01Who we are
Grammarazi (grammarazi.com), its web editor and its browser extension are operated by BITMINDS INNOVATIONS PRIVATE LIMITED, a company incorporated in India that publishes software under the name ShickShack ("we", "us"). We decide how your personal data is used, which makes us its controller (its "data fiduciary" under India's Digital Personal Data Protection Act, 2023).
Questions about this policy or your data: connect@grammarazi.com.
02What we collect
Text you check. When you use the editor, or type in a text box where the extension is switched on, the text in that box is sent to our server so we can find mistakes. It is processed in memory and is not written to our database or our logs.
Text you rephrase or write from. When you click Rephrase or Write, we receive the selected text or your draft, any instruction you type and, in Gmail and Slack, the conversation on screen. This is described in Rephrase and Write below. It is processed in the same way and not stored.
Account details, if you create an account: your email address; if you choose a password, a one-way hash of it that our sign-in provider stores and we never see; and if you sign in with Google, the name, email address and profile picture link Google shares with us. We also keep the dates you signed up and last signed in.
Plan and usage: which plan you are on and how many checks of each kind you used in each calendar month, so we can apply plan limits. This is a count, not a record of what you wrote.
Settings: your chosen variety of English and, once the feature is available, words you add to your personal dictionary.
Usage statistics: on the website, through Google Analytics, which you can turn off; in the extension, counts of the features you use. Neither includes your text. See Analytics below.
Technical data: like every website, our hosting and network providers receive your IP address, browser type and the pages or addresses requested, and keep short-lived logs of them to run and protect the service.
We do not collect your address book, your location, payment card details (there is no paid plan yet), or anything from text boxes you are not typing in. The only exception is the conversation on screen in Gmail or Slack, which is sent when you click Write.
03How we use it
- To check your text and show suggestions. This is the service you ask for.
- To rephrase text or draft a message when you ask for it.
- To create and secure your account, sign you in and keep you signed in.
- To apply free and paid plan limits.
- To keep the service working, prevent abuse and fix problems.
- To see, in aggregate, which features are used and where people get stuck, so we can improve them.
- To contact you about your account or important changes to the service. We do not send marketing email without your consent.
We do not use your text to train AI models, and we do not sell or rent personal data or use it for advertising.
Where the law requires a legal basis, we rely on performing our contract with you (checking text, running your account), your consent where the law requires it, and our legitimate interests in keeping the service secure and in understanding how the website and the extension's features are used. You can object to website analytics at any time from Analytics settings.
04How AI checking works
Some mistakes are found by rules on our own server. To find the rest, and to rephrase or write, we send the text involved to OpenRouter, Inc. (United States), a service that passes it to one of several AI providers and returns the result.
OpenRouter chooses the provider for each request, mostly on price and availability, so your text may be processed by a provider in the United States, China or another country. We instruct OpenRouter to use only providers that do not train models on your text or retain it, and we have switched off OpenRouter's own storage of prompts.
AI suggestions can be wrong. Check them before you accept them.
05Rephrase and Write
- Rephrase: when you select text and click Rephrase, the selected text is sent to us and, through OpenRouter, to an AI provider, which returns other ways to say it.
- Write: when you click Write, we send the instruction you typed (if any) and your draft (if any). In Gmail and Slack we also send the conversation visible on screen: the subject, the most recent messages in the thread, the names of the people who sent them and the recipients of your reply, trimmed to the latest part. This is what lets the AI draft a reply that fits the conversation.
- In my tone: when you choose it, and when you use Write, the request can also carry a short summary of your writing style and a few of your recent messages from the extension's writing memory, and the note it keeps about the person you are writing to.
Nothing is sent until you click Rephrase or Write. We do not store any of it: it is processed in memory, passed through OpenRouter on the terms described above, and discarded once the result is returned.
Messages and names in a conversation can be personal data of the other people in it. We use them only to draft your reply, because you asked, and we do not keep them.
06On-device writing memory
To write in your tone, the extension learns from messages you send in text boxes where it is switched on, such as Gmail and Slack. It keeps:
- style statistics: counts such as how long your messages are, the greetings and sign-offs you use, and how often you use contractions or emoji;
- up to 30 of your recent sent messages, each cut to 800 characters;
- for up to 200 people you write to: their name, how often you write to them, the greeting and sign-off you use with them, and two short examples.
This memory is kept only in your browser's local extension storage on that device. It is not synced to your other devices and is never stored on our servers. Parts of it leave your device only as described above, when you use In my tone or Write.
Messages that look like they contain passwords, one-time codes, card numbers or keys are not saved. You can see a summary of what is stored, clear it, and switch learning off from the extension's popup. Uninstalling the extension deletes it.
