Privacy Policy
Last updated: May 2026 · We keep this short and honest.
What data do we collect?
For free tier users, nothing. Your chat file is parsed entirely in your browser; the raw text never leaves your device. For premium AI tiers, we send a small representative sample (~2,000 messages out of your full chat) to our AI processing server over an encrypted HTTPS connection. This sample is used once to generate your insights and is immediately discarded after processing. We never store your raw conversations.
What gets stored?
We store the structured results of your wrapped (statistics and AI-generated insights), not your actual messages. This data is associated with a random share slug and optionally an IP hash (one-way, irreversible) for rate limiting. Free tier results expire after 24 hours. Premium tier results are stored permanently to support your share link.
Do you share my data with third parties?
For premium tiers, a redacted sample of your chat is sent to either Google Gemini (Premium) or Anthropic Claude (Premium+) for AI analysis. Before we send anything, we strip real names (replaced with "Person A" / "Person B"), phone numbers, email addresses, and URLs — so the AI providers only ever see anonymized text. These providers process the redacted sample under their own privacy policies. We do not sell your data to any third party, ever.
Payments
Payments are processed by Stripe. We never see or store your payment card details. Stripe's privacy policy governs payment data handling.
Analytics
We use Vercel Analytics to collect anonymised, aggregated usage statistics (page views, feature usage). Vercel Analytics is privacy-first — it does not fingerprint users, does not build cross-site profiles, and does not set persistent tracking cookies. Analytics is only active if you have accepted cookies (EU/EEA/UK/Switzerland users are asked for consent; others are opted in by default under Vercel's privacy-first model).
Cookies & local storage
Strictly necessary: we set a session cookie (sb-*) via Supabase to keep you logged in. This cannot be disabled without breaking authentication. Analytics cookies: Vercel Analytics may set a short-lived beacon — only active with your consent if you are in the EU/EEA, UK, or Switzerland. Local storage: we temporarily store your wrapped data in browser local storage (key: wc_pending, 1-hour TTL) so your results survive a payment redirect. This is strictly necessary for the checkout flow and does not require consent. Your consent preference is also stored locally (key: cw_consent).
Your rights
If you signed in to save a wrap, head to your My Wraps page (linked from the top-right menu) and tap the delete icon on any wrap to remove it permanently — no email required. Premium tiers are tied to a Supabase Auth account, so the email you used to sign in is stored. If you appear as a participant in someone else's wrap and want it taken down, email us and we'll act on the request. EU, EEA, UK, and Switzerland residents additionally have the right to access, correct, or delete personal data and to withdraw analytics consent at any time (contact us or clear your browser's local storage).
Contact
Questions about this policy? Reach us at privacy@convoswrapped.com.
TL;DR
Free tier: your messages never leave your device. Premium: only an anonymized sample (names + numbers + emails redacted) is sent to AI, then deleted. Self-serve delete on My Wraps. We don't sell data. Ever.