Privacy Policy — chatview
Last updated: April 15, 2026
This Privacy Policy describes how chatview (operated by Corewake, contact: contact@corewake.com) collects, uses and protects the personal data of users of the service available at https://getchatview.com.
By using chatview, you agree to the practices described here.
1. Data we collect
1.1 Data you provide
- Account: email, name (optional) and profile image (optional).
- Conversation content: WhatsApp export files (.zip or .txt) including text, audio, images, videos and referenced documents.
- Editable metadata: custom title, tags, relationship type, editable summary.
1.2 Automatically collected data
- Technical: IP address, browser type, access timestamps (infrastructure logs).
- Cookies: session cookie (
__Secure-better-auth.session_token, HttpOnly, Secure, SameSite=Lax) to keep you authenticated.
- Local preferences: language (localStorage) and "you" author chosen per conversation (localStorage).
1.3 System-generated data
- AI analysis: audio transcriptions, image descriptions, summaries generated by Google Gemini from the content you uploaded.
- Usage metrics: tokens consumed, estimated cost, processing durations.
2. How we use your data
We use your data exclusively to:
- Authenticate you on the service (Better Auth via magic link, Google or GitHub OAuth).
- Process the WhatsApp exports you upload with the Google Gemini API to generate transcriptions, analyses and structured documents.
- Generate documents (summary, meeting notes, timeline, briefing) as you request.
- Bill Pro subscriptions via Stripe.
- Send transactional emails (email confirmation, access links) via AWS SES.
- Operate and maintain the infrastructure (logs, metrics, debugging).
We don't sell your data. We don't use your data for advertising. We don't train AI models with your content.
3. Legal bases (LGPD / GDPR)
- Consent — for upload and processing of conversation content.
- Contract performance — to create your account, provide the service and process payments.
- Legitimate interest — for operational security, abuse prevention and technical logs.
4. With whom we share your data
chatview shares data only with providers essential to the operation:
| Provider | Data shared | Purpose |
|---|
| Google Gemini API | Conversation content (text, audio, images, videos) | Process and generate analyses with multimodal AI |
| Cloudflare | All data (infra) | Hosting, storage (R2, D1), processing (Workers) |
| Stripe | Name, email, payment data | Process Pro subscriptions |
| AWS SES | Recipient email | Send transactional emails |
| Google / GitHub (optional) | Email, name, avatar | Social login (only if you use it) |
We don't share with advertisers, data brokers, social networks or marketing affiliates.
5. Storage and retention
- Infrastructure: Cloudflare (D1 for metadata, private R2 for auth-gated content, public R2 for avatars).
- Region: Global CDN (data automatically replicated by Cloudflare).
- Retention: your data is stored while your account exists. When you delete your account, all chats, media, generated documents and metadata are permanently erased in seconds (cascade on D1 + bulk delete on R2).
6. Your rights (LGPD / GDPR)
You have the right to:
- Access your data (available in the app itself, Metadata tab).
- Correct incorrect data (edit profile, title, tags, summary, email).
- Delete your account and all associated data (button "Delete my account" in the account menu, top-right corner).
- Export your data (button "Copy Markdown" / "Download .md" in generated documents).
- Withdraw consent at any time by deleting your account.
- Complain to the data protection authority (ANPD in Brazil, CNIL/ICO etc. in Europe).
To exercise any right, contact contact@corewake.com.
7. Security
- In transit: all communications use HTTPS/TLS.
- At rest: data in Cloudflare R2/D1 is stored in encrypted storage.
- Access: chat content lives in a private R2 bucket, accessible only via authenticated Worker with your session.
- Cookies: session uses
HttpOnly + Secure + SameSite=Lax to prevent theft via XSS/CSRF.
- Email change: 2-step flow via token sent to the new address (prevents account hijacking).
No system is 100% secure. We'll notify relevant breaches as required by law.
8. Cookies
| Cookie | Type | Purpose | Duration |
|---|
__Secure-better-auth.session_token | Essential | Keep your authenticated session | Until logout |
__Secure-better-auth.session_data | Essential | Session data cache | Until logout |
marks_digest_self_author:* | Preference (localStorage) | Remember which participant is "you" per conversation | Persistent |
marks_digest_locale | Preference (localStorage) | Interface language | Persistent |
We don't use tracking cookies, external analytics or advertising.
9. Minors
chatview is not intended for children under 13. By creating an account, you declare you are at least 13 years old. If we identify a minor's account, it will be removed.
10. International transfers
Since we use global providers (Cloudflare, Google, Stripe, AWS), your data may be processed on servers outside Brazil/EU. All providers have adequate safeguards per LGPD/GDPR.
11. Changes to this policy
We may update this policy. Significant changes will be notified in the app or by email. The date at the top indicates the current version.
12. Contact
Operator: Corewake
Email: contact@corewake.com
App: https://getchatview.com