PDF Downloader for Scalable Capital
Privacy Policy
This notice explains how the browser extension PDF Downloader for Scalable Capital (the “Extension”) handles information. It applies to the Extension and related support communications. It does not cover Scalable Capital, Google Chrome, or third-party document hosts, which operate under their own privacy notices.
1. Who we are and how to contact us
The Extension is provided by Prompt Monkey. For privacy questions or requests, contact:
Prompt MonkeyEmail: promptmonkey26@gmail.com
Prompt Monkey is not affiliated with, endorsed by, or acting on behalf of Scalable Capital. The Extension is an independent tool that works with the Scalable Capital website when you are signed in.
2. Information handled and why
After you give affirmative consent in the Extension and use it on a supported Scalable Capital page, it reads information needed to provide its PDF-download and export features. Information is obtained from the Scalable Capital page and responses, documents you select, settings you choose, and support messages you send us. Depending on your account and choices, it can include:
| Information category | Examples and purpose |
|---|---|
| Financial and account information | Transaction records, dates, transaction types, security or document names, account-related identifiers and document availability. Used to search, filter, display and match documents for exports you request. |
| Document information | Document names, metadata, document URLs and selected original PDF files. Used to locate, verify and include documents in a ZIP archive. |
| Request information | Temporary request templates and request parameters needed to retrieve records from Scalable Capital, including pagination and transaction or document identifiers. The Extension keeps only an allowlist of request headers; authentication headers and cookie values are excluded from saved templates. |
| Preferences and consent status | Interface language, selected filters, consent version and time, and whether consent has been withdrawn. Used to remember settings and enforce the consent gate. |
| Support information | If you email Prompt Monkey, your email address, message, and attachments. Used to respond and handle the support request. |
The Extension does not ask for or store your Scalable Capital password and does not request Chrome’s cookie permission or read cookie values through that permission. Requests to Scalable Capital use your existing signed-in browser session. Information is not used for advertising, profiling, sale, or unrelated purposes. The Extension does not make decisions about you that produce legal or similarly significant effects.
3. Where information goes and who receives it
- Your browser: The Extension processes account and document information locally. It does not send transaction lists, PDFs, ZIP archives, or CSV exports to Prompt Monkey. It has no developer-operated account-data server and no analytics or advertising integration.
- Scalable Capital: Your browser sends requests to Scalable Capital using your existing signed-in session to retrieve the records and documents you request. Scalable Capital receives those requests and processes them under its own terms and privacy notices.
- Document hosts: A PDF URL supplied by Scalable Capital may point to a host on another domain. Your browser requests the selected PDF from that host. The host may receive the requested URL, your IP address, ordinary connection information, and any referrer information your browser sends. For external document hosts, the Extension omits Scalable Capital credentials and cookies from the PDF request. The host’s own practices govern its processing.
- Support email: If you contact Prompt Monkey, email providers may process the message and delivery information needed to send, receive, and retain it.
Prompt Monkey does not sell personal information or share it for cross-context behavioral advertising, targeted advertising, or profiling. The Extension does not transfer account records to Prompt Monkey. Chrome and your device may process information as part of their own browser, operating-system, backup, or security functions; those activities are governed by their providers’ terms and settings.
4. Storage, retention, and deletion
- Temporary Extension data: Transaction and document information, result lists, verification/status data, duplicate-download history, and temporary request templates are held in Chrome’s
storage.session. Chrome keeps this storage in memory while the Extension is loaded. It is cleared when Chrome restarts or the Extension is disabled, reloaded, or updated. Request templates are separated by Scalable Capital tab and removed when that tab closes. This data is not stored in Chrome Sync. - Local settings: Chrome’s local Extension storage holds language and filter preferences and the minimum consent or withdrawal status needed to operate the consent gate. It remains until you clear the Extension’s data or remove the Extension. It is not transaction history and is not stored in Chrome Sync.
- Consent withdrawal: The Extension removes the consent grant version and timestamp, retains a withdrawal marker so it remains blocked until you consent again, and clears temporary session account data.
