Privacy policy

Last updated: 14 October 2026

In short: your chat file stays on your device. We receive only masked statistics and a masked excerpt, use them only to write your report, never train AI on them, erase the excerpt once your report is written, and delete everything after 14 days — or right away when you click “Delete now”.

1. What happens on your device

When you choose a file, your browser reads it locally. Before anything is sent, it replaces participant names with the display names you choose (first names by default), masks phone numbers, email addresses, links, street addresses, long numbers (such as card numbers) and @handles, and computes statistics (message counts, reply times, emojis and similar). Photos, voice notes and attachments are never read or sent.

2. What we receive and store

• Statistics about the chat (counts, times, top words and emojis per display name).
• A masked excerpt of up to about 60,000 characters, encrypted at rest. It is erased as soon as your full report is written; for free previews it is deleted with the report.
• Your report (the AI-written text) and your settings (tone, language).
• Payment status from Stripe (no card details — Stripe handles cards).
• A short one-way hash of your IP address for abuse limits. We do not use advertising cookies.

No account is created. Your report is reachable only through its private link, which contains a secret key; we store only a hash of that key.

3. AI provider

Reports are written by Anthropic's Claude models, accessed through OpenRouter with data collection by providers disabled. The masked statistics and excerpt are sent only to generate your report. Neither we nor they use your data to train models.

4. Other processors

• Vercel (hosting) · Supabase (database, encrypted storage) · Stripe (payments, receipts).

5. Retention and deletion

Everything about a report is deleted automatically 14 days after it was created. You can delete it earlier with “Delete now” on the report page. Payment records (amount, date, Stripe ids — no chat content) are kept as required for accounting.

6. Other people in your chat

Only upload chats you are part of. Masking protects contact details, and you can rename anyone before sending. If you appear in someone's report and want it removed, contact us with the report link.

7. Children

ChatWrapped is not for anyone under 13. Reports are refused when the AI detects that participants appear to be children.

8. Your rights

You can access (open the link), delete (Delete now) or ask questions about your data at any time. Contact: privacy@chatwrapped.me.