Privacy policy

PromoIQ 3 (current)

For PromoIQ version 3.0 and later. Updated for version 3.1.

In short

• PromoIQ does nothing on a page until you click its icon. Then it reads that page only. The one exception, from version 3.1, is Auto mode, which is off unless you turn it on, for a store or for every store, and Chrome asks you first. On Shopify stores PromoIQ also reads that product's public record from the store's own site: one request to the same site, never sent to PromoIQ.
• From version 3.1, in Auto mode, PromoIQ looks at pages of the stores you chose on your own computer. It sends the store's web domain when you arrive and, on a product page, the product's details. It never sends the page's web address, your cart or anything you type, and it never tries codes until you click.
• From version 3.1, on pages with a promo code box, Chrome highlights the PromoIQ icon, using a rule PromoIQ gave it. PromoIQ itself doesn't run, doesn't read the page and never learns which pages you visit, until you click it. Turn this off in Settings with "Highlight the icon on checkout pages".
• It has no account. PromoIQ never builds a list of the sites you visit. When you click it on a store, it sends that store's web domain and, on a product page, the product details.
• It sends only what a check needs, listed below. For each check, the panel's "What PromoIQ sent for this check" shows the exact fields.
• At checkout, only if you tap "Check up to 3 items", PromoIQ also checks items in your cart at other stores, sending the same product details as a product page check. Never your cart total or quantities.
• If Chrome has its built-in AI on your computer, PromoIQ may use it to read a page it can't otherwise understand. That happens on your computer; the page's text never leaves it. This is on by default; turn it off in Settings with "Use on-device AI when available".
• Nothing is sent when you install PromoIQ or before your first click.
• Sharing which codes worked is off unless you turn it on. From version 3.0.2, a code you typed yourself is shared only if you tap "Share that it worked" when PromoIQ asks, once, after it lowered your total. Daily counts are numbers only, with the date and the PromoIQ version, and you can turn them off.
• PromoIQ uses no affiliate links and earns nothing from what you buy.
• PromoIQ does not sell your data.

What PromoIQ reads, and when

Clicking the PromoIQ icon gives it access to the current tab only, through Chrome's activeTab permission. PromoIQ then reads that page on your device to find:

• the store's name and web domain (for example target.com);
• the page's web address, to tell a product page from a cart, to see which size or color is picked and, on a few big stores, to read the store's own item number. The address itself stays on your device;
• on a product page: the product's name, brand, model, identifiers (barcode numbers such as GTIN, MPN or SKU, and for a few big stores their own item number, such as an Amazon ASIN, Target TCIN, Walmart item id or Best Buy SKU), price, currency, condition, and color, size or variant when the page shows them;
• on stores PromoIQ has no special rules for, the product as the page shows it: its main heading, the price next to the buy button, and product details the store's page software publishes (Shopify, Magento, BigCommerce, WooCommerce, Salesforce). On Shopify stores PromoIQ also asks that store's own website for the product's public record, the same details the store's page uses, such as its barcode. That request goes from your browser to the store you are on, like the page's own requests, and nothing is sent to PromoIQ from it except the product details listed under "Price check";
• codes printed on the page and the words around them (from version 3.1, a code with an underscore inside, such as BOGO_50, is read whole);
• on a cart or checkout page: whether there is a promo-code box, and the order total. The total stays on your device. Only if you tap "Check up to 3 items" (offered when no code lowered your total, or when PromoIQ found no codes for the store), PromoIQ also reads the items in your cart: each item's name, brand and model when the cart shows them, its price, quantity, color and size, and the item's link. Quantities and links stay on your device; a link is used only to read a big store's own item number (Amazon ASIN, Target TCIN, Walmart item id or Best Buy SKU).

PromoIQ does not read payment, address or account fields, and it does not read your other tabs.

On-device AI. When none of PromoIQ's readers finds the product on a page, and Chrome's built-in AI (Gemini Nano) is already on your computer, PromoIQ gives that AI a short excerpt of the text the page shows: its title, main heading and visible text. Never what you typed, hidden text or your other tabs. The AI runs on your computer and the excerpt never leaves it; PromoIQ doesn't store or log it. PromoIQ uses only details the AI finds written on the page and checks each one against the page. PromoIQ never downloads the AI for you. Turn it off in Settings with "Use on-device AI when available".

