Privacy Policy
Effective Date: September 30, 2026 • Last Updated: October 2026
Thank you for choosing Resay (“Resay”, “we”, “our”, or “the Extension”), accessible via our web application at resay.si and our Chrome browser extension.
Our foundational privacy commitment is simple: we collect the absolute minimum information required to operate our service, and we never store, log, inspect, or sell your prompt text.
1. Our Core Commitment: Zero Prompt Storage
When you click the orange Resay button inside a supported interface:
- Your prompt text is transmitted via an encrypted HTTPS connection directly to our secure Edge Function.
- It is processed in-memory solely to generate the rewritten, high-clarity instruction.
- The rewritten output is streamed directly back to your active browser input and the text is immediately purged from active memory.
- No database row, log file, or cache ever stores the contents of your prompt.
2. Information Handled Locally on Your Device
The Extension uses your browser’s isolated local storage (chrome.storage.local) to ensure fast, responsive performance:
- Authentication Session: Encrypted JWT access and refresh tokens provided by Supabase Auth, keeping you signed in without repetitive logins.
- Cached Entitlements: Your current plan badge (Free or Pro) and daily credit counter, allowing the side panel to render instantly with zero loading delay.
This local data remains on your physical device. We cannot access your local browser storage directly.
3. Information We Collect and Store
When you create an account, we store only the essential operational metadata necessary for user accounts and credit enforcement:
- Account Profile: Your registered email address and unique internal user identifier (UUID).
- Daily Credit Counters: A numerical record of the number of optimizations used on the current UTC date (e.g.,
used_count: 2,date: 2026-10-14). This is required to enforce the free tier limit of 3 optimizations per day. - Subscription Metadata: For Pro subscribers, we record your Paddle Customer ID, Subscription ID, subscription status (e.g.,
active,canceled), and the current billing cycle end date. We never receive, handle, or store your credit card or payment card details. - Aggregated Metric Counters: Total token usage counts (e.g.,
prompt_tokens: 35,completion_tokens: 60) strictly for billing auditing and cost allocation, without associated text.
4. Chrome Extension Permissions Justification
In compliance with the Chrome Web Store Developer Program Policies, Resay only requests permissions strictly necessary to deliver its core functionality:
| Permission | Purpose / Justification |
|---|---|
| storage | Persists authentication session tokens and cached credit stats locally. |
| sidePanel | Opens the native Chrome docked side panel to display your account details and credits. |
| Host: Supported AI Sites (ChatGPT, Claude, Gemini, Grok, Perplexity, DeepSeek, Google AI Studio, Copilot) | Allows our content script to mount the circular orange button inside the composer toolbar and replace the text when you click optimize. Resay does not monitor pages outside these domains. |
| Host: *.supabase.co | Communicates with our backend to authenticate your account and process prompt rewrites via Edge Functions. |
5. Third-Party Service Providers
We partner with industry-standard infrastructure providers to deliver our service securely:
- OpenAI: Used for prompt re-engineering. Prompts are transmitted securely via their commercial API. Under OpenAI’s enterprise API terms, data sent through API endpoints is not used to train AI models.
- Paddle.com: Our authorized Merchant of Record. Paddle processes all payments, invoices, taxes, and refunds. When upgrading to Pro, you provide payment information directly to Paddle under their Privacy Policy.
- Supabase: Cloud database and authentication infrastructure hosted in secure data centers with encrypted storage and Row Level Security (RLS).
- Resend: Used strictly to deliver essential transactional emails (welcome confirmations, billing alerts, and cancellation notices). We do not send marketing spam.
6. Your Control & Data Deletion (GDPR & CCPA)
You maintain full ownership and control over your personal data:
- Uninstalling the Extension: Removes all locally stored tokens and cached state from your browser instantly.
- One-Click Permanent Account Deletion: You can permanently delete your account at any time directly from your Dashboard. This triggers an automated cascade that cancels any active Paddle subscription and purges your authentication profile, subscription records, and usage counters from our database.
7. Changes to This Privacy Policy
We may occasionally update this Privacy Policy to reflect platform enhancements or legal requirements. When updates occur, we will revise the “Last Updated” date at the top of this page. Continued use of Resay constitutes acceptance of the revised policy.
8. Contact Us
If you have questions or concerns regarding this Privacy Policy or your data, please contact us at: