Privacy Policy

1. Introduction

GrammarDesk ("we," "us," "our," or "Company") takes your privacy seriously. This Privacy Policy describes what data we collect, why we collect it, and how we handle it when you use GrammarDesk — our AI-powered grammar checking and writing enhancement browser extension and platform (the "Service"). By using GrammarDesk, you agree to the practices described in this document.

2. Information We Collect

To provide accurate writing suggestions and a personalized experience, GrammarDesk may collect the following categories of information:

• Account Data: Email address, display name, and subscription details you provide when registering
• Writing Content: Text you submit for grammar checking or style suggestions, processed in real time and not stored permanently
• Device & Browser Info: Browser type, version, and operating system used to access the Service
• Usage Analytics: Feature interactions, correction acceptance rates, and session duration to improve our AI models
• Cookies & Local Storage: Lightweight identifiers used to maintain your session and remember preferences

3. Use of Your Information

GrammarDesk uses collected data strictly to deliver and improve the Service. Specifically, we use your information to:

• Power real-time grammar, spelling, and style suggestions via our AI engine
• Personalise correction preferences and writing goals based on your history
• Process subscription payments and send receipts or billing notices
• Send important service updates, security alerts, and product announcements
• Detect and prevent abuse, fraud, or violations of our Terms of Service
• Continuously train and refine our language models using anonymised, aggregated writing patterns

4. Disclosure of Your Information

GrammarDesk does not sell or rent your personal data to third parties. We may share information only in the following limited circumstances: with trusted infrastructure providers (such as cloud hosting and payment processors) operating under strict data processing agreements; when required by law or in response to a valid legal request; or to protect the rights, property, or safety of GrammarDesk and its users. Any third-party partners we work with are contractually prohibited from using your data for their own purposes.

5. Security of Your Information

We protect your data using industry-standard security practices, including TLS encryption in transit, AES-256 encryption at rest, and regular independent security audits. Access to personal data is restricted to authorised personnel only and governed by least-privilege principles. While we invest heavily in safeguarding your information, no system can guarantee absolute security. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorised access to your account.

6. Data Retention

GrammarDesk retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. Account data is kept for the duration of your active subscription plus 90 days after account deletion, unless a longer retention period is required by law. Writing content submitted for real-time analysis is processed ephemerally and is not retained on our servers beyond the immediate processing cycle. Anonymised, aggregated usage statistics may be retained indefinitely to improve our AI models.

7. Your Rights

Depending on your region, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Restriction: Request that we limit how we process your data in certain circumstances

You can manage most preferences directly from your GrammarDesk account settings. For formal data requests, contact us at privacy@grammardesk.net. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. GrammarDesk does not sell personal information. To exercise your California rights, please contact us at privacy@grammardesk.net with the subject line "CCPA Request."

9. Children's Privacy

GrammarDesk is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@grammardesk.net. We will promptly delete such information from our records upon verification.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email or a prominent notice within the GrammarDesk extension at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how GrammarDesk handles your data, please reach out to us:

Email: privacy@grammardesk.net
Address: GrammarDesk, Privacy & Compliance Team