CutiaPrivacy policy
Who we are
This service is operated by [operator name]. For anything about privacy, write to contact@example.com.
What we collect
Account: your email, name and language, given when you sign up (or coming from Google sign-in, if you use it). Your password is stored only as an irreversible hash, never as text.
Items you save, when you use a plan with sync: title, text, page address, tags and dates.
Usage: how many AI messages you used this month, to apply your plan's quota.
Connectors: if you connect an app, we store the authorized access, encrypted, and a record of the actions taken (the action name and summarized data, never the contents of messages).
Payment: processed by Stripe. We never receive or store your card number.
What we do not collect
We do not record your browsing history. The extension only reads a page when you ask for an action.
Copy history is optional, stays only on your computer and ignores password fields and card numbers.
This site uses no cookies and no analytics tools.
What we use it for
To provide the service you asked for: summarize, save, search, sync and run actions with your approval.
To bill the subscription, prevent abuse and keep things secure.
We do not sell data and we do not use it for advertising.
Who we share it with
AI provider (Anthropic or OpenRouter): receives the text needed to produce the answer, only when you use cloud AI. With Chrome's AI, nothing is sent.
Embeddings provider (Voyage AI): receives the text of saved items for search by meaning, only on plans with that feature.
Stripe: payments. Google: sign-in and, if you connect them, Gmail and Calendar. Hosting: the server where the service runs.
These providers handle data under their own terms and only for the purpose described.
Where data lives and for how long
Data is kept on servers of our hosting provider. We keep your data while the account exists; when you delete it, we erase the account, synced items, connections and keys.
Backups are kept for up to 30 days and then discarded.
Your rights
At any time, in the panel, you can download your data (JSON or CSV) and delete your account.
Under the GDPR (Europe), the LGPD (Brazil) and the CCPA (California) you can also request access, correction, portability and deletion, and object to processing. Write to contact@example.com.
If you believe your rights were not respected, you may complain to your country's data protection authority.
Children
The service is not directed to people under 16.
Security
We use encrypted connections, short-lived access, tokens and keys stored encrypted, and we log what the AI does on your behalf. No system is completely immune; we will notify you and the authorities in case of an incident, as the law requires.
Changes
If this policy changes in a meaningful way, we will tell you in the panel or by email before it takes effect.