DRAFT — placeholders in brackets must be completed and the text reviewed before publication.

Privacy Policy

Last updated: [DATE]

1. Who we are

Sentence Checker (the “Service”) is operated by [COMPANY LEGAL NAME, e.g. Foresty LTD], [REGISTERED ADDRESS], company number [COMPANY REGISTRATION NUMBER] (“we”). We are the data controller for the personal data described here. Contact: [CONTACT EMAIL].

2. What the Service does with your text

When you ask the extension or the website to check, restyle or translate text, that text is sent to our servers and then to our language-model provider, OpenAI, OpenAI, L.L.C. (United States), under its API terms, which exclude the use of API data for model training. We send only the text itself: no e-mail address, account identifier or IP address accompanies it to the provider.

By default we do not store the text you submit. If you are signed in, your checks are kept as your “history” for up to 90 days so you can reopen them; you can delete your history at any time in the extension or on the account page, and deleting your account removes it too.

AI chat is available to signed-in users. Your messages and the assistant’s replies are stored so the conversation can continue, and are deleted 30 days after the last message; you can delete them sooner from the account page. To let the provider detect abuse of its models, chat requests carry a random pseudonymous identifier derived from your account. It cannot be traced back to you by the provider and is not used for anything else.

3. The browser extension

The extension has access to the websites you visit, as Chrome lists when you install it, and uses it only when you ask: it reads the text you selected when you use its menu item, keyboard shortcut or toolbar button, and, if you turn on checking in text fields, it shows its button in the field you are typing in and reads that field when you click the button. Text is never sent automatically. It sees the addresses of your open tabs only inside your browser, to add or skip that button, and never sends them to us. It writes to your clipboard when you click Copy, and reads it only when you click “Paste and check”.

When you click Sign in, the extension reads the e-mail address of the account signed in to your Chrome profile, if there is one, and fills it into our sign-in page so you do not have to type it. It is passed in the part of the page address that browsers do not send to servers, and reaches us only if you sign in with it.

In your browser the extension keeps its settings, your sign-in token, a random installation identifier, the sites where you hid its in-field button, and a counter used to ask once for a rating. Text handed from a page to the side panel is held in the browser’s memory only until the panel reads it.

When you remove the extension, Chrome opens a short survey page. If you answer it, we store the reason you chose, the extension version and the installation identifier, and nothing else.

4. Data we collect

• Usage records: for each request, the type of action, the number of characters, the model used, token counts, cost and latency, together with a random installation identifier generated by the extension. These enforce the free limits and let us operate the Service.
• Account data (signed-in users): e-mail address, the Google account identifier if you sign in with Google, plan and subscription status. Sign-in codes are stored only as hashes and expire after 10 minutes.
• Sessions: for each signed-in browser or extension, a hashed session token, a coarse device label such as “Chrome on macOS”, and when it was created and last used, so you can review and disconnect devices on the account page.
• Payment data: processed by Stripe Payments Europe, Ltd. We never see full card numbers. We keep the Stripe customer and subscription identifiers, the plan, its status and renewal date.
• Technical data: IP address and browser user-agent in server logs for security, abuse prevention and rate limiting, kept for up to 30 days.
• Product events: events such as “check performed” or “upgrade clicked”, linked to the installation identifier and, when you are signed in, to your account. They contain no text you wrote. We use them to improve the product.

5. Legal bases

Performance of a contract (providing the Service you request), legitimate interests (security, abuse prevention, product analytics) and, where required, consent. Where we rely on legitimate interests you may object at any time.

6. Processors and recipients

• OpenAI (language models, United States) — text processing.
• Stripe (Ireland / United States) — payments.
• DigitalOcean (hosting, [REGION]) — servers and database.
• Cloudflare — DNS, TLS and bot protection (Turnstile).
• Google (Ireland / United States) — only if you choose “Continue with Google”, to confirm your e-mail address.
• Resend, Inc. (United States) — sends sign-in codes.

Transfers outside the EEA/UK rely on the EU Standard Contractual Clauses or equivalent safeguards.

7. Cookies

The website uses only strictly necessary first-party cookies, and no advertising or analytics cookies:

• sc_session — keeps you signed in; up to 30 days.
• sc_oauth — protects a Google sign-in in progress; 10 minutes.
• sc_vid — a random identifier that applies the free checker’s daily limit to anonymous visitors; 12 months.

8. Retention

Submitted text: not stored, except signed-in history for 90 days and AI chat conversations for 30 days after their last message. Usage records: 24 months, then aggregated. Account data: for the life of the account and 12 months after closure for legal and accounting purposes. Logs: 30 days.

9. Your rights

You may access, correct, export or delete your data, restrict or object to processing, and withdraw consent, by contacting [CONTACT EMAIL] or using the account page, where you can also delete your account yourself. You may also complain to your supervisory authority.

10. Chrome Web Store disclosure

The extension’s use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell your data, use it for advertising, or allow humans to read it except with your consent, for security purposes, or to comply with the law.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

12. Changes

We will post changes on this page and update the date above; material changes are announced in the extension.