Privacy Policy
Last updated: April 28, 2026
Comark is a Chrome browser extension that lets teams drop comments on any webpage, anchored to specific page elements and shared within a Slack workspace.
What we collect
- Slack account information — When you sign in, Comark stores your Slack user ID, display name, and avatar. This is used only to identify you as a comment author to your teammates.
- Comment content — Text you write as comments or replies is stored in a private database scoped to your Slack workspace. Only members of your workspace who have the extension installed can access it.
- Page URLs and element anchors — The URL of the page where a comment is placed, and a CSS selector identifying the element it's anchored to, are stored with each comment so it can be shown in the right location.
- Local settings — Filter preferences and read/unread state are stored locally on your device using Chrome's storage API and never leave your device.
How we use your data
- To display comments anchored to page elements across your team
- To associate your Slack identity with comments you create
- To sync new comments and replies to teammates in real time
We do not use your data for advertising, analytics, or any purpose beyond the extension's core functionality.
Data sharing
Your comment data is accessible only to authenticated members of your Slack workspace. We do not sell, share, or transfer your data to any third parties.
Security
- All data in transit is encrypted via HTTPS/TLS
- Authentication is handled via Slack OAuth — we never see or store your Slack password
- The Slack workspace bot token is held only on Comark's server (encrypted at rest) and is never sent to your browser. Your local device only holds a session token used to call Comark's own server, plus the locally cached settings noted above
- Comment data is stored in a Supabase Postgres database with row-level security that enforces team-scoped isolation, so members of one Slack workspace cannot read another workspace's comments
Sub-processors
Comark uses the following service providers to operate:
- Supabase — Postgres database, file storage, and serverless functions that broker calls to Slack
- Slack — receives messages we post on your behalf via the Comark bot
We do not use any third-party analytics, ad networks, or tracking services.
Your rights
- Delete any comment you authored directly within the extension
- Revoke access at any time via your Slack account settings under Connected Apps
- Uninstall the extension at any time to remove all locally stored data from your device
Contact
Questions about this policy or your data: support@getcomark.com