Chrome user evidence is positive and reasonably large
The exact Chrome Web Store listing currently reports 4.8/5 from about 8,800 ratings and roughly 900,000 users.2 For a browser-centric product, that is the most relevant public satisfaction signal available in this cycle. Chrome also marks Foyer Tech as Featured and following recommended extension practices.
The store says the extension handles personally identifiable information and location. The developer declares that data is not sold to third parties, not used for unrelated purposes and not used for creditworthiness decisions.2
Product Hunt supplies smaller but more detailed qualitative evidence. Current user comments praise Projects, preserved context, comparing multiple models and the browser workflow, while complaints include free-use reductions, glitches and the absence of Firefox support in older feedback.5 These comments are useful context, not a representative rating population.
Trustpilot is a strong warning channel, not a direct score input
The current getmerlin.in Trustpilot profile is 2.0/5 from 26 reviews, with 73% one-star and 19 reviews in the preceding 12 months.6 Recent complaints include rapid credit consumption, model quality, slow or incomplete responses, failed subscription activation, support delays and refund disputes. Some company replies acknowledge earlier OCR/document-processing or performance problems and say later updates addressed them.
The sample is tiny and strongly self-selected, so it should not be treated as a direct measure of overall product satisfaction. It is nevertheless relevant because the complaint themes align with the product's most consequential buyer risks: usage economics, reliability and post-purchase support.
Privacy documentation is detailed but not minimal-data by design
The current privacy policy took effect January 20, 2026 and covers web, browser extensions, mobile apps, the AI Note Taker and API-related services.7 It says Merlin collects prompts, uploaded files, conversation history, usage information and—when the extension is enabled—browsing Activity Data associated with visited pages.7
The policy states that collected information can be used to develop, test and improve AI models and services and that aggregated usage patterns may be used to refine AI models. It also says Activity Data can be used to provide page-aware features, security, troubleshooting and extension-performance improvement.7 That is broader than a strict no-training/no-improvement posture and matters for confidential work.
Retention is more explicit: user content is retained for 30 days after a deletion request unless law requires longer; usage data can be retained for up to two years; raw extension browsing logs are retained as necessary for stated purposes, with shorter raw-log periods where feasible and aggregated/de-identified analytics retained afterward.7
The same policy says users retain ownership of their inputs and Merlin does not claim ownership of AI outputs. It also describes encryption in transit and at rest, access controls and regular security assessments.7
Legal terms put substantial responsibility on the user
Merlin's Terms provide the product as-is and disclaim warranties around accuracy, reliability, availability and security.4 Liability is capped at amounts paid in the six months preceding a claim. The user remains responsible for submitted content and for verifying outputs.
For professional use, the combination of broad upstream-model access, browser Activity Data and variable fair-use limits means procurement should evaluate privacy, data-processing and usage economics together rather than looking only at the model list.