AI Summarizer privacy policy

AI Summarizer · Last updated:

This Privacy policy explains how Lucas Genesses Dias Bittencourt (trade name Lucas Bittencourt), a sole proprietorship registered in Brazil under CNPJ 42.564.890/0001-04, processes personal data in the AI Summarizer extension for Google Chrome and in the server it uses, under the Brazilian General Data Protection Law (Law No. 13,709/2018, "LGPD").

This is a translation. In case of any difference, the Portuguese version prevails. The lucasbittencourt.dev website has a Privacy policy of its own; this one covers only the extension.

1. Controller and data protection officer

The data controller is Lucas Genesses Dias Bittencourt (CNPJ 42.564.890/0001-04), who also acts as the data protection officer. Contact:

2. What the extension does

AI Summarizer uses artificial intelligence to summarize the content you choose: part of a page, the whole page or a PDF. Summaries are kept in your history, can be translated into other languages and are paid for with credits.

The extension only reads a page when you ask, by clicking "Select content", "Use the whole page" or "Read PDF". It doesn't read or send anything from the pages you just visit.

3. Data we process

Account

To use the extension, you sign in with your Google account. From Google we receive only your name, email, profile picture and account identifier, which we use to create and identify your account, your credit balance and your history. We have no access to your Gmail, your Drive or any other data in your Google account.

Signing in creates a session on the server. The extension keeps the session code in your browser; the server keeps only an encrypted version of it (a hash).

Content you choose to summarize

When you ask for a summary, we send the server:

  • the chosen text (the selected part, the page's text or the text extracted from the PDF);
  • the page's title and address (URL);
  • the summary's options: model, style, length, effort, language and any preferences you write.

This content is sent to work out the price (the quote) and to make the summary, which is generated by an artificial intelligence provider (see section 6). The page's text isn't stored by the server. For a PDF, the file is read in your browser and only the extracted text is sent.

Summaries, translations and history

We keep what the extension makes for you, so it stays in your history:

  • the summary (title, preview and text) and the translations you ask for;
  • the language, the options used, the model, the credits spent and how much text was processed (tokens);
  • the title, address and site of the source page, the type of content (page, selection, PDF or text file) and the date.

Credits

We keep your balance and the statement of movements: bonuses, summaries, translations, refunds and adjustments, with the amount, the balance after each one and the title of the related summary.

Data kept in your browser

The extension keeps in your browser's local storage the session (with name, email, picture and balance), the interface language, the theme and your last summary options. This data isn't sent to anyone, except the session code, which goes with each request to the server.

The page information shown on the start screen (title, description, word count and language) is worked out in your browser and isn't sent. The site's icon comes from Chrome's own cache, without any request to the site.

Technical logs

The server records technical data about requests, such as IP address, date and time and the address called, for security and operation.

What we don't collect

The extension doesn't collect your browsing history, the content of pages you didn't ask to summarize, form data or passwords, and doesn't use cookies, analytics or advertising tracking.

4. Extension permissions

  • activeTab and scripting: read the open tab, only when you click one of the reading actions.
  • Access to sites (optional): requested only if you click "Allow access", to read the page even after navigating. Even with this access, the extension only reads a page when you ask.
  • sidePanel: show the extension in the side panel.
  • storage: keep the session and preferences in your browser.
  • identity: open Google's sign-in window.
  • favicon: show the site's icon from Chrome's cache.
  • Access to the extension's server: send the summary, translation, history and credit requests.

The legal bases are those of article 7 of the LGPD:

  • Making summaries and translations, keeping the history, the account and the credits: performance of a contract.
  • Security and access logs: legitimate interest and compliance with a legal obligation.
  • Billing and tax documents, when credits are purchased: compliance with a legal obligation and performance of a contract.

6. Sharing

We don't sell personal data, don't use it for advertising and don't pass it on to data brokers. Data is shared only with:

  • OpenAI: generates the summaries and translations from the content sent. The content is sent without being stored in OpenAI's history, and OpenAI's API terms don't use this data to train models.
  • Railway: hosting of the server and the database.
  • Google: sign-in with the Google account.
  • AbacatePay: payment processing, once credit purchases are available.
  • Public authorities: when required by law or court order.

7. Limited use

The use of information received by the extension follows the Chrome Web Store User Data Policy, including the Limited Use requirements: data is used only to provide and improve the extension's single purpose (summarizing the content you choose), isn't transferred for advertising or to determine creditworthiness, and isn't read by people, except with your consent, for security and abuse investigation, or when required by law.

8. International transfer

OpenAI, Railway and Google store or process data outside Brazil, mainly in the United States. These transfers follow article 33 of the LGPD, with providers that adopt security and data protection measures.

9. How long we keep data

  • Summaries and translations: until you delete them. Deleting a summary erases its text and that of its translations. Deleting a single translation erases only that one.
  • Credits and usage records (statement, credits spent, amount of text processed and dates): while the account exists, and then for the periods required by tax law.
  • Account: until you ask for it to be deleted.
  • Session: up to 30 days, or until you sign out.
  • Access logs: for the 6 months required by article 15 of the Brazilian Internet Civil Framework (Marco Civil da Internet).
  • Data in your browser: until you sign out or uninstall the extension.

After that, the data is deleted or anonymized.

10. Your rights

Under article 18 of the LGPD, you may ask for confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing and withdrawal of consent.

You can delete summaries and translations directly in the extension's history. To delete your account or exercise other rights, write to the email above. You can also revoke the extension's access to your Google account at myaccount.google.com/connections and file a complaint with the Brazilian Data Protection Authority (ANPD).

11. Security

All communication with the server is encrypted (HTTPS), sessions are stored encrypted (hashed) and access to data is restricted. Page content is treated as untrusted: it's never shown as code, and the AI provider is instructed to ignore commands in it. No system is completely immune to incidents; if a relevant incident occurs, the affected data subjects and the ANPD will be notified, as required by law.

12. Children and teenagers

The extension isn't intended for people under 18, and we don't knowingly collect data from children or teenagers.

13. Changes

This policy may be updated. The date of the last update is shown at the top of the page. See also the Terms of use and the website's Privacy policy.