Privacy Policy – ZapSummarizer AI

Last updated: January 1, 2026
Version: 1.0

1. General Information

This Privacy Policy describes how ZapSummarizer AI (“Extension”) collects, uses, stores, and protects your personal information when you use our Google Chrome browser extension that transcribes and summarizes WhatsApp Web voice messages.

1.1. Data Controller

Name: ZapSummarizer AI

Contact: Through the extension support or the email listed in Section 11.

Purpose: Transcription and summarization of audio messages using artificial intelligence.

1. Data Collected
   2.1. Personal Data Collected

We collect the following categories of information:

a) Authentication Data:

Email address (required for Google OAuth login).

Unique user ID generated by Supabase Auth.

Access tokens and JWT refresh tokens (stored locally).

b) Usage and Functionality Data:

WhatsApp Web audio message files (temporarily, only during processing).

Duration of processed audio (in seconds).

Usage metrics (AI token and character counters).

Usage logs (number of transcriptions and usage time).

c) Payment Data (Pro users only):

Transaction information (ID, amount, currency, date).

Payment gateway used (Stripe/Asaas).

Subscription status and plan change dates.

d) Technical Data:

User country (based on browser settings), preferred language, and extension version.

2.2. Data NOT Collected

For your security, we do NOT collect:

WhatsApp text message content.

Contact lists or full message history.

Passwords, banking credentials, or precise GPS location data.

1. Legal Basis and Purposes
   3.1. Legal Basis

Your data is processed based on: Consent (when installing and using the extension), Contract Performance (service delivery), and Legitimate Interest (service improvement and maintenance).

3.2. Specific Purposes

Service Delivery: Processing audio via OpenAI Whisper and generating summaries/tasks via GPT-4o-mini.

Account Management: Authentication, plan limit control, and subscription processing.

Improvement: Aggregated metrics analysis and technical diagnostics.

1. Storage and Security
   4.1. Storage Location

Local (Browser): JWT tokens, transcription cache (up to 200 items), and preferences.

Cloud (Supabase): User profile, usage logs, and payment status.

4.2. Security Measures

Encryption in transit (TLS 1.3) and at rest (AES-256).

Row-Level Security (RLS) in the database.

Access tokens with automatic expiration.

4.3. Data Retention

Audio files: Deleted immediately after processing.

Transcriptions: Stored locally for up to 30 days.

Account data: Retained until account deletion by the user.

Payment data: Retained for 7 years (to comply with tax obligations).

1. Data Sharing

We share data only with partners essential to providing the service:

OpenAI: Audio and text processing.

Supabase: Backend infrastructure and database.

Google: OAuth authentication only.

Stripe/Asaas: Payment processing.

We DO NOT sell, rent, or trade your personal data.

1. Your Rights (LGPD / GDPR)

You have the right to Access, Rectification, Deletion (Erasure), Data Portability, and Object to data processing.
To exercise these rights, please contact us by email.

1. Cookies and Similar Technologies

We do not use third-party tracking cookies. We only use chrome.storage.local to maintain your session and save preferences.

1. International Data Transfers

Your data may be processed on servers located in the U.S. and EU (OpenAI, Google, and Supabase), following Standard Contractual Clauses (SCCs) to ensure adequate protection.

1. Children

This service is not intended for users under the age of 16. If we identify data belonging to minors, it will be deleted immediately.

1. Contact and Support

For privacy-related questions or to exercise your rights:

Email: ymmartins65@gmail.com

Data Protection Officer: Yuri M. Martins

Response Time: Up to 15 business days.

1. Final Provisions

This policy is governed by the LGPD (Brazil), GDPR (Europe), and CCPA (United States). Any disputes shall be resolved in the user’s local jurisdiction.

By using ZapSummarizer AI, you agree to the terms of this Privacy Policy.

Next Review: July 1, 2026