Privacy Policy

How Web Memo collects, uses, retains, and shares your data.

Effective date
August 19, 2026
Last updated
August 19, 2026

Summary

  • We store only the notes and highlights you explicitly save, along with the address and title of the page they came from.
  • The content of a web page is sent to OpenAI only when you actively run an AI feature.
  • The extension does not collect or store your general browsing history.
  • We never sell your data and never use it for advertising.

1. Scope

This policy applies to the Web Memo Chrome extension, the Web Memo iOS app, and the website at https://web-memos.vercel.app, referred to together as the "Service".

By using the Service you agree to the data practices described here. If you do not agree, you may stop using the Service and remove the extension at any time.

2. Data we collect

Web Memo collects the categories of data listed below. For each category we state exactly when it is collected and what it contains.

a. Account information

Collected when you sign in with your Google account, and used for authentication and syncing your data across devices.

  • Email address
  • Name and profile image
  • A unique user identifier issued by the Service
  • Nickname and note-sharing preference, if you set them

b. Content you save

Collected only at the moment you press save or create a highlight. We do not collect information about pages you did not save.

  • Note text, impressions, and action items you type
  • The URL, page title, and favicon address of the page you saved a note or highlight from
  • The highlighted sentence plus the surrounding text and position values needed to restore the highlight later
  • Highlight color and any note attached to a highlight
  • Category names and colors you create, and starred / reading / wishlist flags

c. Web page content (only when you use an AI feature)

Only when you actively run AI summarization, AI question answering, or automatic category suggestion, the text of the page you are viewing is sent through our server to OpenAI. This data is processed solely to generate a response and is not separately stored in our database.

  • The body text and title of the page you are currently viewing
  • The questions you type and the conversation history in the AI chat feature
  • Note titles and bodies sent for automatic category classification

d. Usage data

Collected through Google Analytics to understand how features are used and to improve the Service.

  • Names of feature events and their parameters
  • Pages visited, page titles, and time spent
  • Browser type and version, operating system, device type, and approximate region
  • IP address (processed under Google Analytics policy, and also used to rate-limit API requests)
  • A unique user identifier used to associate events with your account

e. Diagnostic data

Collected through Sentry to identify and fix errors. This includes session replay, which records how you interact with the Service screen.

  • Error messages, stack traces, and the screen path where the error occurred
  • Browser, operating system, device details, and performance measurements
  • Session replay: a record of clicks, inputs, and navigation within the Service (approximately 10% of all sessions, and 100% of sessions where an error occurs)
  • A unique user identifier and email address used to associate errors with your account

f. Support and feedback data

Collected only when you submit feedback or answer the uninstall survey yourself.

  • The feedback text you write
  • An email address you optionally provide so we can reply
  • A record of visiting the uninstall page and the removal reason you select

g. Data stored only on your device

The following is kept in your browser storage and is never transmitted to us.

  • Your preferences such as language, theme, and side panel visibility
  • Authentication tokens that keep you signed in
  • Login cookies for the Web Memo domain (web-memos.vercel.app), read solely to carry your website sign-in into the extension. We never access cookies belonging to any other website.

3. Data we do not collect

Web Memo does not collect any of the following.

  • Your password. Sign-in is handled entirely by Google, and we never store passwords.
  • Payment information such as credit card numbers. The Service is free and processes no payments.
  • The content of pages where you neither saved a note or highlight nor ran an AI feature.
  • Your general browsing history or search history.
  • Government identification numbers, health information, political opinions, or other sensitive categories of data.

4. How we use your data

We use collected data only for the purposes below, and delete it once those purposes are fulfilled.

  • Authenticating you and syncing notes and highlights across your devices
  • Letting you view, search, organize, and restore the notes and highlights you saved
  • Providing AI summarization, AI question answering, and automatic category suggestion
  • Diagnosing errors and improving the stability of the Service
  • Analyzing feature usage in order to improve the Service
  • Responding to your inquiries and sending service announcements
  • Preventing abnormal use and API abuse

5. Extension permissions and why we need them

The Web Memo Chrome extension requests the following permissions for the stated reasons.

PermissionWhy it is needed
storageSaves your sign-in state and preferences such as language and theme in your browser.
tabsReads the address and title of the current tab so they can be attached to the note you are saving.
sidePanelDisplays the note-taking interface in the browser's side panel.
contextMenusAdds right-click menu actions for highlighting selected text or saving it as a note.
cookiesReads authentication cookies for the Web Memo domain (web-memos.vercel.app) only, so that your website sign-in carries over to the extension. Cookies belonging to any other website are never accessed.
Access to all sites (<all_urls>)Required so you can save notes and display or restore highlights on any website. Page content is read only at the moment you save it or actively run an AI feature; we never automatically collect or transmit the pages you visit.

