Privacy Policy
Last updated: August 1, 2026
This policy explains what data TrasChat handles, what for, who it's shared with, and what you can do about it. It's written to be understood, not to hide things in fine print.
1. Who we are
Data controller: Felix Cabrita. Contact: traschats@gmail.com.
TrasChat is a browser extension that translates conversations inside WhatsApp Web in real time. It is not an official WhatsApp product and is not affiliated with, sponsored by, or endorsed by WhatsApp Inc. or Meta Platforms, Inc.
2. What data we collect
Your account data. When you sign up, you give us:
- Name (whatever you type in — we don't verify it's your real one).
- Email address, used as your account identifier and to communicate with you.
- Password, stored encrypted (hashed) with our authentication provider. We never see it and can't recover it — only reset it.
The content of your messages. To translate, the extension reads the text of the messages visible in the WhatsApp Web chat you have open and sends it to our AI translation provider. To be as clear as possible about this:
- The send is temporary and for a single purpose: translation. The text goes out, the translation comes back, and that's it.
- We don't store the content of your messages in our database. Not as plain text, not encrypted. The only thing recorded from each translation is usage metadata (see below).
- The extension only reads the chat you have open while you're actively using it. It doesn't crawl your chat list, doesn't extract your contact book, doesn't read conversations in the background, and doesn't send messages on your behalf.
- Voice notes are transcribed locally in your browser. The audio never leaves your computer. What can leave is the resulting transcript text, if you ask for it to be translated.
Usage data (consumption logs). For every translation, we store a record in our database with:
- Amount of credits consumed.
- Number of messages processed.
- Call type (chat, reply, single message).
- Target language.
- Estimated cost of the operation and timestamp.
This exists so we can bill you correctly, show you your usage, and detect abuse. It does not include the text you translated. We also apply an automatic filter that redacts emails and passwords before writing any log, in case they showed up in a diagnostic field.
Payment data. Payments are processed entirely through PayPal. We never see or store your card number, CVV, or PayPal credentials. On our end, we only store the transaction or subscription ID, the plan purchased, and the payment status, so we can credit your account and handle claims or refunds.
Technical data and analytics.
- On the website (traschat.com) we use Google Analytics to understand, in aggregate, how many people visit the site and from where. This involves cookies and an anonymous browser identifier. We don't use that data for advertising or link it to your identity inside the product.
- In the extension, we store configuration preferences (target language, panel settings) using the browser's local storage, plus an authenticated session to know it's you. That configuration lives on your device.
3. Who we share data with
We work with external providers that process data on our behalf:
| Provider | What it receives | What for |
|---|---|---|
| xAI (Grok API) | The text to translate | Generate the translation |
| Supabase | Account, session, and usage logs | Authentication and database |
| PayPal | Payment and billing data | Process charges and refunds |
| Cloudflare Workers | Technical connection data for the site | Host the website and backend |
| Google Analytics | Website browsing data | Aggregate analytics |
Beyond that:
- We don't sell your data. Ever. To anyone.
- We don't transfer it to third parties for advertising, commercial profiling, or credit scoring.
- We don't use the content of your messages to train our own AI models, and we don't authorize our translation provider to use it as training material either.
- We would only disclose information if required by a competent authority under a valid legal order, or if necessary to defend ourselves against proven fraud or abuse.
4. About the other people in the conversation
This needs to be said plainly: when you translate a chat, the text processed includes messages from the other person, who did not accept these terms and doesn't know you're using TrasChat.
- You're the one deciding which conversation to translate, so you're responsible for having the right or the necessary consent to do so under the laws of your country.
- We handle that content only as a technical intermediary, for as long as the translation takes, and we don't store it or link it to that person's identity.
- If you're in the European Union, the United Kingdom, or another jurisdiction with strict data-protection rules, keep in mind that this use may require a legal basis on your part with respect to third parties. We can't assess that for you.
5. How long we keep data
- Message content: not retained. Processed in transit and discarded.
- Account data: for as long as the account is active.
- Usage logs: up to 3 months, for support, billing disputes, and accounting obligations.
- Payment records: for as long as applicable tax and accounting regulations require.
- Local preferences: until you uninstall the extension or clear your browser data.
6. Your rights
You can ask us at any time for:
- Access to the data we hold about you.
- Correction of inaccurate data.
- Deletion of your account and associated data.
- Portability: a copy of your data in a readable format.
- Objection to or restriction of processing, in the cases the law allows.
Write to us at traschats@gmail.com from the email associated with your account, and we'll respond within 3 business days.
Keep in mind that deleting your account erases your credits and doesn't generate an automatic refund — that's governed by the Refund Policy.
7. Security
We use encrypted connections (HTTPS/TLS) for all communication between the extension, our backend, and providers. Passwords are stored hashed. Database access is restricted by row-level authorization rules, so each user can only read their own data.
That said, no system is infallible. If a breach affecting your data were to occur, we'll notify you by email as soon as possible along with what we know and what you should do.
8. Permissions the extension requests
| Permission | What we use it for |
|---|---|
| Access to web.whatsapp.com | Read the open chat and insert the translation panel. It's the only site where the extension activates. |
| storage | Save your preferences and session in your own browser. |
| Connection to our backend and the translation API | Validate your account, deduct credits, and fetch translations. |
The extension doesn't access other tabs, your browsing history, or files on your device.
9. Children
TrasChat is not directed at children under 13, and we don't knowingly collect data from them. If you believe a minor created an account, write to us and we'll delete it.
10. International transfers
We operate from Venezuela and our providers have servers in the United States and other countries. By using TrasChat, you accept that your data may be processed outside your country of residence, with the security measures described above.
11. Changes to this policy
We may update this policy. If the change is significant, we'll notify you by email or within the dashboard before it takes effect, and we'll update the date at the top. Continuing to use TrasChat after that means you accept it.
12. Contact
Privacy questions, data requests, or complaints: traschats@gmail.com
This policy is governed by the laws of the Bolivarian Republic of Venezuela, without prejudice to any rights your country's data-protection regulations mandatorily grant you.