Our Browser Extension
Privacy Policy

This addendum supplements the Passpaw Privacy Policy available at https://passpaw.com/privacy and applies specifically to the Passpaw browser extension for Google Chrome, Microsoft Edge, and Mozilla Firefox (the “Extension”). In the event of a conflict between this addendum and the main Passpaw Privacy Policy, this addendum controls with respect to the Extension.

1. Scope

This addendum describes how the Passpaw Extension accesses, uses, and transmits information when installed in a user’s web browser. It does not cover the Passpaw web application, API, or marketing website, which are covered by the main Privacy Policy.

2. Information the Extension accesses

2.1 On the VEHCS website (vehcs.aphis.usda.gov)

The Extension runs only on the USDA APHIS Veterinary Export Health Certification System (“VEHCS”). While on a VEHCS page and when a user initiates an auto-fill action, the Extension reads and writes form field contents in order to populate export health certificate forms on behalf of the user.

The Extension does NOT read or record browsing activity on any website other than vehcs.aphis.usda.gov.

2.2 From the Passpaw servers (app.passpaw.com)

To provide its functionality, the Extension communicates with Passpaw’s servers at app.passpaw.com to:

• Authenticate the signed-in user

• Retrieve the list of export health certificate applications associated with the user’s veterinary practice

• Retrieve the step-by-step data required to auto-fill each application

• Report the progress of each application (including the VEHCS tracking number and status)

• Report diagnostic information when an auto-fill step fails or is completed manually by the user
  
  

2.3 Local browser storage

The Extension stores the following information locally in the user’s browser using the browser’s built-in storage API:

• An authentication session token associated with the signed-in Passpaw account

• User preferences for the Extension

• Transient execution state needed to resume an in-progress auto-fill

The authentication token is removed when the user signs out of the Extension. All other locally-stored data is removed when the Extension is uninstalled.

3. Information transmitted to Passpaw

When the Extension is in use, the following information may be transmitted from the browser to app.passpaw.com:

• The user’s Passpaw account credentials at sign-in

• Requests for the user’s application list and form-fill data

• Progress of each application, including the VEHCS tracking number and status

• Diagnostic information when an auto-fill step fails or is completed manually, including the field identifier, the error message, and any value the user manually entered

The Extension does not transmit general browsing history, data from non-VEHCS websites, cookies from other websites, or any personal information unrelated to the user’s veterinary practice and its VEHCS submissions.

4. Information we do NOT collect or share

Consistent with Google's Limited Use requirements, Passpaw does NOT:

• Sell or rent the information collected by the Extension to any third party

• Use the information collected by the Extension for advertising or marketing attribution

• Transmit user data to third-party analytics providers (such as Google Analytics, Mixpanel, Segment, or PostHog)

• Use or transfer the information collected by the Extension for any purpose unrelated to providing the Extension's auto-fill functionality, diagnosing failures, and improving the integration

• Use or transfer the information collected by the Extension to determine creditworthiness or for lending purposes
  
  

5. Purposes of processing

Passpaw processes the information described above to: (a) operate the Extension and provide its core auto-fill functionality; (b) authenticate and authorize users; (c) maintain the security of Passpaw accounts and detect abuse; and (d) comply with legal obligations.

6. Data retention

• The authentication session token is retained in the user's browser until the user signs out of the Extension. All other locally-stored data is retained until the user uninstalls the Extension or clears their browser storage.

• Data transmitted to app.passpaw.com is retained in accordance with the retention schedule described in the main Passpaw Privacy Policy.
  
  

7. Security

Passpaw uses industry-standard measures to protect information transmitted between the Extension and Passpaw servers, including TLS (HTTPS) for all network communication. No method of transmission or storage is completely secure; users are encouraged to sign out of the Extension on shared or public computers.

8. Children’s privacy

Passpaw is a professional tool for veterinary practices and is not directed to children. The Extension does not knowingly collect information from children under the age of 13 (or the applicable age in the user’s jurisdiction).

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port the information we hold about you. You may exercise these rights, or raise any privacy-related question, by contacting us using the information in Section 11. Instructions for deletion and export are also described in the main Passpaw Privacy Policy.

10. Changes to this addendum

We may update this addendum from time to time. Material changes will be notified to users via the Passpaw Extension, the Passpaw web application, or email. The “Effective date” above reflects the latest version.

11. Contact

For questions about this addendum or Passpaw’s privacy practices, please contact:

Passpaw Support

Email: support@passpaw.com

Web: https://passpaw.com/contact