Legal
Last updated: October 2026
We collect information you provide directly when creating an account (name, email address) and information generated through your use of the service: conversion history (including the script name and NetSuite account ID for each conversion), account metadata and plan information. Our servers also process your IP address for request rate limiting and in short-lived server logs. We do NOT collect, store, or transmit your NetSuite password or NetSuite session tokens. The extension uses your existing NetSuite browser session inside your browser only. Your SuiteMigrate sign-in tokens are kept in the extension's local storage and sent only to SuiteMigrate.
We use the information we collect to: — Provide, operate, and improve the SuiteMigrate service — Process payments and manage your subscription (once paid plans launch) — Send transactional emails (account verification and, once paid plans launch, payment receipts) — Respond to support requests We do not sell your personal information to third parties.
When you choose to convert a script, that selected source code is sent to the SuiteMigrate backend and then to Anthropic's Claude API to perform the requested conversion. Anthropic does not use API inputs or outputs to train its models by default. SuiteMigrate does not retain the original source code in its conversion database after processing. The converted result and related conversion metadata may be stored in your SuiteMigrate account so you can review and re-download the output. We do not sell your script code. The selected source is shared with the AI processing provider only as necessary to perform the conversion. If automatic NetSuite source access is unavailable and you paste an authorized source copy manually, that pasted source is processed under the same rules. Do not submit scripts you are not authorized to process.
SuiteMigrate uses Chrome's activeTab and scripting permissions only after you interact with the extension on the NetSuite tab you opened. When you first start Scan & Verify, Chrome asks you to allow optional access to NetSuite pages (https://*.app.netsuite.com/*); this only lets the source-access check continue while you navigate within NetSuite, and you can decline it. The extension's host permission for suitemigrate.in (and the earlier suitemigrate.vercel.app host) is used for sign-in, account status and conversions, and a small content script on that site only passes your SuiteMigrate sign-in to the extension from the extension-connect page. After you select Scan & Verify, it runs read-only SuiteQL inventory queries and automatically attempts local source-access checks for legacy script files under your current NetSuite role. Source content read during these checks is discarded, is not included in the report, and is not sent to our backend or AI provider. If you explicitly select Convert, only that selected source is transmitted for the requested conversion as described above. Chrome storage keeps account inventory, classification results, consent state, extension sign-in state, and converted-result metadata. The Downloads permission is used only when you request local exports, such as the migration readiness HTML report, script inventory CSV, or converted files. The Chrome alarms permission continues a user-started, read-only source access audit in small batches if Chrome suspends the extension service worker; you can pause/resume it from the extension. CSV exports contain script inventory metadata, not script source. The side-by-side migration comparison keeps original source in popup memory and does not persist it in extension storage. Original NetSuite source code is not intentionally persisted in Chrome local storage. The extension does NOT read or transmit your NetSuite password or session token to SuiteMigrate servers, and it does not create, modify, deploy, or delete NetSuite records.
Your data is stored securely using Supabase (PostgreSQL) with encryption at rest and in transit. Payments, when paid plans are offered, are handled entirely by Polar (Polar Software Inc.), our merchant of record; card details never reach SuiteMigrate's servers. We implement industry-standard security measures including HTTPS encryption, secure authentication tokens, and regular security reviews.
We use the following third-party services: — Supabase — authentication and database — Anthropic Claude API — processes script code that you explicitly submit for conversion — Vercel — website hosting and server logs — Google — optional sign-in with your Google account — Polar (polar.sh) — merchant of record that processes payments, invoices and sales tax for paid plans
We retain your account profile and converted-result history while your account remains active. Original script source is not retained in the SuiteMigrate conversion database after processing. You can delete your account from Account Settings; this immediately removes the associated SuiteMigrate profile and conversion records. Rate-limit counters are kept for at most one day, and server logs are kept only for the hosting provider's standard log retention period.
You have the right to access your personal data, correct inaccurate data, delete your account and all associated data, export your conversion history, and opt out of non-transactional communications. To exercise these rights, use account settings or contact support@canwe.tech.
We use essential cookies to maintain your authentication session. We do not use tracking cookies for advertising.
SuiteMigrate's use and transfer of information received through Chrome extension permissions is limited to providing and improving SuiteMigrate's user-facing migration functionality. We do not sell this data, use it for personalized advertising, or transfer it for unrelated purposes.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the application.
For privacy-related questions, contact support@canwe.tech.