The current policy is published at https://proso.com.br/privacy.html.

Page content: Proso extracts text locally. Only text the user explicitly asks to hear is sent outside Firefox, to the selected TTS provider, the Proso synthesis API, or a synthesis host whose address the user entered. The manifest declares required websiteContent transmission and optional authenticationInfo when the user chooses BYOK.

Credentials and preferences: BYOK keys and settings are stored in browser.storage.local. Keys are used only for the selected synthesis request and are not persisted or logged by the Proso server. A user-operated host remains off until configured and granted at runtime.

Telemetry: The public AMO build initializes no usage tracker, requests no telemetry host permission, contains no gateway credential, and exposes no telemetry toggle. It sends no usage events, diagnostics, browsing history, or page URLs to Proso.

Local storage: Generated audio may be cached in IndexedDB to avoid repeat synthesis. Users can clear local data in settings.

Payments: If paid checkout is enabled in the future, Paddle is the merchant of record. Card details go directly to Paddle and are never received by Proso.

Privacy requests: privacy@proso.com.br.