From version 3.1, after your click on a product page, PromoIQ reads the page once it has loaded and once more a moment later, and keeps the better of the two reads. It reads the same details as above, and still sends one price check.

Auto mode (from version 3.1; off unless you turn it on). If you press "Always check <store>" in the panel, or turn on "Check every store for me" in Settings after reading its explanation, Chrome asks whether PromoIQ may read those sites. If you allow it, PromoIQ runs one small script on those sites' pages. On each page it decides on your computer whether the page is a product, cart, checkout or product list page, and whether it has a promo-code box, without sending anything. On a product page it then reads the same product details as after a click (on Shopify stores also the product's public record from the store's own site). On a cart or checkout page it reads codes printed on the page and offers to try codes; it never reads what is typed in any field. On a list of products it reads an item's name, brand and price to show a "Compare price" button, and sends them only if you click it. With "Check every store for me" on, pages that are not shopping pages, such as email, banking or news, are left alone and send nothing.

The icon dot (from version 3.1; on unless you turn it off). When you install or update PromoIQ, it gives Chrome one rule: on cart and checkout pages that show a promo code box, show PromoIQ's icon with a small dot. Chrome checks pages against that rule itself. PromoIQ runs nothing on those pages, reads nothing from them, has no access to them and is never told which pages showed the dot. The dot means only that the page has a promo code box, not that PromoIQ found codes for it. Click the icon, and PromoIQ reads that page as usual.

From version 3.1, on its own pages (the first-run page and its panel), PromoIQ asks your browser whether its icon is pinned to the toolbar, to show you how to pin it, and on the first-run page which keyboard shortcut opens it. This stays on your computer and is never sent.

What PromoIQ sends, and when

Because PromoIQ sends the web domain of the store you check, our Chrome Web Store listing declares "Web history", "Website content" (the product details) and "User activity" (the daily counts) to be careful; it never stores a list of sites tied to you.

All of these go to PromoIQ's own server (Google Cloud Functions in the US). Nothing else leaves your browser, except the normal requests to a store: when you open one of its offers, the store's own code check when PromoIQ presses Apply in your cart, and, on Shopify stores, PromoIQ's request for the product's public record from the store you are on. Like any web request, requests reach our server from your IP address; see "Limits" below for how we handle it. From version 3.1, the panel's "What PromoIQ sent" also lists what Auto mode sent from that tab.

What PromoIQ's server does with it

• Auto mode (from version 3.1) sends nothing new to the server: its code lookups and price checks are the same requests as after a click, handled and cached the same way, and not linked to you or to each other.
• Code lookups: the server combines results that shoppers shared in the last 30 days, codes and sign-up offers the store publishes on its own public pages (the server reads those pages itself; the requests carry nothing about you; a sign-up offer is shown as "Store offer, not a code" and never tried), and codes found on other websites. The answer can also name the store's discount programs (for example a student or military discount through ID.me or UNiDAYS), read from the store's own pages. From version 3.0.2, the panel shows them in the store's words with a link to the store's page; they are not codes and are never tried. To find codes on other websites, it sends a web search for the store to SerpApi, a search provider. It reuses the results for up to 24 hours per store. From version 3.1, for a code found on another website, the panel says where the server saw it (for example in a search result from a site, or in a link on the store's own site), with the date; that comes with the answer, and nothing new is sent.
• Price checks: the server sends SerpApi a Google Shopping search built from the product's brand, model number and name or color, keeps only exact matches, and reuses the results for up to 24 hours per product (6 hours when there was no exact match). SerpApi receives the search, never your page address, IP address or any ID. From version 3.1, a price row may say "Pick <color> on the store's page" when the store's link opens the item with no color picked; that comes with the answer, and nothing new is sent.
• Cached results are stored by store domain (codes) or by product (prices) and deleted after 7 days. They do not record which store you were on or anything about you.
• Shared code results: each report is stored with the store's domain, the code, the result, the savings range, the time, and a reporter key. The key is a scrambled code (a keyed hash) made from your network address (the first part of your IP address only) together with the store's domain. It lets the server tell two shoppers apart from one shopper reporting twice. It is different for every store, so your reports on different stores cannot be linked. Your IP address, page addresses, products and any install ID or account are never stored. PromoIQ shows "Worked for a PromoIQ shopper" only for the last 30 days. Reports from test copies of PromoIQ are not stored.
• Daily counts are added into one total per day. There is no record for each install. So that each connection is counted at most once a day, the server keeps a scrambled marker of it (a keyed hash of your IP address) for 2 days, and caps the numbers at what one install could realistically do in a day. Counts from anything other than the Chrome Web Store version are kept apart as test data.
• Limits: to stop abuse and runaway costs, the server limits how many lookups each connection can make. It never stores or logs your IP address. It uses a scrambled form of it (a keyed hash that changes every day, so one day cannot be linked to the next) and keeps per-minute counts in memory only.
• Server logs: since October 8, 2026 (20:54 UTC), PromoIQ 3's server does not keep request logs, which would include your IP address and browser details. Request logs from before then are deleted automatically within 30 days. The server's own application logs never contain IP addresses and are deleted after 30 days. Google's admin audit logs record only our own deployments and admin actions.
• Other services: SerpApi is the only outside service that receives anything from your checks. Separately, the server uses an AI service (Claude, by Anthropic) only for PromoIQ's own tests: a small daily check that it responds and, while we test AI features, PromoIQ's own test requests over stores' public pages and search results. None of these calls contains shopper data, they run under a separate account, and the account that handles your checks has no access to AI services. PromoIQ's server does not use AI on your requests. On your computer, PromoIQ may use Chrome's built-in AI as described under "What PromoIQ reads".

How long we keep it

A cleanup runs on the server every day.

Links to other stores

• PromoIQ uses no affiliate links and earns nothing from what you buy.
• Offers open the store's own product page. PromoIQ never adds a referral to any link, and never changes or removes one on the store's pages or when you copy a code. From version 3.0.2, the links PromoIQ shows (offers, store offers, discount programs and a code's source page) carry no tracking, campaign, partner or affiliate parameters: PromoIQ takes them off, and keeps the part of the link that picks the page or the item.
• Some codes PromoIQ finds online are creator or partner codes; the store may credit the person who shared them. PromoIQ earns nothing from any code, tries codes only when you press "Try these codes for me", and never replaces a code you applied unless one saves more.
• Offers are sorted by total price only.
• When you open an offer, that store receives the normal request your browser sends.

Permissions

PromoIQ asks for no access to any website when you install it. Version 3.0 never asks later either; from version 3.1, it asks later only if you turn on Auto mode, and Chrome shows its own prompt first. The only server it contacts is its own. PromoIQ 3 does not ask for the tabs, alarms, notifications or context-menu permissions. It has no scripts that load on pages by themselves, unless (from version 3.1) you turn on Auto mode, and then only on the stores you chose (or every site, if you chose that).

On your device

Your settings (daily counts, code sharing, on-device AI and, from version 3.1, the icon dot and Auto mode), any daily counts not yet sent, and a note that the first-run page was shown are kept in Chrome's local extension storage. A short-lived note of which tab you clicked is kept in session storage, which Chrome clears when it closes. Session storage also keeps, until Chrome closes: codes printed on a store's own pages (up to 12 per store, for at most 24 hours, with the store's own words about them), so PromoIQ can offer them at that store's checkout; and which codes PromoIQ tried at a store and whether any lowered your total (codes and store domains only, at most 20 stores), so a product page there can show other stores' prices first. None of it is sent. Only while a "Try these codes for me" run has your own code off your cart, PromoIQ also keeps a note of that run in local extension storage: the store's web domain and name, the currency, your code, the codes the run tries, the best one with its saving, and the time. Never the page address or your cart. It lets PromoIQ put your code back if the run is cut off, for example when the panel or the tab closes. The note is deleted as soon as your code is back or the run ends; a note older than 24 hours is deleted the next time the panel opens. Price results are not stored on your device (from version 3.1, Auto mode keeps short-lived copies, below). From version 3.0.2, if PromoIQ asked whether to share that one of your codes worked, it keeps a short scrambled note of that store and code (not the code itself) in local extension storage, so it doesn't ask again. At most 200 notes are kept. From version 3.0.2, after a saving PromoIQ found and the store's total confirmed, PromoIQ may ask you once to rate or share it. It keeps one note in local extension storage so it asks only once: when it started counting, how many confirmed savings so far, and when it asked and what you chose. The note is never sent. From version 3.1, if you use Auto mode, the stores you chose are kept there too, until you turn Auto mode off or remove PromoIQ. While Chrome is open, PromoIQ also keeps short-lived copies of code counts (30 minutes) and price results (10 minutes), the last things it sent from each tab, which notes you closed, and, for each open tab where Auto mode is working, that store's web domain. Nothing is kept about pages Auto mode leaves alone. Chrome deletes these when it closes. From version 3.1, PromoIQ also keeps one note saying whether its panel has shown its one-time tip on pinning PromoIQ, so the tip shows only once. The note says nothing about stores, pages or products. Removing PromoIQ deletes all of it.

