This Privacy Policy explains what personal information Starizon collects, how we use it, who receives it, and the choices you have. Starizon is built to keep your work in your browser. When a request passes through our servers, we forward it to the service that handles it and do not store it.
Our Data Policy describes the same practices feature by feature, for example what happens to a page when you ask about it or to a file you add to a chat.
1. Who we are
Starizon Ltd is the controller of the personal information described in this policy. We are a company registered in the United Kingdom.
- Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
- ICO registration number: ZB839395
- Email: support@starizon.ai
2. What this policy covers
This policy covers the Starizon website (starizon.ai), the Starizon browser extension, your Starizon account, and purchases you make from us (together, the "Services").
It does not cover the websites you visit, or services you choose to use through Starizon, such as an AI provider you connect with your own API key, apps you connect, MCP servers, custom search services, or notification servers. Their own terms and privacy policies apply.
3. Our main commitments
- Our servers do not store your request content. When a feature uses our servers, they forward your prompt, page content, files and results to the service that handles them. They do not keep a copy and do not log them.
- What you save stays in your browser. Your Knowledge Base, Spaces, chat history, replays, schedules, monitors and settings are stored by the extension on your device. We do not keep a server-side copy that we can restore for you. Relevant parts may be sent when a request needs them.
- Your data is not used to train AI models. We do not train models on it. The models included with Starizon run with zero data retention, so their providers do not train on your requests and do not keep them.
- We do not sell your personal information or use it for advertising.
4. Information we collect
4.1 Account information
When you sign in, we receive your email address and an account identifier. If you sign in with Google or another provider, we receive the profile details that provider shares, such as your name and profile picture. We keep your plan, your credit balance and your Stripe customer ID with your account.
Some features work without signing in. Anonymous use has the same limits and the same privacy practices as the Free plan, and our servers do not store your request content.
4.2 Purchase records
Payments are processed by Stripe. We do not receive your full card number. We keep a record of each purchase and refund: Stripe customer and payment identifiers, the product, amount, currency, date, and refund or dispute status.
4.3 Content you send for a task
To answer a request, Starizon sends the information that request needs: your prompt, and any page content, screenshots, files, bookmarks or saved material involved. Where it goes depends on the feature and the model you use, as described in Sections 6 and 7. When it passes through our servers, it is forwarded and not stored.
4.4 Credit usage
To keep your balance accurate, we count the credits each request uses and update your balance. We do not keep a log of individual requests.
4.5 Information stored only in your browser
The extension stores your Knowledge Base, Spaces, chat history, replays, schedules, monitors and their snapshots, settings, and any API keys you add in your browser's local storage. Our servers do not keep copies of this local data. Parts of it are included in a request only when that request needs them.
4.6 Referral program
If you sign up through a referral link, we record the referral code you used and link your account to the account that invited you, so that rewards can be granted. A cookie remembers the referral code until you sign up.
4.7 Messages you send us
If you email us or use our contact form, we receive your email address and what you write. Contact form messages are stored in our account database so we can reply.
4.8 Website analytics
With your consent, our website uses Google Analytics 4 to understand how visitors use it, for example which pages are viewed, the type of device and browser, and an approximate location derived from your IP address. Analytics cookies are set only after you accept them. The browser extension does not use Google Analytics.
4.9 Technical information
Our servers do not log your requests. Our hosting and network providers may keep short-lived technical logs, such as IP addresses and request times, to run and secure their infrastructure.
5. How we use information
If you are in the United Kingdom or the European Economic Area, we rely on the legal bases shown for each use.
- Providing the Services, including your account, plan limits, credits, purchases and the referral program. Legal basis: performance of our contract with you.
- Keeping purchase and refund records for tax and accounting. Legal basis: legal obligation.
- Protecting the Services against fraud, abuse and security threats. Legal basis: our legitimate interest in keeping the Services safe.
- Replying to your messages and sending service emails, such as receipts and notices about changes to these terms. Legal basis: contract and our legitimate interests.
- Website analytics. Legal basis: your consent, which you can withdraw at any time.
- Product news by email, where the law allows it. Every such email has an unsubscribe link.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
6. AI models
- Models included with Starizon. Your request goes from the extension to our servers, then through Vercel AI Gateway to the provider that runs the model you selected, such as OpenAI, Anthropic or Google. These requests use zero data retention: the provider does not use them for training and does not keep them after responding.
- Your own API key. Requests go directly from your browser to the provider or endpoint you set up, under your own account with them. Your key is stored only in your browser and is not sent to us. The provider's terms and privacy policy apply.
- No support access to your content. We do not have a process for collecting your conversations or page content for support or troubleshooting.
7. Who receives information
7.1 Service providers
We use these providers to run the Services. They process data on our behalf and only for the purpose listed.
- Supabase: account database and sign-in, hosted in the United States (us-west-1).
