Privacy Policy
Last updated: 26 September 2026
This policy explains what Zypher AI (the Chrome extension, browser popup, website and backend, together the "Service") collects, why, and what happens to it. It's written in plain English on purpose. If anything is unclear, contact us before you install.
1. What we collect
| Data | Why we collect it | Where it's stored |
|---|---|---|
| Email address & password (hashed) | Creating and logging into your account | Supabase Auth |
| API key | Authenticating scan requests from the extension to our backend | Supabase (linked to your account) |
| Scan count / usage logs (timestamps only, not content) | Enforcing your plan's monthly scan limit and showing usage in the popup | Supabase |
| Email or message text you choose to scan | Sent to our backend, which forwards it to two AI models to produce a verdict | Processed in memory to return a result; not permanently stored by Zypher AI |
| Subscription & billing status (plan tier, active/cancelled) | Knowing whether you're on Free or Pro | Supabase (synced from Stripe via webhook) |
| Payment card details | Not collected by us at all | Handled entirely by Stripe (see their privacy policy) |
2. What we don't do
- We don't sell, rent, or trade your data to third parties.
- We don't use the content of your scans to train our models or anyone else's.
- We don't track your browsing activity outside the specific text you choose to scan.
- We don't use your data to determine creditworthiness, for lending, or for any purpose unrelated to running Zypher AI.
- We don't serve ads or share data with ad networks.
3. Who we share data with
To do its job, a scan request passes through a small number of processors, never more than needed to return a verdict:
- Two Hugging Face Spaces that we operate, which run the phishing-detection models on the text you submit.
- Supabase, our authentication and database provider, which stores account, API key, and usage data.
- Stripe, our payment processor, for anyone on the Pro plan. Stripe receives billing details directly and we never see full card numbers.
None of these parties may use your data for anything other than providing their part of the Service to us.
4. Your choices
- You can ask us to delete your account and associated data at any time by contacting us (below).
- You can stop using the Service and uninstall the extension at any point. This stops all further data collection immediately.
- You can downgrade from Pro to Free at any time; this doesn't delete existing usage history.
5. Changes to this policy
If what we collect or how we use it changes, we'll update this page and the "Last updated" date. Material changes, meaning anything that expands what we collect or who we share it with, will also be flagged in the extension itself rather than silently changed, in line with Chrome Web Store disclosure requirements.
6. Related documents
See our Terms of Use for the accuracy disclaimer, billing terms, and acceptable use policy.
7. Contact
Questions about this policy or your data: zaynasif59@gmail.com. Zypher AI is operated by Zain Asif (sole trader), UK.