07Analytics
Website: we use Google Analytics (Google LLC, through Firebase) on grammarazi.com. In the European Economic Area, the United Kingdom and Switzerland it runs without cookies, sending only anonymous signals Google uses for aggregate counts. Elsewhere it sets analytics cookies. It records the pages you view, your device and browser type, an approximate location Google derives from your IP address, and events such as signing up, signing in, running a check, applying a suggestion or downloading the extension. When you are signed in, these are tagged with your account ID so that your visits on different devices, and in the extension, count as one person. Nothing you type in the editor is sent to it, and its advertising features are switched off. You can turn it off for your browser at any time from Analytics settings at the foot of every page; turning it off removes the analytics cookies.
Extension: the extension sends counts of what happens to our server, which forwards them to Google Analytics. The events are: installed, updated, used that day (sent once a day, the first time you use it), signed in, check completed, suggestion applied, rephrase used or applied, write used or inserted, memory cleared, and text box skipped, with simple details such as the option chosen or the extension version. Text box skipped is sent when the extension cannot work in a box you click, at most once per reason per page, and carries the reason, the site's domain name (for example www.reddit.com) and, for an editor it does not recognise, that editor's technical element name, so we can see which sites need fixing. Each event is tagged with a random identifier created when the extension is installed and, if you are signed in, your account ID. They never include your text, the full address of the page you are on, or anyone's name.
Google Analytics keeps this data for up to 14 months. We use it only in aggregate, to understand how Grammarazi is used.
08The browser extension
- The extension reads text only from the editable text box you are typing in, and only on sites where you have left it switched on. It does not read the rest of the page, single-line fields such as passwords or card numbers, or boxes marked as opted out.
- Text is sent to our server only to check it, or to rephrase or write when you click those buttons, as described above, and is not stored.
- Its writing memory is kept in local extension storage on your device, as described above.
- It sends usage counts without your text, as described in Analytics.
- Your settings (on or off, sites you switched off, your English) are kept in your browser's extension storage, which your browser may sync to your other devices.
- If you sign in to the extension, it stores a sign-in token in extension storage so you stay signed in.
The extension's use of information it receives complies with the Chrome Web Store User Data Policy, including its Limited Use requirements: the data is used only to provide the checking, rephrasing and writing features you use, is not sold, is not used for advertising, and is not read by people except where you ask us for help or the law requires it.
10International transfers
We are based in India, our servers and database are in the United States, and AI providers may be in other countries, including China. By using Grammarazi your data is transferred to and processed in these countries. Where the law requires safeguards for such transfers, we rely on our providers' contractual commitments.
11How long we keep it
- Text you check, rephrase or write from, including conversations sent with Write: not kept. It exists only while your request is being processed.
- Writing memory: on your device only, until you clear it or uninstall the extension.
- Usage statistics: up to 14 months in Google Analytics.
- Account details, plan and settings: until you delete your account.
- Monthly usage counts: while your account exists.
- Server and network logs: kept by our providers for short periods, typically under 30 days.
When you delete your account, your account details, plan, usage counts and settings are deleted at once from our database. Copies in our providers' backups expire on their normal schedule.
12Cookies and browser storage
We do not use advertising cookies. Outside the European Economic Area, the United Kingdom and Switzerland, Google Analytics sets cookies whose names begin with _ga; turning analytics off from Analytics settings removes them.
Apart from that, the website stores three things in your browser: your chosen English; if you sign in, the session that keeps you signed in; and your analytics choice, if you turned analytics off. These are needed for the features you use, and clearing your browser data removes them.
13Security
All traffic is encrypted in transit. Our database is locked so that only our server can read it, passwords are never stored by us (our sign-in provider keeps only a one-way hash), accounts must confirm their email address before use, and access to production systems is limited. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
14Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act and the EU and UK GDPR, you can:
- get a summary of the personal data we hold about you and how it is used;
- have it corrected or completed;
- have it deleted, which you can also do yourself by deleting your account;
- withdraw consent you have given, without affecting what was done before;
- object to or restrict some processing, and receive your data in a portable format;
- nominate someone to exercise these rights if you die or become unable to;
- complain to us, and if we do not resolve it, to the Data Protection Board of India or your local data protection authority.
Write to connect@grammarazi.com from the email address on your account. We reply within 30 days.
15Children
Grammarazi is not meant for children under 13, and we do not knowingly collect their data. If you are under 18, please use Grammarazi only with the permission of a parent or guardian. If you believe a child has given us personal data, write to us and we will delete it.
16Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects how we use your data, we will tell you by email or in the product before it takes effect.
17Contact and grievances
BITMINDS INNOVATIONS PRIVATE LIMITED, India. Email: connect@grammarazi.com. Questions, requests and complaints about personal data, including those addressed to our Grievance Officer, go to the same address.