Privacy Policy of the ToAI Průvodce browser extension

Effective date: 9 November 2026

Česká verze

This policy describes how the ToAI Průvodce browser extension (“the extension”) processes data. The extension guides you step by step through artificial intelligence tools (e.g. ChatGPT, Claude, Gemini) directly on their websites: it shows you where to click and what to do.

This is a translation of the Czech version; in case of any discrepancy, the Czech version prevails. The privacy policy for the toai.cz website (newsletter, course registration) is available separately in the Privacy Policy (in Czech).

Controller

Martin Svoboda, Company ID (IČO) 04825560, e-mail martin.svoboda@msvbd.cz.

Data stored in your browser

The extension stores in your browser's storage:

• course progress: courses you have started, where you left off, completed parts, and when you started, last opened and completed a course,
• settings: for example, websites on which you do not want the course offer to be shown, or video autoplay,
• the course list downloaded from toai.cz.

The purpose is to let you continue where you left off and to keep the extension working offline. The data stays on your device and the controller has no access to it.

Content of pages where a course runs

The extension works with pages on websites you have granted it access to. Chrome asks for access when you start a course. On these websites, the extension reads the page content and your actions on it (clicks, navigation to another page, text input) so it can show you where to click and recognize that you have completed a step. A course may remember a value from the page for later steps; it is deleted when the course is stopped or completed. To offer a course for the open page, the extension checks the page address.

All of this is processed in your browser.

Downloading courses from the toai.cz server

The extension regularly (about twice an hour and when a course starts) downloads the course list and course content from the toai.cz server. The download is the same for all users. As with any website visit, the server records the IP address, time, address of the downloaded file, and browser type and version.

• Purpose: ensuring server operation and security (detecting errors and attacks).
• Legal basis: the controller's legitimate interest in the secure operation of the service (Art. 6(1)(f) GDPR).
• Retention: 31 days, after which the records are deleted automatically.

The server is managed by the controller. It is rented from WEDOS Internet, a.s., which operates it in its data centre in the Czech Republic and acts as a processor of this data. The data therefore stays in the EU.

YouTube videos

Some courses include a YouTube video that plays in the browser's side panel. When you start such a course, Chrome also asks for access to YouTube, which the extension needs to play the embedded video.

During playback, your browser communicates directly with Google's YouTube service, which processes data (e.g. IP address and your Google account cookies) as an independent controller under its own privacy policy. The extension receives from the player only the information that the video has ended, so the course can continue.

AI tool websites

On the websites where courses take place (e.g. chatgpt.com, claude.ai, gemini.google.com), you use your own account, and the terms and policies of their operators apply.

Data sharing

We do not sell data, transfer it to third parties, or use it for advertising or for any purpose other than the functioning of the extension. The use of data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Deleting data

• Data in your browser remains until you uninstall the extension. Uninstalling deletes it.
• Site access can be removed at any time in Chrome settings (chrome://extensions → ToAI Průvodce → Details → Site access).
• Server records are deleted automatically after 31 days.

Your rights

Under the GDPR, you have the right to access your personal data, to have it rectified or erased, to restrict processing, to data portability, and to object to processing. You can exercise your rights by e-mail at martin.svoboda@msvbd.cz. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ).

Changes to this policy

If the way data is processed changes (for example, with signing in to the extension or paid courses), we will update this policy and publish the new version on this page with its effective date.

If you have any questions, write to martin.svoboda@msvbd.cz.