Privacy Policy for zwitcha Chrome Extension

1. Introduction

This Privacy Policy describes how zwitcha Speech-to-Text (“zwitcha,” “we,” “us,” or “our“) collects, uses, stores, and protects information when you (“user,” “you,” or “your“) use our Chrome browser extension (the “Extension,” “Service,” or “Product“).

2. Information We Collect

2.1 Information You Directly Provide

OpenAI API Key

• You must provide your own OpenAI API key to use transcription features
• This key is stored locally in your browser using Chrome’s chrome.storage.sync API
• We do not have access to, collect, or store your API key on any server
• Your API key is encrypted by Chrome’s built-in security mechanisms

User Configuration Data

• Custom AI prompts you create
• Webhook URLs you configure
• Text shortcuts (trigger words and replacement text)
• User preferences and settings
• All configuration data is stored locally in your browser
• This data syncs across your Chrome browsers if Chrome sync is enabled (controlled by you)

2.2 Information Automatically Collected

Audio Recordings

• When you use the voice recording feature, audio is temporarily captured from your microphone
• Audio is immediately sent to OpenAI’s API for transcription
• We do NOT store, save, or have access to your audio recordings
• Audio is transmitted directly from your browser to OpenAI’s servers
• Audio recordings are deleted from your device’s memory after transcription is complete

Usage Data

• We do NOT collect any usage analytics, telemetry, or tracking data
• We do NOT use cookies, web beacons, or similar tracking technologies
• We do NOT track which websites you visit or what you type

3. How We Use Your Information

3.1 Local Storage Only

All data you provide (API keys, prompts, webhooks, shortcuts) is stored exclusively in your browser’s local storage using Chrome’s chrome.storage.sync API. This data:

• Never leaves your device except when you enable Chrome sync (your choice)
• Is encrypted by Chrome’s built-in security
• Can be deleted at any time from the Extension settings
• Is not accessible to us or any third party
• Does not pass through our servers (we don’t have any servers)

3.2 Purpose of Data Collection

We collect and store data locally for the following purposes:

• API Key: To authenticate your requests to OpenAI’s Whisper and GPT APIs
• Custom Prompts: To process your transcriptions according to your preferences
• Webhooks: To send transcriptions to your configured external services
• Text Shortcuts: To automatically replace trigger words in your transcriptions
• Settings: To remember your preferences between recording sessions

4. Third-Party Services

4.1 OpenAI Services

What Data is Shared:

When you use the transcription features, the following data is sent directly from your browser to OpenAI:

• Audio recordings (for transcription via Whisper API)
• Transcribed text (for processing via GPT API, if you enable custom prompts)
• Your OpenAI API key (for authentication)

How OpenAI Uses Your Data:

• OpenAI processes your audio to generate text transcriptions
• OpenAI processes your text according to the custom prompts you configure
• OpenAI’s use of your data is governed by their Privacy Policy and Terms of Service
• OpenAI may retain data according to their data retention policies

OpenAI’s Policies:

• Privacy Policy: https://openai.com/policies/privacy-policy
• Terms of Use: https://openai.com/policies/terms-of-use
• API Data Usage Policy: https://openai.com/policies/api-data-usage-policies

Your Responsibilities:

• You are responsible for your OpenAI account and API key
• You agree to OpenAI’s terms when using their services through our Extension
• You are responsible for any costs associated with OpenAI API usage
• You control your OpenAI data retention settings in your OpenAI account

4.2 User-Configured Webhooks

What Data is Shared:

If you configure webhooks, the Extension sends the following data to your specified webhook URLs:

• Transcribed text
• Optional metadata (timestamp, webpage URL where recording occurred)
• Any additional data you configure to be sent

Webhook Data Control:

• You control which webhook URLs receive data
• You are responsible for the privacy and security of webhook endpoints you configure
• We do not control, operate, or have access to your webhook destinations
• The privacy practices of webhook services are governed by their respective privacy policies

5. Data Storage and Security

5.1 Local Storage Security

Encryption:

• All data is stored using Chrome’s chrome.storage.sync API
• Chrome encrypts this data using industry-standard encryption
• Data is protected by your Chrome profile and operating system security

Access Control:

• Only you can access data stored by the Extension
• Data is tied to your Chrome profile
• Other Chrome extensions cannot access zwitcha’s stored data
• Websites cannot access zwitcha’s stored data

5.2 Data Transmission Security

HTTPS Encryption:

