Privacy Policy

Last updated: July 28, 2026

1. No Text Storage — Zero Retention Policy

ProsePilot operates on a zero-retention architecture:

• Text submitted for grammar checking is processed in real-time and immediately discarded from memory after the response is returned
• We do not store your text in databases, logs, caches, backups, or any other storage system
• We do not retain copies of uploaded documents — they are deleted from server memory within minutes of processing
• We do not log request bodies containing your text — our server logging is configured to exclude all user content
• After processing, your text exists only on your device — we have no way to access it again

2. No Data Selling, Sharing, or Third-Party Transfer

ProsePilot does not:

• Sell, rent, or trade your personal information or writing content to any third party
• Share your text, documents, or writing samples with advertisers, data brokers, analytics providers, or any other third parties
• Transfer your data to servers outside of our hosting infrastructure
• Use your text for targeted advertising, profiling, or marketing purposes
• Provide access to your data to any government agency unless legally compelled by a valid court order specific to identifiable user accounts

3. No AI Training on Your Content

ProsePilot does not use your text, documents, or writing samples to train, fine-tune, or improve any AI models — whether our own or those of third-party AI providers. Your writing is processed for grammar analysis only and is not retained beyond the real-time processing session.

4. What We Do Collect

ProsePilot collects only the minimum data necessary to provide the service:

• Account information: Email address and display name, collected solely for authentication via Clerk. We do not use this for marketing.
• Usage metadata: Aggregate counts of grammar checks performed, features used, and approximate character counts — never the content of your writing. This data is used solely for billing and service improvement.
• Voice profile (optional): Statistical analysis of writing style (sentence length averages, punctuation patterns, vocabulary ratios). These are numerical statistics derived from text you voluntarily submit. The original text is discarded after analysis. The profile can be deleted at any time.

5. How Grammar Checking Works

When you submit text for checking:

• Your text is sent over a TLS-encrypted connection to our server
• Our grammar engine analyzes the text in memory (RAM)
• Grammar suggestions are returned to your device
• Your text is immediately discarded from server memory after the response is sent
• No log entry is created containing your text
• No database record is created containing your text
• No backup or archive contains your text

6. Document Processing

When you upload a .docx file:

• The file is processed entirely in server memory (RAM)
• Processed results (grammar report, fixed document, tracked-changes document) are stored temporarily in memory for download — maximum 5 minutes
• After download or after 5 minutes (whichever comes first), all buffers are deleted from memory
• No documents are written to disk, uploaded to cloud storage, or retained in any form
• Download sessions use cryptographically random identifiers — not predictable or enumerable

7. Browser Extension

The ProsePilot browser extension:

• Checks text you select or type only when you explicitly trigger a check (by clicking the extension icon or a button)
• Does not continuously monitor, record, or transmit your browsing activity
• Does not read page content beyond the text you choose to check
• Stores grammar suggestions locally in your browser for up to 60 seconds — this data never leaves your device
• Does not collect telemetry, analytics, or usage data

8. Third-Party Services

ProsePilot uses the following third-party services:

• Clerk (Authentication): Handles user sign-up and sign-in. Clerk's privacy policy governs authentication data. We do not store passwords.
• Stripe (Payments): Processes payments. Stripe's privacy policy governs payment data. We do not store credit card numbers.
• DeepSeek (AI Processing): Text submitted for grammar checking may be processed by DeepSeek's API. DeepSeek's terms of service govern how they handle API inputs. We do not control DeepSeek's data retention policies for API inputs.

9. Data Security

• All data is transmitted over TLS-encrypted connections (HTTPS)
• Our API server is hosted on Railway's infrastructure with industry-standard security
• API endpoints are rate-limited to prevent abuse
• We do not store sensitive data that could be compromised in a breach — because we do not store user text at all

10. Your Rights

You have the right to:

• Access: Request a copy of any personal data we hold about you (account information and usage metadata only — we hold no writing content)
• Deletion: Request deletion of your account and all associated data at any time
• Voice Profile Deletion: Delete your voice profile at any time from the app settings
• Data Portability: Export your usage data in a machine-readable format
• Opt-Out: Use the service without creating an account (extension-only usage)

11. Children's Privacy

ProsePilot is not directed to children under 13. We do not knowingly collect data from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be posted on this page with an updated date. We will not reduce your rights under this policy without your explicit consent.

13. Contact

For questions about this privacy policy or to exercise your data rights, contact us at privacy@prosepilot.io.

14. Governing Law

This privacy policy is governed by the laws of the State of Texas, United States, without regard to conflict of law principles.