MySOP.guru is operated by Almeida de Medeiros Zrycki Trading, based in Switzerland. References to "we", "us", or "our" in this policy refer to this entity, which is the data controller for the purposes of Swiss nFADP and EU GDPR.
For privacy enquiries, contact us at: privacy@mysop.guru
Account information: When you create an account, we collect your email address and a hashed password. We do not store passwords in plain text.
Workflow capture data: When you use the Chrome extension, we collect the page URLs, click interactions, and screenshots of the workflows you choose to document. Because a screenshot records whatever is visible on your screen at that moment, capture data may include information displayed by the application you are documenting. You control what is captured by choosing when to start and stop a session, and you can delete or edit any step before exporting. This data is stored securely and associated with your account.
Payment information: Payments are processed by Stripe. We do not store credit card numbers or bank details on our servers. We receive confirmation of payment and a Stripe transaction reference only.
Usage data: We collect basic server logs (IP addresses, request timestamps, error logs) for security and debugging purposes. These are not shared with third parties.
We process this data on the legal basis of performing our contract with you, and, for security logging, on the basis of our legitimate interest in keeping the service safe and functioning.
MySOP.guru is operated by a very small team. Access to systems containing customer capture data is restricted to the operator of the business. We access the contents of a customer's capture session only where it is strictly necessary to diagnose a specific technical fault that you have reported to us, and never for any other purpose.
We do not browse customer content, and no automated system reads your screenshots for any purpose other than generating the document you asked for.
If you would prefer that we do not access a session while investigating a fault you have reported, tell us and we will work from your description alone.
Your data is stored on servers located in the European Union. Application data is held on Railway infrastructure (EU West region), the database is hosted by Neon in AWS Europe Central 1 (Frankfurt), and screenshots and exported documents are stored in Cloudflare R2 (EU region).
All data in transit is encrypted using HTTPS/TLS. Data at rest is encrypted by our storage and database providers using their standard server-side encryption. Passwords are hashed and never stored in a recoverable form. Access to production systems is protected by at least two-factor authentication on all provider accounts.
No system is perfectly secure, and we do not claim otherwise. If we become aware of a personal data breach affecting your data, we will notify you and the relevant supervisory authority without undue delay, and within 72 hours where required by law.
We use the following third-party services (sub-processors) to operate MySOP.guru:
Each of these services processes data only as necessary to provide their function and is bound by their own privacy policies and by data processing terms with us. None of them is permitted to use your data for their own purposes.
We will update this list if we add or change a sub-processor.
We are established in Switzerland and our infrastructure is located in the European Union. Switzerland is recognised by the European Commission as providing an adequate level of data protection, and the EU is recognised as adequate under Swiss law, so transfers between the two require no additional safeguards.
Where a sub-processor listed above processes data outside Switzerland or the EU, that processing is covered by Standard Contractual Clauses or an equivalent transfer mechanism.
Under Swiss nFADP and EU GDPR (for EU residents), you have the right to:
You can delete an individual capture session at any time from within your account. To exercise any of the other rights above, contact us at privacy@mysop.guru. We will respond within 30 days, and exercising these rights is free of charge.
We retain your account data for as long as your account is active. Capture sessions and exported documents are retained for 12 months from creation, after which they are automatically deleted. Payment records are retained for 10 years, as required by Swiss accounting law.
If you close your account, capture data and exported documents are deleted within 30 days, except where we are legally required to retain payment records.
MySOP.guru uses only functional cookies necessary for authentication (session tokens). We do not use tracking cookies or advertising cookies. Because we use no non-essential cookies, we do not display a cookie consent banner.
The MySOP.guru Chrome extension declares the following permissions. This list matches the permissions declared in the extension's manifest, which you can inspect at any time from Chrome’s extensions page.
When you install the extension, Chrome displays a warning that it can read your browsing history. We would rather explain this than have you wonder about it.
That warning is triggered automatically by the tabs and webNavigation permissions listed above. Chrome applies the same wording to every extension that declares either one, because they technically allow an extension to be notified of the URL of a tab. It is not a description of what MySOP.guru actually does.
We use them for one purpose: knowing which tab is active and when it finishes loading a page, so that a capture session records steps in the correct order and keeps working when you move between pages. Every such notification is discarded immediately unless a capture session is running in that exact tab. We do not read, store, or transmit the URLs of pages you visit outside an active capture session, and we do not build any profile of your browsing.
This is the part we think matters most, so we want to describe it precisely rather than reassuringly.
At install time the extension asks for access to no websites at all. The only sites listed in its manifest as permanent are two of our own:
app.mysop.guru — the MySOP.guru web applicationmysopguru-production.up.railway.app — the MySOP.guru backendAccess to the sites you document is declared as an optional permission. Chrome does not grant optional permissions at install; it asks you separately, and we ask only at the moment you first press Start on a capture session. You can decline, and the extension will still install and run.
What granting it means, stated plainly: once you allow it, the permission remains in place until you withdraw it — not only for the duration of that session. We would rather tell you this than let you assume it expires on its own. You can withdraw it at any time at chrome://extensions — find MySOP.guru, open Details, and change Site access.
What we do with it: the capture script is injected only into the single tab in which you started a session, and only while that session is running. It is not injected into your other tabs, and it is not injected into anything when no session is active.
We ask for this because a documented process rarely stays on one page. Without it, recording would stop the moment you moved to the next page or the next application, and your document would be missing steps without telling you.
The extension does not activate unless you explicitly start a capture session. It does not run in the background and it does not monitor your browsing.
MySOP.guru is a business tool and is not directed at children. You must be at least 18 years old to create an account. We do not knowingly collect personal data from anyone under 18.
We may update this policy from time to time. We will notify registered users by email of any material changes. The date at the top of this page reflects the most recent update.
For any privacy-related questions or requests: privacy@mysop.guru
Almeida de Medeiros Zrycki Trading, Switzerland