Effective October 29, 2026
Controller & scope
Data we collect
We process account details (name, email, settings), text content you submit for suggestions, usage and diagnostic events, payment references and subscription status supplied by Stripe, and cookie preferences. Stripe handles card information; we do not store complete card numbers. Do not submit sensitive text unless authorized.
AI processing & training
By default, your text is NOT used to train our models (opt-in available in Settings). The Settings opt-in applies to future cloud accounts; this beta has no training enabled. The beta editor uses local pattern checks, not remote AI models. The planned cloud service will use proprietary + third-party AI models to analyze submitted text and return suggestions with separate disclosure before activation. Text is sent only as needed for the requested operation. Model providers act under processing terms restricting use to the service. Team Privacy mode processes text without retaining it or using it for training; account and billing metadata remain subject to retention rules. You may withdraw training opt-in in Settings; withdrawal applies to future processing.
Storage & security
Cloud service safeguards must include TLS encryption in transit, encryption at rest, restricted access, and least-privilege controls. US and EU regional storage choices are planned for the cloud service; they are not available in this local beta; regional storage does not rule out disclosed international processing. The beta editor analyzes text locally in your browser; text is not uploaded. The contact form opens your email app. Beta access records (email, time, plan, billing, seats, amount) are stored in this browser under lt_orders. Requested newsletter emails and signup times are stored under lt_newsletter. These local records remain until cleared through the local dashboard or browser settings; other users of this browser can inspect them. The admin gate uses sessionStorage and is not a secure account system. Google Fonts receives connection information such as your IP address when fonts are requested.
Lawful bases
Contract covers accounts, text analysis, and subscription delivery. Legal obligations cover required tax and billing records. Legitimate interests cover proportionate security and fraud prevention, balanced against your rights. Consent covers optional analytics, marketing, and training opt-in; you may withdraw it without affecting prior lawful processing.
Who receives data
We share necessary data with Stripe (payments), Cloudflare (hosting), contracted AI model providers (suggestions), and an email service provider (transactional messages). We do not sell personal data. Cloud subprocessors, locations, and retention limits will be disclosed before cloud processing is enabled. Authorities receive data only where legally required.
International transfers
Where data leaves the EEA or UK, we use an applicable adequacy decision or Standard Contractual Clauses (SCCs), with transfer assessments and supplementary safeguards where needed. Contact us to request information about these safeguards. These contractual and technical measures must be executed before cloud processing.
Retention & deletion
Account data and saved text are retained during your account’s life unless you delete text sooner. Email a deletion request to ; after verification we delete account and text data within 30 days, including instructions to processors. Legally required billing records and narrowly scoped security records may be retained for the applicable statutory period with restricted access. Canceled accounts have a 30-day text export period. Privacy mode text is not stored.
Your rights
Subject to applicable law, you may request: (1) access, (2) rectification, (3) erasure, (4) restriction, (5) portability, (6) objection, and (7) withdrawal of consent. We normally respond within one month after verifying identity; lawful extensions will be explained. You may complain to your local data protection authority (DPA) and challenge decisions affecting your rights. We do not use text analysis to make solely automated decisions with legal or similarly significant effects.
Children
The service is for people aged 13 and older. Where local law requires a higher age or parental authorization, those requirements apply. Contact us to remove data submitted by an ineligible child.
Cookies & policy changes
Read our Cookie policy and use Cookie settings in the footer to revise optional consent. We give at least 14 days’ email notice of material privacy changes. Additional consent is requested where required.