Chrome Web Store user data policy

PromoIQ's use of information it receives follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use page data only to provide the features described here. We do not sell it, use it for advertising, or use it to decide on credit or lending.

Your choices

• Do not click the icon, and PromoIQ does nothing on that page (and asks the store's own site for nothing), unless you turned on Auto mode (from version 3.1) for that store.
• From version 3.1, turn Auto mode off for one store, or for every store, in Settings. Chrome then takes back PromoIQ's access, and its page script stops.
• From version 3.1, turn off "Highlight the icon on checkout pages" in Settings, and PromoIQ takes its rule back out of Chrome: no more dot.
• "Use on-device AI when available" is on by default. Turn it off in Settings, and PromoIQ uses only its own rules to read pages.
• Leave sharing off (the default), or turn it off any time in Settings.
• Turn off "Send daily anonymous counts" in Settings.
• From version 3.0.2, when PromoIQ offers to share that your own code worked, tap "No thanks", and it won't ask about that code again.
• Remove PromoIQ to delete everything it keeps on your device.
• From version 3.0.2, removing PromoIQ opens promoiq.co/uninstall; the address carries nothing about you, and answering is optional.

Version 2.60.10 and earlier

This part covers PromoIQ version 2.60.10 and earlier. It explains the data that version can read, send and store. A feature or report listed here is not necessarily used on every visit.

In short

• PromoIQ does not sell your data or your browsing history.
• The extension does not ask for your name, email address, password or payment details.
• When you use PromoIQ on a store page, it sends details of that page to PromoIQ's servers so it can look up codes and prices.
• Version 2.60.10 also sends an install report with a random ID and records some code and link activity. It has no setting to turn these off. Removing the extension stops them.

What the extension reads on your device

• Store pages: On supported retailer pages, PromoIQ can read page and product details such as retailer and product URLs, title, identifiers, price, selected options, cart totals and promo-code fields.
• Checkout helper: On cart and checkout pages of supported retailers, and on every page of nike.com, PromoIQ's checkout helper loads without you clicking the PromoIQ icon. On cart and checkout pages it looks for the promo-code field, may click a link such as "Add promo code" to open it, and can offer to apply a code you copied or looked up in PromoIQ in the last 30 minutes. It tries a code only when you press Apply. What the helper finds is kept in Chrome's local extension storage.
• Local storage: PromoIQ stores preferences, cached results, some usage counts and summaries, and a backup copy of community-code submissions in Chrome's local extension storage.

