Privacy Policy
Last updated · FlagMyChat
Who we are
FlagMyChat (“we”) operates this website. Contact: support@flagmychat.com. This policy is written to meet the EU and UK GDPR, the California Consumer Privacy Act (CCPA) and similar privacy laws.
What we process and why
| Data | Stored? | Purpose and rule |
|---|---|---|
| WhatsApp .zip file | No | Opened in your browser only. It never leaves your device. |
| Chat text | No | Sent over HTTPS to be analyzed (50 newest messages for Free, the whole chat for Full). Held in server memory only during the analysis; never written to disk, databases or logs. |
| Analysis results | No | Returned to your browser and emailed to you as a PDF, then discarded. |
| Email address | Yes (send log) | To send your report. Kept in our email send log with date/time, plan, provider message ID and delivery status for 90 days. Used for marketing only if you opt in. |
| Payment record | Yes | Transaction ID, amount, currency, date and status, to prove purchases and handle refunds. Card and PayPal details stay with PayPal (PCI-DSS). |
| Daily-limit hash | 24 hours | A salted one-way hash of your email, IP address and a random browser ID, used only to enforce 1 free analysis per day. It cannot be turned back into the original values. |
| IP address (rate limiting) | Hashed, ≤ 1 day | A hashed IP counter to stop abuse. |
Legal bases
- Contract: analyzing your chat and delivering your report when you ask us to.
- Legitimate interests: fraud and abuse prevention (rate limits, daily-limit hash, CAPTCHA).
- Legal obligation: keeping payment records.
- Consent: marketing emails (optional, withdraw any time).
Your partner's messages
A chat contains messages from another person. You may only upload chats you are part of, and you use the report for your own personal reflection. We process your partner's messages only to produce your report, never store them, and never contact them.
Service providers
- AI analysis: Google (Gemini API, paid tier), under terms where inputs and outputs are not used to train or improve Google's models.
- Payments: PayPal.
- Email: Resend, which keeps message content only as long as delivery requires.
- Hosting and database: Vercel and Supabase.
- Ads (Free plan): Google Ad Manager, which may use cookies under its own policy.
- CAPTCHA: Cloudflare Turnstile.
Some providers process data in other countries; transfers are protected by their contractual safeguards, such as Standard Contractual Clauses.
Your rights
You can ask to access, correct or delete the personal data we hold (your email log entries and payment records, subject to legal retention), object to processing, or withdraw marketing consent. Email support@flagmychat.com. You may also complain to your local data protection authority.
Security
HTTPS (TLS 1.2+) everywhere, no chat text in URLs, analytics, error trackers or logs, database access restricted to our server, one-time analysis tokens and server-side payment verification.
Age
FlagMyChat is only for people aged 18 or older.
Changes
We will update the date above when this policy changes.
Free daily preview, or the full report for one small payment. Nothing is stored.
ANALYZE MY CHAT