This policy describes how we handle information when you use the Patient Peer curator web application and the Patient Peer Curator browser extension ("Extension"). The Extension is intended for authorized curators using the Patient Peer curator dashboard.

• Authentication session data. When you connect the Extension to your curator session, the Extension stores tokens locally in the browser (for example access and refresh tokens) so it can call Patient Peer services on your behalf without asking you to sign in every time.
• App configuration. The Extension may store the Patient Peer app URL and related settings needed for the summary panel and API requests.
• Article context. When you use AI Summary on an external article page, the Extension may read the page URL and visible page text from that tab so a summary can be generated or saved in line with your curator workflow. That content may be sent to Patient Peer backend services you are authorized to use.

We use this information only to operate the curator product you are using: sign-in handoff, generating and editing summaries, and saving results back to your curator workspace. We do not use the Extension to sell browsing histories, and we do not use it for advertising, credit scoring, or lending decisions.

Data is processed by Patient Peer services associated with your deployment (for example your hosted curator application and related APIs). Third-party subprocessors may include your cloud host and authentication provider configured for the Patient Peer platform.

Session tokens remain on your device until you sign out, remove the Extension, or clear site data for the Extension. Server-side retention depends on your organization's Patient Peer configuration and applicable agreements.

For privacy questions or support requests, contact your Patient Peer system administrator or email support@patientpeer.com.