Google Drive Sync Privacy Policy

Last updated: October 3, 2026

Superpower for AI is a family of Chrome extensions: Superpower for Gemini, Superpower for Claude, Superpower for NotebookLM and Workbench for ChatGPT. They share one Google sign-in, which Google's consent screen shows as "Superpower for AI". They are operated by SulfurByte ("we", "us", "the developer").

This policy covers one thing: the optional Google Drive sync feature, and the Google user data it uses. Everything else each extension does is covered by that extension's own privacy policy, linked in Section 11.

1. What Drive sync is

Drive sync keeps the things you create inside an extension (such as your folders and saved prompts) the same across your own devices and browsers, by keeping a backup copy in your own Google Drive.

Optional and off by default. It is a Pro feature, and nothing happens until you turn it on yourself in the extension's settings.
Asked for at the moment you turn it on, never at install. Only then does the extension request Chrome's optional identity permission, and Google shows its own sign-in and consent screen, where you approve or decline the access described below.

2. The Google user data we access

One permission only: the OAuth scope https://www.googleapis.com/auth/drive.appdata. No extension requests any other Google scope.
What that scope reaches: a hidden application-data folder in your Google Drive that belongs to the extension. The extension can create, read, update and delete its own backup file in that folder, and nothing else.
What it cannot reach: any other file in your Drive (documents, photos, folders, shared files), and any other app's data. The extensions cannot see, list, open, change or delete any of it.
No account details: the extensions do not receive your name, email address, profile picture, contacts or any other Google account data, and they never see your Google password. Sign-in is handled entirely by Google.

3. What each extension stores in that folder

Each extension keeps one backup file of its own. It holds what you organise and save inside that extension, exactly as listed below, plus small deletion records so that something you delete on one device is also removed on your others.

Superpower for Gemini (superpower_folders.json): your folders (including the title and link of each chat you filed), the extension's recycle bin (the chats you moved there, with their titles), saved prompts, prompt chains and bookmarks. Each bookmark includes a short excerpt of the bookmarked message (up to 140 characters), so it can be labelled without reopening the chat. The file also carries one setting: whether the recycle bin is switched on.
Superpower for Claude (superpower_claude.json): your folders, saved prompts, prompt chains, bookmarks and per-chat notes. Each bookmark includes a short excerpt of the bookmarked message (up to 140 characters).
Superpower for NotebookLM (superpower_notebooklm.json): your notebook folders, per-notebook source folders, saved prompts, prompt chains, your per-notebook notes and the extension's trash list (the notebooks you moved there, with their titles).
Workbench for ChatGPT (superpower_chatgpt_folders.json): your folders, saved prompts, prompt chains, per-chat notes, and the titles of the chats you have filed into folders.

Nothing else is uploaded. In particular, the backup never contains your full conversations, the contents of your notebooks or sources, or your usage counts. From your chats and notebooks it holds only their titles (where listed above) and, in Gemini and Claude, the short excerpt of each message you bookmark. Of your extension settings it holds only the recycle bin switch in Superpower for Gemini.

4. How we use it

Solely to provide the sync feature you turned on: the extension reads its backup file, merges it with the data on the device you are using, and writes the merged result back. The data is not used for anything else. It is not used for advertising, analytics, profiling or training AI models, and it is not combined with any other data.

5. Where it is stored and how it travels

Only in your own Google Drive. The backup file goes directly between your browser and Google's servers over an encrypted (HTTPS) connection to the Google Drive API.
Never on our servers. We operate no server that receives, stores or can read this data, and we never get a copy of it.
The access token stays in your browser. The token Google issues is held by Chrome and the extension on your device, and is used only to read and write the extension's own backup file.

6. Sharing

We do not share, sell, rent or transfer this data to anyone, because we never have it. No person at SulfurByte reads it. The only service involved is Google Drive itself, acting on your instructions in your own account.

7. Limited Use disclosure

The use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, data obtained through the drive.appdata scope is used only to provide the user-facing sync feature described above. It is never transferred to the developer or to any third party (except as needed to provide that feature, to comply with the law, or as part of a merger or acquisition with notice to you), never used for advertising, and never read by humans, except with your explicit consent, for security purposes, or as required by law.

8. Turning it off and deleting your data

Stop syncing: disconnect Google Drive in the extension's settings. Sync stops at once.
Remove the extension's access: open your Google Account's third-party access page, choose Superpower for AI and remove its access.
Delete the backup: in Google Drive, open Settings, then Manage apps, find Superpower for AI, and choose Options, then Delete hidden app data.
Retention: the backup stays in your Drive, under your control, until you delete it. Uninstalling an extension does not delete it, so use the step above if you want it gone. We hold no copy, so there is nothing for us to retain or delete on our side.

9. Children

The extensions are not directed at children under 13, and we do not knowingly process data from them.

10. Changes and contact

If this policy changes, we update this page and the date at the top. The data controller is SulfurByte, the trading name of:

David Košnar
Rumunská 789/11
779 00 Olomouc
Czech Republic
IČO: 46784519

Questions about this policy: [email protected].

11. Each extension's full privacy policy

Everything outside Drive sync (what each extension stores on your device, its licence check, feedback forms, newsletter and so on) is covered by its own policy: