Privacy Policy

We collect account information (such as the email address and user identifier obtained from the authentication provider).

In connection with use of the Service, we collect request metadata (IP address, timestamp, response status, latency, and so on).

We do not store the body of text submitted for moderation. It is processed in memory for moderation and discarded after the response.

We never record the body of submitted text or plaintext API keys in logs, databases, or error messages.

Request metadata is retained for 90 days for abuse detection, billing verification, and incident response, and then deleted.

Text that the user deliberately submits as a missed-word report is stored to improve moderation accuracy.

This is the only exception to our policy of not storing submitted text, and is limited to what the user intentionally sends through the report form.

To provide the Service, we share information with the following external services to the extent necessary.

Infrastructure: Google Cloud Platform; Payments: Stripe; Email: Resend. Each company handles data under its own privacy policy.

We delete personal data 30 days after account closure. API keys are revoked at closure.

Billing and transaction records that we are legally required to keep are retained for the required period.

We use cookies and similar technologies to remember the display language and theme and to keep you logged in.

For requests to disclose, correct, or delete retained personal data, please contact us. We will respond in accordance with the law after verifying identity.