Privacy Policy

Effective Date: July 6, 2026

This Privacy Policy describes how the Zyva browser extension ("we", "our", or "Zyva") collects, uses, and shares information when you use our extension.

            TL;DR / Summary: Zyva is a stateless extension. We do not sell, track, or aggregate your data. The text drafts and email thread contexts you highlight are processed solely to run audits and generate revised copies, and are sent securely to your designated backend Vercel service. Your configurations (settings) are saved locally on your device.
        

1. Information We Collect and Process

To perform critiques and communication audits, Zyva temporarily accesses the following data in direct response to your trigger actions:

Highlighted Text / Drafts: When you select text and click the trigger button, Zyva captures that text so it can be audited by the AI council.
Page Context (URL & Title): The extension infers the communication platform you are on (e.g. Gmail, LinkedIn, Slack) to adapt the review perspective.
Thread Context: On supported pages (like Gmail, Slack, and LinkedIn), the scraper extracts recent surrounding messages in the active thread to provide context to the advisory council.

2. Data Storage and Transmission

Local Storage: Your configuration settings (User Profile Context and Backend URL) are stored locally on your device using Chrome's native storage API. They are never transmitted to us or any third parties.
API Transmission: When you click "Audit Communication" or "Act On It," the highlighted draft and thread context are securely transmitted over HTTPS to your designated Decidr backend endpoint (which you configure in the extension settings). This endpoint proxies requests securely to the LLM (Gemini) API.
No Logging: Zyva does not log, store, or monitor your communication history on any server. Once the browser session or side panel is closed, the temporary selection state is deleted.

3. Third-Party Services

Processing requests are fulfilled using Google's Gemini models through your designated Decidr API endpoint. Data processed by the API is subject to the data privacy and security terms of the provider and your hosting platform (Vercel).

4. Chrome Web Store User Data Policy Compliance

In accordance with the Google Chrome Web Store User Data Policy, we declare that:

We do not sell user data to third parties.
We do not use or transfer user data for purposes unrelated to the extension's core functionality (auditing and re-drafting text).
We do not use user data to determine creditworthiness or for lending purposes.

5. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in a new version of the extension manifest or updated on this page.

6. Contact Us

If you have any questions or concerns regarding your privacy while using the Zyva browser extension, please contact us through our official project repository.