Privacy Policy — WarmChat

Overview

WarmChat is a Chrome extension and web dashboard that backs up your AI conversations and builds a portable personal profile. This policy explains what data we collect when you use WarmChat, how that data is stored and protected, what we never do with it, and the rights you have over it.

We built WarmChat on the principle that your conversations belong to you — not to us, not to any AI platform.

What we collect

When you use WarmChat, the following data is collected and stored on your behalf:

Conversation content — the text of your messages and AI responses from Claude, ChatGPT, and Gemini
Conversation metadata — conversation ID, session ID, platform name (Claude / ChatGPT / Gemini), page URL, and message timestamp
Conversation title — derived from the first message or platform-assigned title
Account identity — your email address and a unique userId, obtained when you sign in via Google or Microsoft
Usage data — message counts and timestamps used to manage your archive

We do not collect payment information, device identifiers, browser history outside of the supported AI platforms, or any data from websites other than claude.ai, chatgpt.com, and gemini.google.com.

How it's stored

All conversation data is stored in your personal account on infrastructure we control:

Azure Cosmos DB — your conversations and profile data are stored in a managed, cloud-hosted database. Data is scoped to your userId and is not shared across accounts.
Azure Static Web Apps — the WarmChat dashboard is hosted on Azure Static Web Apps. Authentication is handled via Azure's built-in identity platform (supporting Google and Microsoft sign-in).
Azure Functions — a serverless API layer handles communication between the Chrome extension and your Cosmos DB storage. The API uses function-level key authentication.

All data in transit is encrypted over HTTPS/TLS. Data at rest is encrypted by Azure's default storage encryption.

What we never do

We never sell your data. Your conversations and personal information are never sold, rented, or traded to any third party.

We never use your data to train AI. Your conversations are never used as training data for any AI model — ours or anyone else's.

We never share your conversations. Your conversation content is never disclosed to other users, third-party analytics services, or advertisers.

We never read your conversations manually. We do not review individual conversation content unless you explicitly contact us for support and share it yourself.

Authentication and cookies

WarmChat uses Azure Static Web Apps' built-in authentication. When you sign in with Google or Microsoft, Azure manages the authentication flow and issues a secure session cookie.

Session cookie — a short-lived encrypted cookie is set by Azure to maintain your logged-in state in the dashboard. It is not used for tracking or advertising.
No third-party trackers — WarmChat does not use Google Analytics, Facebook Pixel, or any other third-party tracking scripts.
Extension storage — the Chrome extension stores a small amount of state in your browser's local extension storage (message fingerprints for deduplication, session IDs). This data never leaves your browser except as part of the normal sync to your account.

Your rights

You have full control over the data WarmChat holds for you:

Access — you can view all your stored conversations at any time via the WarmChat dashboard
Export — you can export any conversation as plain text from the dashboard
Delete — you can delete individual conversations from the dashboard. A full account deletion option is available — contact us and we will permanently delete all data associated with your account within 30 days.
Correction — if you believe any stored data is inaccurate, contact us and we will correct or remove it

We do not currently operate in jurisdictions that require us to respond to formal data subject access requests under GDPR or CCPA, but we will honour reasonable requests in the spirit of those regulations.

Data retention

Your conversation data is retained for as long as your account is active. If you delete your account, all associated data is permanently deleted from our systems within 30 days.

We may retain anonymised, aggregated usage statistics (e.g. total message counts) that cannot be linked back to you or your conversations.

Changes to this policy

If we make material changes to this privacy policy, we will update the effective date at the top of this page. For significant changes, we will notify users by email where possible. Continued use of WarmChat after a policy update constitutes acceptance of the revised terms.

Contact

Questions, requests, or concerns about this policy or your data:

WarmChat

Email: support@warmchat.ai

Website: warmchat.ai