• All communications with OpenAI’s API use HTTPS encryption
• Webhook transmissions use HTTPS (if you configure HTTPS URLs)
• No data is transmitted in plain text

No Third-Party Tracking:

• We do not use analytics services (Google Analytics, Mixpanel, etc.)
• We do not use advertising networks or tracking pixels
• We do not share data with data brokers or aggregators

6. Data Retention and Deletion

6.1 How Long We Keep Data

Audio Recordings:

• Temporarily held in browser memory during recording
• Immediately sent to OpenAI for transcription
• Deleted from memory after transcription completes
• Never saved to disk or uploaded to our servers

Configuration Data:

• Stored locally until you delete it or uninstall the Extension
• Persists in Chrome storage until explicitly removed

6.2 How to Delete Your Data

Delete Configuration Data:

1. Open Extension settings
2. Clear API key, prompts, webhooks, and shortcuts
3. Click “Save” to confirm deletion

Delete All Extension Data:

1. Uninstall the Extension from Chrome
2. All locally stored data is immediately deleted

Delete OpenAI Data:

• Contact OpenAI directly to request deletion of your API usage data
• Manage your OpenAI account data retention settings at platform.openai.com

7. Your Rights and Choices

7.1 Rights You Have

You have the following rights regarding your data:

Right to Access:

• View all data stored by the Extension in Extension settings
• All data is visible and accessible to you at any time

Right to Delete:

• Delete API keys, prompts, webhooks, shortcuts at any time
• Uninstall Extension to delete all data immediately

Right to Export:

• Export your prompts and webhooks using the Export feature in settings
• Save exported data as JSON file for backup or transfer

7.2 Choices You Control

What You Can Control:

• Whether to enable/disable the Extension
• Which websites you use the Extension on
• Whether to enable Chrome sync for Extension data
• Which custom prompts to create and enable
• Which webhooks to configure and when to trigger them
• Which text shortcuts to create
• When to record audio (Extension only works when you activate it)

8. Children’s Privacy

The Extension is not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

Age Restrictions:

• United States: Must be 13 years or older
• European Union: Must be 16 years or older (or age of digital consent in your country)
• Other jurisdictions: Must meet local age requirements

9. International Users and Data Transfers

9.1 Where Your Data Goes

OpenAI Processing:

• When you use the Extension, audio and text data is sent to OpenAI
• OpenAI operates globally and may process data in various countries
• OpenAI’s data transfer practices are governed by their Privacy Policy
• OpenAI complies with applicable data protection regulations

Local Storage:

• Configuration data stays on your device
• If you enable Chrome sync, Google syncs data across your devices globally
• Chrome sync is governed by Google’s Privacy Policy

10. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional terms apply:

10.1 Legal Basis for Processing

We process your data based on:

• Consent: You provide explicit consent by using the Extension
• Contract Performance: Processing is necessary to provide the Service
• Legitimate Interests: Improving and maintaining the Extension

10.2 Your GDPR Rights

You have the right to:

• Right of Access: Request information about data processing
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data (“right to be forgotten”)
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to data processing
• Right to Withdraw Consent: Withdraw consent at any time

To Exercise Your Rights:

• For Extension data: Use Extension settings or uninstall
• For OpenAI data: Contact OpenAI directly
• For questions: Contact us at info@neorebels.com

10.3 Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have violated GDPR.

11. CCPA/CPRA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:

11.1 Your CCPA Rights

You have the right to:

• Right to Know: Request information about data we collect
• Right to Delete: Request deletion of your data
• Right to Opt-Out: We don’t sell data, so opt-out not applicable
• Right to Non-Discrimination: We won’t discriminate for exercising your rights

11.2 How to Exercise Your Rights

To exercise your CCPA rights:

• Email: info@neorebels.com
• Include: “CCPA Request” in subject line
• Specify: Which right you’re exercising
• Response Time: We will respond within 45 days

12. Changes to This Privacy Policy

12.1 Updates

We may update this Privacy Policy from time to time. Changes will be effective when posted with an updated “Last Updated” date.

Notification of Changes:

• Material changes will be communicated via update notification in the Extension
• Notice on our website (if applicable)
• Email (if we have it)

Your Continued Use:

• Continued use of the Extension after changes constitutes acceptance
• If you disagree with changes, please discontinue use and uninstall the Extension

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

21. Acceptance of This Policy

By installing and using the zwitcha Speech-to-Text Chrome Extension, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with this Privacy Policy, you must not use the Extension.