- Stripe: payments, subscriptions and refunds.
- Vercel AI Gateway, and the model providers it routes to: answering requests that use included models, with zero data retention.
- Parallel: web search and deep research.
- Composio: connecting apps such as Gmail, Google Sheets and Notion. Composio stores the access tokens for the apps you connect, encrypted with AES-256-GCM using keys held in AWS KMS, and is SOC 2 Type II attested.
- Soniox: turning speech into text for voice input.
- Resend: delivering emails, including email alerts you set up.
- Google Analytics: website analytics, only with your consent.
- Cloud hosting providers: running our website and servers.
Except where this policy states a commitment, such as zero data retention for included models, each provider keeps data under its own policies.
7.2 Services you choose
Some features send data to services you pick yourself: an AI provider or custom endpoint you connect with your own key, a custom search service, the apps you connect, MCP servers, the ntfy server you use for phone alerts, and webhook addresses. You decide when to use them, and their own terms and privacy policies apply. We are not responsible for how they handle data.
7.3 Other cases
- Legal requirements. We may disclose information when the law requires it, or to protect the rights and safety of our users, the public or Starizon.
- Business transfers. If Starizon is involved in a merger, acquisition or sale of assets, information may transfer to the new owner, who must continue to protect it as this policy describes.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
8. The browser extension
The extension asks Chrome for access to websites so it can read the pages involved in a request and act on pages when you give it a task. It reads pages when you make a request, or when a schedule or monitor you created runs. It does not collect your browsing history.
Bookmark access is optional and requested only when you use a bookmark feature. Starizon searches bookmark titles, addresses, folders and saved dates in your browser. When you ask, it can add bookmarks, create folders and move existing bookmarks to a folder you choose. It does not rename or delete existing bookmarks.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use the data the extension handles only to provide its features. We do not transfer it except as this policy describes, do not use it for advertising or to assess creditworthiness, and do not allow people to read it unless you ask us to, it is needed for security, or the law requires it.
9. How long we keep information
- Request content: not stored on our servers.
- Data in your browser: until you delete it in the extension, clear the extension's data, or uninstall the extension.
- Account information: while your account is open. When you ask us to delete your account, we delete it within one month of confirming the request.
- Purchase and refund records: six years, for tax and accounting. These are kept even if you delete your account.
- Referral records: kept with the accounts involved and deleted with them.
- Messages you send us: as long as needed to handle your request and keep a record of it.
- Website analytics: according to our Google Analytics retention settings.
10. International transfers
We are based in the United Kingdom. Our account database and most of our service providers are in the United States. When personal information is transferred out of the United Kingdom or the European Economic Area, we rely on safeguards recognised under UK and EU law, such as the standard contractual clauses and the UK International Data Transfer Addendum included in our providers' data processing terms.
11. Your rights and choices
11.1 United Kingdom and European Economic Area
You can ask to access, correct or delete your personal information, to restrict or object to how we use it, and to receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.
11.2 California and other US states
You can ask to know what personal information we hold about you, and to access, correct or delete it. We do not sell or share personal information as these laws define those terms. We will not treat you differently for using your rights.
11.3 How to make a request
Email support@starizon.ai. We may need to confirm your identity first. We reply within one month, and we will tell you if a complex request needs more time.
11.4 Deleting your data
- Your account. The extension does not yet offer account deletion. Email support@starizon.ai from the address on your account to ask us to delete it.
- Data in your browser. Delete saved items one at a time or in batches in the extension. To remove everything, uninstall the extension or clear its data in your browser settings. There is no single button for this in the extension yet. Uninstalling does not delete your account.
- Analytics cookies. Change your choice at any time using Cookie settings in our website footer.
- Product emails. Use the unsubscribe link in any of them.
12. Cookies
- Necessary cookies keep you signed in, protect your account and remember your preferences on our website.
- Referral cookie remembers a referral code from the link you opened until you sign up.
- Analytics cookies from Google Analytics 4 are set only if you accept them.
We do not use advertising cookies. The extension keeps its own data in your browser's storage and does not use it to track you across websites.
13. Security
Data sent between your browser, our servers and our providers is encrypted in transit. Access to our account database is restricted, and app access tokens held by Composio are encrypted at rest. API keys you add stay in your browser. No system is completely secure, so please keep your devices and accounts protected.
14. Children
Starizon is not for children under 13. If you are under 18, you need permission from a parent or guardian to use it. Where local law requires parental consent up to a higher age, such as 16 in some EU countries, users below that age need consent from a parent or guardian. If we learn that we hold personal information about a child under 13, we will delete it. If you believe this has happened, please contact us.
15. Changes to this policy
When we update this policy, we change the date at the top of this page. If a change is significant, we will also tell you by email or with a notice on our website or in the extension.
16. Contact us
Starizon Ltd
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Email: support@starizon.ai
Website: https://starizon.ai