Google sign-in gives us your name and email, nothing else. The extension only reads a page when you save it. We don't sell your data, don't run ad trackers, and don't train third-party models on your library.
1. What we collect
Your name, email address, profile picture, and Google account ID: the basic profile scope, received when you sign in.
The items you save: URLs, page titles, the text we extract for search, your highlights, notes, tags, and folders.
Browser and operating system, app version, feature events, and error reports. Used to fix bugs and decide what to build.
Plan, billing country, and invoice history. Card details go to our payment processor; we never see or store them.
2. What the extension can see
The Zippet extension reads page content only when you actively save a page or trigger a highlight. It does not run in the background on every tab, does not log your browsing history, and does not read pages you never save.
Signing in with Google grants only the basic profile scope. Zippet cannot read your Gmail, Drive, Calendar, or contacts, and cannot post anything on your behalf.
3. Why we use it
- ·To run the service: store your library, sync it across devices, and make it searchable.
- ·To generate summaries and tags for the items you save.
- ·To provide support, handle billing, and send essential account emails.
- ·To keep the service secure and prevent abuse.
4. What we never do
We don't sell or rent your personal data. We don't embed advertising or third-party tracking pixels in the app or the extension. We don't use your saved content to train third-party AI models, and we don't share it with other users unless you explicitly share a folder.
6. How long we keep it
Library data is kept while your account is open. Deleted items sit in trash for 30 days, then are removed. Deleting your account removes your library and profile within 30 days, and from encrypted backups within 90 days. We retain invoices for as long as tax law requires.
7. Security
Data is encrypted in transit with TLS and at rest. Internal access is role-based, logged, and limited to staff who need it for support or operations. If a breach affects your data, we'll notify you and the relevant regulator without undue delay.
8. Your rights and controls
You can export your entire library, correct your profile, turn off automatic summaries, opt out of product analytics, and delete your account, all from account settings. Depending on where you live, you may also have rights to access, restrict, or object to processing, and to lodge a complaint with your data protection authority.
9. Children
Zippet isn't intended for children under 13. If we learn we've collected data from a child under 13, we delete it.
10. International transfers
Zippet is operated from the United States and data may be processed there and in the EU. Where we transfer personal data out of the EEA or UK, we rely on Standard Contractual Clauses and equivalent safeguards.
11. Changes to this policy
We'll post updates here and change the date at the top. For material changes affecting how we use your data, we'll email account holders at least 14 days in advance.
12. Contact
Privacy questions or requests: privacy@getzippet.com. We answer within 30 days.