Privacy Policy

1. Introduction

Welcome to Zwoofi ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at zwoofi.com.

Zwoofi is an Authentic content generation SaaS platform that helps you create personalized social media content using your voice profile. We operate as a sole proprietorship and use third-party services to provide our platform.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our service:

• Account Information: Name, email address, and authentication credentials (managed by Clerk)
• Voice Profile Data: Your identity, background, expertise, projects, story, focus areas, learnings, and tools you use
• Payment Information: Billing details processed securely by Polar.sh (our Merchant of Record) and Stripe
• Generated Content: AI-generated content recommendations and any edits you make
• Preferences: Favorite content templates and customization settings

2.2 Automatically Collected Information

When you use Zwoofi, we automatically collect:

• Usage Data: Number of content recommendations generated, features used, generation timestamps
• Analytics: Device information, browser type, IP address, and usage patterns (via PostHog and Google Analytics)
• Cookies: See our Cookie Policy for details

3. How We Use Your Information

We use your information to:

• Provide and maintain the Zwoofi service
• Generate personalized AI content based on your voice profile
• Process payments and manage subscriptions
• Send service updates, billing notifications, and support messages
• Improve our service through analytics and user feedback
• Enforce our terms and prevent fraud or abuse
• Comply with legal obligations

4. Third-Party Services

We share your information with trusted third-party service providers who help us operate Zwoofi:

5. International Data Transfers

Our services are hosted in the United States. If you access Zwoofi from outside the U.S., your information will be transferred to, stored, and processed in the United States and potentially other countries where our service providers operate.

For EU users, we comply with applicable data protection laws including GDPR. Polar.sh adheres to the EU-U.S. Privacy Shield Framework for payment data transfers.

6. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide you services
• Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we must retain certain data for legal compliance (e.g., tax records, payment history).

7. Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU Users)

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your data (right to be forgotten)
• Portability: Receive your data in a machine-readable format
• Object: Object to certain data processing activities
• Restrict: Request restriction of data processing
• Withdraw Consent: Withdraw consent at any time

CCPA Rights (California Users)

• Know what personal information is collected, used, shared, or sold
• Request deletion of personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

To exercise your rights, contact us at: [email protected]

8. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication via Clerk
• Regular security assessments
• Access controls and monitoring
• PCI-compliant payment processing via Polar.sh/Stripe

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Zwoofi is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Browser Extension (Zwoofi Bookmark)

If you use our Chrome browser extension ("Zwoofi Bookmark"), the following additional data practices apply:

10.1 Data Collected by the Extension

• Content Data: Text, image URLs, and creator handles from social media posts you choose to save (Twitter/X, Instagram, TikTok, YouTube, LinkedIn, Facebook, Threads)
• Tags & Notes: Any tags or notes you add when saving content
• Screenshots: Page screenshots captured only when you explicitly select the screenshot option

10.2 How Extension Data Is Used

• All collected data is sent to Zwoofi servers over HTTPS and stored in your personal Zwoofi account
• Data is used solely to provide the bookmarking and AI analysis features you initiate
• We do not share extension-collected data with third parties
• No analytics, tracking scripts, or advertising SDKs are included in the extension

10.3 Remote Configuration

The extension fetches CSS selector configuration data (not executable code) from a GitHub Gist to ensure compatibility with social media platform UI changes. This data contains only CSS selectors used to identify content elements on supported platforms.

10.4 Authentication & Storage

• Authentication tokens are stored locally in your browser using Chrome's storage API
• Tokens are used to authenticate API requests to the Zwoofi backend
• You can disconnect and clear all stored data at any time via the extension popup

10.5 Gemini Integration

When you use the "Analyze with Gemini" feature, the extension injects your saved image and a prompt into the Google Gemini interface on your behalf. This interaction occurs within your own Gemini session and is subject to Google's privacy policy.

10.6 Data Deletion

You can delete any saved content from your Zwoofi library at any time. Disconnecting the extension removes all locally stored authentication data. Account deletion removes all associated extension data from our servers.

11. Android App (Zwoofi Bookmark)

If you use our Android app ("Zwoofi Bookmark"), the following additional data practices apply:

11.1 Data Collected by the App

• Shared Content: URLs, text, and images you share from other apps to Zwoofi
• Creator Information: Creator handles and profile URLs automatically extracted from shared content
• Tags & Notes: Any tags or notes you add when saving bookmarks
• Images: Photos you select for upload, stored via secure presigned URLs

11.2 How App Data Is Used

• All data is sent to Zwoofi servers over HTTPS and stored in your personal account
• Images are uploaded to secure cloud storage (S3) via presigned URLs
• No analytics, tracking scripts, or advertising SDKs are included in the app
• We do not share app-collected data with third parties

11.3 Authentication & Local Storage

• Authentication uses browser-based OAuth via Clerk
• Tokens are stored locally using Android's encrypted DataStore
• App backup is disabled to prevent token leakage
• You can sign out at any time to clear all local data

11.4 Account & Data Deletion

You can delete saved content from your Zwoofi library at any time. To delete your account and all associated data, visit your account settings at zwoofi.com/settings/account or contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of Zwoofi after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: