Privacy Policy

Last updated: October 17, 2026

1. Controller

The controller responsible for processing personal data in connection with Lingera (web app at app.lingera.ai, website lingera.ai and the “Lingera” Chrome extension) is:

Ataraxia Partners LLC
30 N Gould St
Sheridan, WY 82801
USA
Email: [email protected]

We have not appointed a data protection officer. For any privacy questions, you can reach us at [email protected].

2. Summary

By default, the Chrome extension stores your conversations only locally in your browser. Nothing leaves your device unless you turn on cloud sync yourself.
If you use the web app or cloud sync, your data is stored with our service providers in the United States (see sections 6 and 7).
Conversation content is sent to an AI service only when you trigger an AI feature yourself (see section 5).
We do not sell your data and do not use it for advertising.
Google Analytics runs in the web app only with your consent.

3. Chrome extension: local first

The extension captures a conversation only when you explicitly click the save button, never automatically in the background. Supported platforms are ChatGPT, Claude, Grok, Gemini, Perplexity and DeepSeek.

Default: local only. Captured conversations are stored in your browser’s IndexedDB. This data stays on your device only; we have no access to it.
Optional: cloud sync. Only if you choose the storage mode “Local + Cloud” or “Cloud only” in the extension and enter a personal API key from your Lingera account are conversations transmitted via HTTPS to your Lingera account and stored there (see section 6).
Images and links: On some platforms (e.g. images in Claude conversations), captured images are stored in our file storage when cloud sync is on (AWS, see section 7).
Technical error reports: If the extension detects a capture problem while saving to the cloud (for example because a platform changed its layout), it sends an error report along with the conversation. The report contains the platform, the extension version, counts (number of messages per role), short error codes and a structural outline of the page without any conversation text (HTML element names and a few technical attributes). The report is linked to your account. Purpose: keeping capture working.
Permissions: activeTab (reading the active tab only after your click), storage (local settings such as language, storage mode, API key) and access to the supported AI platforms and to app.lingera.ai. No permissions for browsing history, bookmarks or downloads.

You delete data that is stored only locally yourself, by deleting it in the extension or removing the extension. Deleting your Lingera account does not remove this local data.

4. What data we process, for what purpose and on what legal basis

Data	Purpose	Legal basis (GDPR)
Account: email address, name (optional), password as a bcrypt hash; with Google sign-in, name, email, profile picture and Google account identifier	Creating your account and signing in	Art. 6(1)(b) (contract)
Conversations, messages, titles, tags, highlights, summaries, Insights reports, stored images	Saving, searching, organising and exporting your conversations	Art. 6(1)(b)
API keys for the extension	Connecting the extension to your account	Art. 6(1)(b)
Usage logs (which AI feature was used when, quotas)	Quota accounting, abuse prevention	Art. 6(1)(b) and (f)
Technical error reports from the extension (see section 3)	Keeping capture reliable	Art. 6(1)(f) (legitimate interest in a working service)
Feedback you send us; waitlist requests (email, note)	Handling your request	Art. 6(1)(b) or (f)
Subscription data: Stripe customer and subscription IDs, subscription status, trial period	Managing the Premium subscription	Art. 6(1)(b); retention of billing records: Art. 6(1)(c)
Technical connection data (IP address, time, browser) when you visit the website and app	Delivering and securing the service	Art. 6(1)(f)
Usage statistics via Google Analytics in the web app	Audience measurement	Art. 6(1)(a) (consent); Art. 5(3) ePrivacy Directive
Transactional emails (e.g. password reset, reminder before the trial ends, account notices)	Communication about the contract	Art. 6(1)(b)

We never receive or store credit card numbers; those are handled by Stripe only.

5. AI features: when content goes to third parties

When you trigger one of the following features, the content it needs is sent for processing:

Insights (common thread, open questions, ideas across your conversations)
Summary of a conversation
Compare several conversations
Prompt optimizer
Semantic search (AI-assisted search): your search query plus the titles, tags, dates and excerpts of the first messages of the searched conversations are sent.

How the data flows: Lingera sends the content to Abacus.AI (Abacus.AI, Inc., USA). Abacus.AI forwards it to OpenAI (OpenAI, L.L.C., USA); the model used is gpt-4.1-mini. The result comes back the same way and is stored in your account (e.g. as a summary or Insights report).

Use for training:

Abacus.AI states in its privacy policy that it does not use customer data (including prompts and API data) to train or improve AI models, and that it has zero-data-retention agreements with model providers that exclude training on customer data.
Under its API terms, OpenAI does not use data submitted via the API to train its models by default.

Whether and for how long Abacus.AI and OpenAI technically retain requests (e.g. in logs) is governed by these providers’ terms.

If you do not use any AI feature, your conversation content is not sent to any AI service. We ourselves do not use your conversations to train AI models, for advertising or for profiling.

6. Cloud storage and security

The web app and database are operated by Abacus.AI; files (e.g. stored images) are kept at Amazon Web Services in region us-west-2 (USA).
Data is transmitted encrypted via HTTPS. Abacus.AI states that it encrypts data at rest with AES-256.
Lingera itself does not add any further encryption (end-to-end or application-level).
Passwords are stored only as bcrypt hashes.
Images in file storage are not public; they are served only after we check that you own them, through a time-limited link (1 hour).

7. Recipients and processors

Recipient	Purpose	Location
Abacus.AI, Inc.	Hosting the web app, database, sending emails, PDF export, routing AI requests	USA
OpenAI, L.L.C. (sub-processor of Abacus.AI)	Processing AI requests (gpt-4.1-mini)	USA
Amazon Web Services, Inc.	File storage for stored images	Region us-west-2 (Oregon, USA)
Google LLC / Google Ireland Ltd.	Sign in with Google (only if you choose this option)	USA / EU
Cloudflare, Inc.	Web app only (app.lingera.ai and the app’s other addresses at Abacus.AI): upstream network for delivery and protection, integrated through the hosting at Abacus.AI; processes IP addresses and technical connection data	USA / global network
Porkbun LLC	Hosting the website lingera.ai (not routed through Cloudflare); processes access data (IP address, time, page requested). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in delivering the website securely)	USA
Stripe (Stripe, Inc. or its affiliates)	Payment processing for the Premium subscription	USA / EU
Google Analytics (Google Ireland Ltd. / Google LLC)	Audience measurement in the web app and on the website lingera.ai (in both cases only with consent, see section 11)	EU / USA

We disclose data to other third parties only where we are legally required to do so.

8. Transfers to the United States

Lingera is operated in the United States, so your data is processed there. Without additional safeguards, the United States does not offer a level of data protection equivalent to EU law.

For transfers to our service providers, we rely on the safeguards these providers offer in their contractual terms, in particular the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

You can request more information about these safeguards at [email protected].

9. Retention

Account and conversations: your data is kept until you delete it (individual conversations or the whole account).
Inactive accounts: we intend to delete accounts in the future that have not been used for an extended period (24 months is planned). No such rule applies yet. Before introducing it, we will update this policy and notify affected users by email in advance.
Billing records at Stripe are kept for the statutory retention periods.
Technical error reports from the extension are deleted when you delete your account.
Server logs at Abacus.AI, Cloudflare and Porkbun are kept according to these providers’ policies.

10. Deleting your account and data

You can delete your account at any time:

In the app: Settings → “Delete account”. After a confirmation step, the following is deleted immediately: your account, all conversations, messages, highlights, summaries, Insights reports, API keys, usage logs, feedback, technical error reports and all stored images. Any active Premium subscription is cancelled at Stripe immediately.
By email: write to [email protected] from your account’s email address. We will delete your account within one month and confirm the deletion.

This does not cover data stored only locally in your Chrome extension (see section 3), or billing records that Stripe must keep by law. You can also delete individual conversations in the app at any time. Before deleting, you can export all conversations (Settings → Data; Premium).

11. Cookies and local storage

Session cookie (essential): required for signing in. The app does not work without it.
Consent record (essential): your choice in the cookie banner is saved in your browser’s local storage.
Google Analytics cookies (optional): only if you agree in the banner. You can withdraw consent at any time by clearing this site’s local storage or cookies in your browser; the app will then ask again.

The website lingera.ai also uses Google Analytics for audience measurement – only with your consent via the cookie banner. Your choice is stored in your browser’s local storage for 12 months; you can change or withdraw it at any time via “Cookie settings” in the website footer.

We do not use advertising cookies.

12. Your rights

Under the GDPR you have the right to:

Access the data we hold about you (Art. 15)
Rectification of inaccurate data (Art. 16)
Erasure (Art. 17), see section 10
Restriction of processing (Art. 18)
Data portability (Art. 20): export your conversations as JSON, Markdown or PDF in the app, or on request by email
Object to processing based on legitimate interests (Art. 21)
Withdraw consent at any time with effect for the future (Art. 7(3)), e.g. for Google Analytics
Lodge a complaint with a data protection supervisory authority (Art. 77), in particular in the EU member state where you live or work

To exercise your rights, simply email [email protected].

13. Children

Lingera is not intended for anyone under 16. We do not knowingly collect data from children.

14. Changes

We update this policy when the service or the law changes. We will inform you of material changes by email or in the app.

15. Contact

Ataraxia Partners LLC – Email: [email protected] – Website: https://lingera.ai