1. Who controls your information
Verbia is the controller of account, product usage, and support information collected through Verbia. Contact us at henri@henriz.dev. Waffo acts as a separate controller for payment, billing, tax, fraud, refund, and chargeback information it processes as merchant of record.
2. Information we process
- Account information: your Supabase user ID, email address, sign-in provider, and, when supplied by Google, basic profile information such as your name or avatar.
- Generation content: the intent you type or dictate, output language and tone settings, and the relevant visible conversation or selected text you choose to include. Verbia also processes the generated draft.
- Usage and technical information: generation count, plan type, request identifier, timing, model route, approximate input size, error stage, browser or extension version, and security or reliability logs. Optional diagnostics are metadata-only and do not include page text, intent, or drafts.
- Subscription information: Waffo buyer identity linked to your Verbia user ID, product and subscription status, billing period, and related order identifiers. Verbia does not receive or store your full card number.
- Contact and feedback information: the category, uninstall reason, message, optional contact email, language, extension version, and limited browser information you choose to submit. We do not automatically attach your private messages or generation content to feedback.
3. When content is collected
Verbia reads and sends generation content only when you deliberately invoke a generation request. The extension may temporarily stage selected context in browser session storage so you can review or use it in the reply panel. Generated drafts remain available in the interface for your review. Verbia never clicks “send” or publishes a message on your behalf.
4. How we use information
We use information to authenticate you; provide context-aware drafts; apply plan limits; activate and verify subscriptions; maintain security; diagnose failures and performance; answer support requests; prevent abuse and fraud; comply with law; and improve the reliability and usability of Verbia. We do not sell personal information or use your private generation content for targeted advertising.
5. Legal bases
Where data protection law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests in operating and securing Verbia, comply with legal obligations, and, where applicable, with your consent. You may withdraw consent for optional diagnostics in the extension settings without affecting earlier lawful processing.
6. Service providers and disclosures
We disclose only the information needed for each provider to perform its role:
- Supabase: authentication, account records, daily usage records, and feedback submissions.
- Cloudflare: website delivery, API hosting, security, and, when selected by our automatic routing, AI inference.
- AI model providers: Google Gemini, Mistral AI, and Groq may receive generation content when selected by our availability-balancing system. The active provider can vary by request.
- Waffo and its payment partners: checkout, subscription administration, tax, receipts, refunds, fraud prevention, and payment disputes.
We may also disclose information when required by law, to protect users or the service, or as part of a merger, financing, acquisition, or transfer of the service, subject to appropriate notice and safeguards.
7. Local browser storage
The extension stores preferences, authentication state, daily usage display data, and temporary per-tab context in browser-provided local or session storage. The website stores its own sign-in session and language preference in your browser. Removing the extension, signing out, or clearing browser storage may remove this local data.
8. Retention
Generation content is processed to return your draft and is not intentionally stored by Verbia as a conversation history. It may remain briefly in transient infrastructure or security logs operated by our service providers under their retention and abuse-monitoring controls. Account and subscription-linking information is kept while your account is active and for a reasonable period afterward when needed for security, disputes, or legal obligations. Daily quota records and operational logs are kept only as long as reasonably necessary for usage enforcement, debugging, security, and abuse prevention. Feedback submissions and their pseudonymous abuse-prevention identifiers may be kept for up to 24 months, then deleted or anonymized unless a longer period is needed to resolve a request or meet a legal obligation. Waffo keeps transaction records under its own policy and legal duties.
9. Security and international transfers
We use reasonable technical and organizational safeguards, including encrypted transport, authenticated API access, restricted credentials, and payment processing through Waffo. No internet service is completely secure. Verbia and its providers operate internationally, so information may be processed outside your country. Where required, transfers rely on contractual safeguards or another lawful transfer mechanism.
10. Your choices and rights
You can preview or remove context before generation, edit or discard every draft, disable optional diagnostics, sign out, and cancel a subscription. Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection, or withdraw consent. Email henri@henriz.dev from your account email. We may verify your identity and may retain information where law, fraud prevention, payment disputes, or security requires it. You may also complain to your local data protection authority.
11. Children
Verbia is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect personal information from children who cannot lawfully consent. Contact us if you believe a child has provided information improperly.
12. Payment privacy and external sites
Waffo collects payment and billing details directly at checkout under Waffo’s Privacy Policy. Websites where you use Verbia have their own privacy practices, and Verbia does not control them. Review their policies before submitting personal or confidential content.
13. Changes
We may update this policy as Verbia and applicable laws change. We will post the new effective date and provide additional notice when required. Material changes apply prospectively.