What the extension sends, and when

• Requested lookups: When you use the popup to find promotions or compare prices, PromoIQ can send the retailer domain and name and the current product record to PromoIQ Cloud Functions. That record may include title, price, identifiers and the full product-page URL, including query details if present. A comparison request can also include the current retailer and price. PromoIQ can also read codes other shoppers submitted for that store.
• Search provider: A requested lookup may cause a PromoIQ Cloud Function to send SerpApi a search query derived from the retailer or product. The provider search uses a query string, not your full cart or payment form. Search results and comparison prices may be unavailable or may change before you use them.
• Installation: On a fresh installation, the published extension can attempt to send an event to a PromoIQ Cloud Function. It includes a persistent random per-install identifier, an audience label, event reason and times, extension version and source metadata. This is a pseudonymous identifier, not an anonymous aggregate.
• Code use and feedback: When you copy a code or report whether it worked, PromoIQ can attempt to record the code, retailer, time, reported result and current product title, price and URL. Direct reports also include the browser user agent. A separate background report can include attempt counts, reported savings and the per-install identifier. A report is not proof that a code works for your cart or that a purchase was made.
• Code-copy link: Copying a code sends the full URL of your current retailer page and a retailer or product label to PromoIQ's link service, and PromoIQ then opens a new tab. Until October 8, 2026, the service could ask Geniuslink to create an affiliate link (Geniuslink received that URL and label), stored the original URL, label and returned link in Firebase, and opened the returned link. Since October 8, 2026, the service returns your own link unchanged and does not store it, so the new tab opens the same retailer page. Records made before that date may remain in Firebase. Copying a code does not test it or confirm a discount.
• Retailer-link clicks: Choosing a comparison offer can attempt to record the retailer, link type and affiliate network, product title, estimated price, source retailer, destination URL, time and extension version in Firebase. It can also include estimated commission fields. A click or estimate is not an actual purchase, saving or earned commission. The destination and any affiliate network receive the normal browser request when you open their link.
• Community codes: When you confirm a community-code submission, PromoIQ sends the code, retailer domain, description, discount type, current page URL and submission time to PromoIQ's Firebase database. If that fails, it keeps the submission on your device. Do not put private details in a code description.
• Error reports: When a feature fails, the extension can send an error report to PromoIQ's Firebase database. It can include the error message, the part of the extension involved, the retailer site, the page URL, the browser user agent and the extension version.
• Exchange rates: To convert prices between currencies, the extension can download exchange rates from open.er-api.com. That request contains no shopping details, but like any web request it reaches that service from your IP address.

In version 2.60.10, installation, code-report, retailer-link and error records are not controlled by a separate opt-in setting.

Why we use this information

Shopping requests help find promotions and compare offers. Reported code results may inform code-confidence information, and link records help measure use of retailer and affiliate links. Error reports help us fix problems. Website analytics and form messages help us understand visits and answer questions. We do not treat a reported success or a link click as verified savings or revenue. PromoIQ may earn a commission if you purchase through an affiliate link.

Extension permissions

PromoIQ has access to listed retailer and service domains so its supported-page scripts can detect shopping details and its shopping features can contact PromoIQ services. The activeTab and scripting permissions support current-page detection and checkout helpers; access is not limited to clicking the toolbar icon because supported-page scripts can also load on eligible pages. storage saves local settings and caches; contextMenus adds right-click actions; alarms supports local cleanup; notifications shows alerts; tabs opens selected offers; and sidePanel displays the assistant. Because of the tabs permission, Chrome may describe PromoIQ as able to "read your browsing history." PromoIQ does not collect a list of the sites you visit. A listed retailer is not a guarantee that its checkout or price comparison works.

Services, security and retention

PromoIQ uses Firebase and Google Cloud, including Cloud Functions and Firestore, for lookups and the records described above. SerpApi can receive derived search queries when a requested search uses it. The website uses Google Analytics, and the contact form can use SendGrid and Telegram. Ordinary HTTPS request metadata, including an IP address, is processed to deliver requests. This does not mean PromoIQ derives or stores your precise location. PromoIQ does not sell browsing history.

Requests use HTTPS. Some information remains in Chrome's local extension storage until you clear it or remove the extension. Cloud records do not have a verified general automatic deletion period. Log retention varies by Google Cloud log bucket and is not a deletion period for Firestore records. Provider and affiliate-network retention may differ. We will not promise that all previously sent information disappears after a fixed number of days.

Your choices and questions

Uninstalling stops future extension activity on your device; you can also clear local extension data through Chrome. Neither action automatically deletes information already sent to cloud services. Contact us about access or deletion questions for those records.

This website

• Analytics: promoiq.co uses Google Analytics 4 to count page visits and clicks on the "Add to Chrome" buttons. Google Analytics sets cookies and receives your IP address and browser details. Google's own privacy policy applies to that data.
• Contact form: the contact form stores your name (optional), email address, store (optional) and message in PromoIQ's Firebase database, with the time it arrived, and nothing else. Since October 19, 2026 it is not emailed or forwarded anywhere; before that, the owner also got a short notice with your email address and store through Telegram. We use your email address only to reply to you.
• Uninstall page: PromoIQ 3.0 and 3.0.1 do not open a page when you remove them. From version 3.0.2, and in version 2.60.10 and earlier, removing PromoIQ opens promoiq.co/uninstall, which asks why. If you answer, your choice, any comment and the time you sent it are stored in Firebase without your name or an ID. That page runs no analytics.