6. Third parties we share data with

We engage the service providers listed below to operate the Service. We do not share user data with any third party outside this list.

Beyond this list, data may be disclosed only in response to a lawful request from authorities under applicable law, or where you have given separate consent.

RecipientPurposeData sharedPrivacy policy
Supabase, Inc.Authentication and database hostingAccount information, saved notes, highlights, categories, and feedback contentPrivacy policy
OpenAI, L.L.C.AI summarization, AI question answering, and automatic category suggestionBody text and title of the page where you ran an AI feature, AI conversation content, and note content sent for classificationPrivacy policy
Google LLC (Google Sign-In)Authenticating you through your Google accountEmail address, name, and profile imagePrivacy policy
Google LLC (Google Analytics)Analyzing how the Service is usedFeature events, page paths, browser and device information, IP address, and a unique user identifierPrivacy policy
Functional Software, Inc. (Sentry)Error diagnostics and stability improvementsError logs and stack traces, browser and device information, session replay recordings, and a unique user identifier and email addressPrivacy policy
Vercel Inc.Website and API server hostingRequest IP address, request headers, and other access logsPrivacy policy
Upstash, Inc.Rate limiting and abuse prevention for AI featuresRequester IP address and request countsPrivacy policy

7. Limited use of data

Web Memo's use of user data complies with the Limited Use requirements of the Chrome Web Store User Data Policy. Specifically, we affirm the following.

  • We do not sell user data.
  • We do not use or transfer user data for any advertising purpose, including personalized advertising.
  • We do not use user data for creditworthiness or lending purposes, and we do not transfer it to data brokers.
  • We do not use user data for any purpose other than providing the features described in this policy.
  • No human, including the operator, reads user data. The only exceptions are where you have given explicit consent, where it is necessary for security purposes, where it is required to comply with applicable law, or where the data has been aggregated and anonymized so that no individual can be identified.

8. Retention and deletion

Retention periods differ by data category, as follows.

  • Notes, highlights, and categories you saved: retained until you delete them yourself or request account deletion.
  • Account information: retained while your account exists, and deleted together with related data when you request account deletion.
  • Page content and conversations sent to AI features: not stored in our database after the response is generated. Retention on OpenAI's side is governed by OpenAI's own policy.
  • Usage data (Google Analytics): automatically deleted no later than 14 months after collection.
  • Diagnostic data and session replays (Sentry): automatically deleted no later than 90 days after collection.
  • Support and feedback data: deleted once the inquiry is resolved and the service improvement purpose is fulfilled.
  • Where applicable law requires retention, data is stored separately for the required period and then destroyed.

9. Your rights and how to exercise them

You have the following rights regarding your data and may exercise them at any time.

For the notes and highlights you saved, you can view, edit, and delete them directly inside the Service. To delete your account and all associated data, contact us using the details below; we will complete the request and reply within 30 days.

  • Request access to, and a copy of, the data we hold about you
  • Correct inaccurate data
  • Delete individual notes and highlights (available directly in the Service)
  • Request deletion of your account and all associated data
  • Stop all collection by removing the extension
  • Opt out of Google Analytics by installing the browser opt-out add-on or removing the extension

10. Data security

We apply the following measures to protect your data.

  • All data in transit is encrypted with HTTPS/TLS.
  • Row Level Security is enforced in the database so that you can access only your own data.
  • Authentication is handled exclusively through Google OAuth, and we store no passwords.
  • API requests are rate-limited to block abnormal access and abuse.

11. International transfers

Some of the service providers we use operate servers outside the Republic of Korea. As a result, your data may be transferred to, stored in, and processed in the United States and other countries. The destination country, the categories of data transferred, and the purpose for each provider are described in that provider's privacy policy, linked in the third-party table above.

12. Children's privacy

Web Memo is not directed to children under 14, and we do not knowingly collect personal data from children under 14. If we learn that such data has been collected, we delete it without delay. If you are a parent or guardian and believe this has occurred, please contact us using the details below.

13. Changes to this policy

If this policy changes, we will post the revised version on this page and update the last-updated date. For changes that materially affect your rights, such as adding a new category of collected data or changing the purpose of processing, we will provide notice in the Service or by email at least 7 days before the change takes effect.

14. Contact

For questions about this policy, or to request access to or deletion of your data, please contact us.

Data protection officer: Kuesung Park

Email: gueit214@naver.com

We respond to requests within 30 days.