credits, or status sections) and sends it to the Trove backend, which uses AI to extract your flight credits and loyalty details. It does not read pages you don't scan, and it runs only on the supported airline domains listed in the extension's manifest.
- The active tab's URL— used only to detect which airline you're on and show the right guidance. It is not stored.
- Your Trove sign-in session — stored locally in the browser so you stay signed in. Authentication uses the same Supabase service as the Trove web app.
2. What it does not do
- It does not fill in or submit forms on your behalf. The email-forwarding helper only highlights a field — you paste and save yourself.
- It does not collect browsing history, track you across sites, or read pages on non-airline domains.
- It does not sell or share your data with third parties.
3. Where data goes
Scanned page text is sent over HTTPS to the Trove backend for parsing and is stored in your Trove account under your control. Sensitive fields (such as credit codes) are encrypted server-side. You can delete imported credits at any time from the Trove app. The same subprocessors and retention rules described in Trove's main Privacy Policy apply to data imported via the extension.
4. Permissions, in plain terms
- storage — keeps you signed in to Trove between popup sessions.
- tabs — detects the airline on your active tab and reads the page you choose to scan.
- Host access to airline domains — runs the scan and forwarding helper only on Southwest, Delta, United, American, JetBlue, and Alaska.
- Host access to Trove / Supabase — sends scanned data to your Trove account and authenticates you.
5. Contact
Questions about the extension's data practices: support@try-trove.com
DRAFT — this document has not been reviewed by an attorney. Engage counsel before relying on it for any commercial launch.