- Files you download: ZIP and CSV exports remain in the location managed by Chrome until you delete them. The Extension does not remotely access or automatically delete downloaded files.
- Email support: Support correspondence is retained for as long as reasonably necessary to answer and follow up on your request and meet applicable legal obligations.
You can clear local Extension data through Chrome or remove the Extension. After withdrawal, reload open Scalable Capital tabs to end the Extension’s page integration.
5. Security
The Extension uses secure web connections for requests to Scalable Capital. It limits saved request headers to a fixed allowlist and does not retain authentication headers or cookies in request templates. Chrome’s storage.session is held in memory while the Extension is loaded and is not persisted to disk by that API. Information being processed during an active browser session may still be accessible to software or people who can access your device or browser profile.
The Extension does not add encryption or password protection to ZIP or CSV files. Those exports may contain sensitive financial information in readable form. Store them only on a device and in a location you control, use device-level protections, and delete copies you no longer need. No method of storage or transmission is completely secure.
6. Your U.S. privacy choices and rights
U.S. federal and state privacy laws differ and apply only when their scope and requirements are met. If a privacy law applies to Prompt Monkey and to you, it may give you rights to request access to or a copy of personal information; correct or delete certain information; obtain a portable copy; opt out of certain sales, targeted advertising, or profiling; or appeal a denial of a request. Some laws provide additional rights regarding sensitive personal information. Exact rights, exceptions, deadlines, and verification requirements depend on the law that applies.
Prompt Monkey does not sell or share Extension account data, use it for targeted advertising, or maintain a server copy of it. As a result, Prompt Monkey generally cannot identify, retrieve, correct, or delete data stored only in your browser or files saved to your device. You can manage that information in Chrome and delete your downloads yourself. To make a privacy request about information you sent directly to Prompt Monkey, email promptmonkey26@gmail.com with “Privacy Request” in the subject. We may ask for information reasonably needed to verify and respond, as permitted by applicable law. We will not discriminate against you for exercising a privacy right where a law prohibits that conduct.
Consent withdrawal
You can withdraw consent at any time from the Extension’s privacy panel by selecting “Withdraw consent.” The Extension immediately blocks further use, attempts to stop its page integration, cancels an in-progress ZIP download where possible, and clears temporary account and session data. It removes the consent grant record while retaining the withdrawal marker and language and filter settings locally. To use the Extension again, you must provide consent again. Withdrawal does not affect processing completed before withdrawal, and files already downloaded remain on your device for you to delete.
7. Children’s privacy
The Extension is a general-audience financial utility and is not directed to children under 13. Prompt Monkey does not knowingly collect personal information directly from children under 13 through the Extension. If you believe a child has sent personal information to Prompt Monkey, contact promptmonkey26@gmail.com. COPPA may impose additional requirements on services directed to children or that have actual knowledge they collect personal information from children under 13.
8. Chrome Web Store Limited Use disclosure
The Extension limits its use and transfer of user data, including personal or sensitive user data accessed through Chrome APIs, to the purpose described above. The Chrome Web Store User Data Policy sets additional rules for the collection, use, transfer, and security of user data. The Extension does not sell user data or use it for advertising. Prompt Monkey does not access account and document information processed locally by the Extension. Support messages you voluntarily send to Prompt Monkey may be reviewed to respond.
9. Changes to this notice
We may update this notice if the Extension’s data practices or applicable requirements change. We will update the effective date above and, where required, provide a prominent in-product notice before materially changed practices begin.
Official information
- Chrome Web Store Program Policies: privacy, Limited Use, and secure handling
- Chrome Extensions Storage API
- California Attorney General: California Consumer Privacy Act
- Federal Trade Commission: COPPA FAQs
This notice describes the Extension’s practices and is not a guarantee that every law applies or that a regulator or court will reach a particular conclusion. Privacy obligations can depend on Prompt Monkey’s business activities, thresholds, and the user’s location.
Privacy contact: promptmonkey26@gmail.com