Privacy Policy

Last updated: August 1, 2026

This policy explains what data TrasChat handles, what for, who it's shared with, and what you can do about it. It's written to be understood, not to hide things in fine print.

1. Who we are

Data controller: Felix Cabrita. Contact: traschats@gmail.com.

TrasChat is a browser extension that translates conversations inside WhatsApp Web in real time. It is not an official WhatsApp product and is not affiliated with, sponsored by, or endorsed by WhatsApp Inc. or Meta Platforms, Inc.


2. What data we collect

Your account data. When you sign up, you give us:

  • Name (whatever you type in — we don't verify it's your real one).
  • Email address, used as your account identifier and to communicate with you.
  • Password, stored encrypted (hashed) with our authentication provider. We never see it and can't recover it — only reset it.

The content of your messages. To translate, the extension reads the text of the messages visible in the WhatsApp Web chat you have open and sends it to our AI translation provider. To be as clear as possible about this:

  • The send is temporary and for a single purpose: translation. The text goes out, the translation comes back, and that's it.
  • We don't store the content of your messages in our database. Not as plain text, not encrypted. The only thing recorded from each translation is usage metadata (see below).
  • The extension only reads the chat you have open while you're actively using it. It doesn't crawl your chat list, doesn't extract your contact book, doesn't read conversations in the background, and doesn't send messages on your behalf.
  • Voice notes are transcribed locally in your browser. The audio never leaves your computer. What can leave is the resulting transcript text, if you ask for it to be translated.

Usage data (consumption logs). For every translation, we store a record in our database with:

  • Amount of credits consumed.
  • Number of messages processed.
  • Call type (chat, reply, single message).
  • Target language.
  • Estimated cost of the operation and timestamp.

This exists so we can bill you correctly, show you your usage, and detect abuse. It does not include the text you translated. We also apply an automatic filter that redacts emails and passwords before writing any log, in case they showed up in a diagnostic field.

Payment data. Payments are processed entirely through PayPal. We never see or store your card number, CVV, or PayPal credentials. On our end, we only store the transaction or subscription ID, the plan purchased, and the payment status, so we can credit your account and handle claims or refunds.

Technical data and analytics.

  • On the website (traschat.com) we use Google Analytics to understand, in aggregate, how many people visit the site and from where. This involves cookies and an anonymous browser identifier. We don't use that data for advertising or link it to your identity inside the product.
  • In the extension, we store configuration preferences (target language, panel settings) using the browser's local storage, plus an authenticated session to know it's you. That configuration lives on your device.

3. Who we share data with

We work with external providers that process data on our behalf:

ProviderWhat it receivesWhat for
xAI (Grok API)The text to translateGenerate the translation
SupabaseAccount, session, and usage logsAuthentication and database
PayPalPayment and billing dataProcess charges and refunds
Cloudflare WorkersTechnical connection data for the siteHost the website and backend
Google AnalyticsWebsite browsing dataAggregate analytics

Beyond that:

  • We don't sell your data. Ever. To anyone.
  • We don't transfer it to third parties for advertising, commercial profiling, or credit scoring.
  • We don't use the content of your messages to train our own AI models, and we don't authorize our translation provider to use it as training material either.
  • We would only disclose information if required by a competent authority under a valid legal order, or if necessary to defend ourselves against proven fraud or abuse.

4. About the other people in the conversation

This needs to be said plainly: when you translate a chat, the text processed includes messages from the other person, who did not accept these terms and doesn't know you're using TrasChat.

  • You're the one deciding which conversation to translate, so you're responsible for having the right or the necessary consent to do so under the laws of your country.
  • We handle that content only as a technical intermediary, for as long as the translation takes, and we don't store it or link it to that person's identity.
  • If you're in the European Union, the United Kingdom, or another jurisdiction with strict data-protection rules, keep in mind that this use may require a legal basis on your part with respect to third parties. We can't assess that for you.

5. How long we keep data

  • Message content: not retained. Processed in transit and discarded.
  • Account data: for as long as the account is active.
  • Usage logs: up to 3 months, for support, billing disputes, and accounting obligations.
  • Payment records: for as long as applicable tax and accounting regulations require.
  • Local preferences: until you uninstall the extension or clear your browser data.

6. Your rights

You can ask us at any time for:

  • Access to the data we hold about you.
  • Correction of inaccurate data.
  • Deletion of your account and associated data.
  • Portability: a copy of your data in a readable format.
  • Objection to or restriction of processing, in the cases the law allows.

Write to us at traschats@gmail.com from the email associated with your account, and we'll respond within 3 business days.

Keep in mind that deleting your account erases your credits and doesn't generate an automatic refund — that's governed by the Refund Policy.


7. Security

We use encrypted connections (HTTPS/TLS) for all communication between the extension, our backend, and providers. Passwords are stored hashed. Database access is restricted by row-level authorization rules, so each user can only read their own data.

That said, no system is infallible. If a breach affecting your data were to occur, we'll notify you by email as soon as possible along with what we know and what you should do.


8. Permissions the extension requests

PermissionWhat we use it for
Access to web.whatsapp.comRead the open chat and insert the translation panel. It's the only site where the extension activates.
storageSave your preferences and session in your own browser.
Connection to our backend and the translation APIValidate your account, deduct credits, and fetch translations.

The extension doesn't access other tabs, your browsing history, or files on your device.


9. Children

TrasChat is not directed at children under 13, and we don't knowingly collect data from them. If you believe a minor created an account, write to us and we'll delete it.


10. International transfers

We operate from Venezuela and our providers have servers in the United States and other countries. By using TrasChat, you accept that your data may be processed outside your country of residence, with the security measures described above.


11. Changes to this policy

We may update this policy. If the change is significant, we'll notify you by email or within the dashboard before it takes effect, and we'll update the date at the top. Continuing to use TrasChat after that means you accept it.


12. Contact

Privacy questions, data requests, or complaints: traschats@gmail.com

This policy is governed by the laws of the Bolivarian Republic of Venezuela, without prejudice to any rights your country's data-protection regulations mandatorily grant you.

Privacy Policy · TrasChat