Privacy Policy

1. Overview

Welcome to Vezz me ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Chrome extension and related services (collectively, the "Service").

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of our Chrome extension, website, and related services.

2. Information We Collect

2.1 Information You Provide Directly

• Email Address: The extension requires an email address to track free-plan usage and subscription status. It is stored in Chrome sync storage and sent to the Vezz me API when you use the service.
• Subscription Data: Payment information for premium subscriptions (processed securely through third-party payment processors).
• Support Communications: Information you provide when contacting our support team.
• Feedback and Surveys: Responses to surveys or feedback forms you voluntarily complete.

2.2 Information Processed Automatically

• Content Used to Generate Answers:
  • Your question or selected text
  • Optional page context you enable, such as the page title, URL, description, heading, and surrounding text
  • Conversation context and custom system prompts used for follow-up answers
• Usage and Anti-Abuse Data:
  • Monthly answer count associated with your email address
  • IP-based monthly usage count and email associations used to prevent abuse
  • Subscription status and Stripe customer reference, where applicable
  • Service error logs generated by our infrastructure
• Website Analytics: Our public website uses Google Analytics. The Chrome extension itself does not include advertising or analytics SDKs.

2.3 Information We Do NOT Collect

• Your complete browsing history or a log of every website you visit
• Personal files or documents on your device
• Passwords or sensitive authentication information
• Credit card information (handled by payment processors)
• Private conversations or communications outside our extension

3. How We Use Your Information

3.1 Service Provision

• Provide AI-powered question answering functionality
• Maintain conversation history for follow-up questions
• Customize responses based on webpage context
• Sync your preferences across devices

3.2 Service Improvement

• Measure aggregate website usage
• Identify and fix service errors or performance issues
• Improve service reliability and user experience

3.3 Communication

• Send important service updates and security notifications
• Respond to customer support inquiries
• Send newsletters and product updates (with your consent)
• Notify you about account or subscription changes

3.4 Legal and Security

• Comply with legal obligations and requests
• Protect against fraud and abuse
• Enforce our Terms of Service
• Ensure platform security and integrity

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Service Providers

• AI Service Providers: Groq and Cloudflare Workers AI process questions, selected text, optional page context, conversation context, and custom prompts to generate answers. Their handling is governed by their respective terms and privacy policies.
• Cloud Infrastructure: Cloudflare hosts the Vezz me API and stores limited usage, subscription, and anti-abuse records.
• Payment Processor: Stripe processes subscriptions and payment information. Vezz me does not store full payment-card details.
• Website Analytics: Google Analytics measures usage of the public Vezz me website.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

5.1 Security Measures

• Encryption in Transit: The extension communicates with the Vezz me API and service providers over HTTPS.
• Credential Protection: AI-provider and payment-provider secret keys are kept on the backend and are not included in the extension.
• Abuse Protection: Request limits and webhook signature verification help protect the service.
• Data Minimization: We collect and retain only necessary data

5.2 Data Retention

• Monthly Usage and IP Anti-Abuse Records: Automatically expire after approximately 32 days.
• Subscription Status: Cached for up to approximately 35 days and refreshed while a subscription remains active.
• Stripe Customer Reference: Cached for up to approximately one year to support billing operations.
• Questions and Page Context: Processed to generate answers and not intentionally stored in Vezz me's usage database. AI providers may process or retain data according to their own policies.
• Local Extension Data: Preferences, prompts, email, and interface settings remain in Chrome storage until you remove them or uninstall the extension.

6. Your Rights

6.1 Access and Control

• Data Access: Request a copy of all personal data we hold about you
• Data Correction: Update or correct inaccurate information
• Data Deletion: Request deletion of your account and associated data
• Data Portability: Export your data in a machine-readable format
• Usage Restriction: Limit how we process your information

6.2 Communication Preferences

• Opt out of marketing communications while keeping service notifications
• Control the frequency and type of notifications you receive
• Manage email preferences through your account settings

6.3 Exercising Your Rights

To exercise any of these rights, contact us at privacy@vezz.me. We will respond to your request within 30 days and may require identity verification to protect your privacy.

7. Cookies and Tracking

7.1 Types of Cookies

• Essential Cookies: Required for basic service functionality (cannot be disabled)
• Analytics Cookies: Google Analytics helps us understand usage of the public website
• Preference Cookies: Remember your settings and customizations
• Security Cookies: Protect against fraud and ensure secure access

7.2 Cookie Management

You can control website cookies through your browser settings. These website cookies are separate from the extension's Chrome storage.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@vezz.me.

9. International Users

9.1 Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for data transfers to approved countries
• Binding corporate rules for internal data transfers

9.2 Regional Rights

• EU/UK Users: Additional rights under GDPR including data protection officer contact
• California Users: Rights under CCPA including sale opt-out (we don't sell data)
• Canadian Users: Rights under PIPEDA including privacy commissioner complaints

10. Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

• Notify you via email for material changes
• Post updates on our website and in the extension
• Provide a 30-day notice period for significant changes
• Maintain an archive of previous policy versions

Your continued use of the service after changes become effective constitutes acceptance of the updated policy.