Clear terms. Honest privacy.

1. Scope and who this policy covers

This Privacy Policy explains how ProPhrase collects, uses, stores and shares information when you use prophrase.in, the ProPhrase workspace, browser extension, mobile or desktop clients, developer APIs, Universal Copy and related services (together, the “Service”).

ProPhrase is designed for professional and business communication and is not directed to anyone under 18. If you do not agree with this policy, do not use the Service or submit personal or confidential information to it.

2. Information we collect

• Account and profile information: Your email address, name, avatar, authentication identifiers, plan, account status and sign-in information supplied by you or your identity provider.
• Writing content: Drafts, selected text, instructions, recipients, goals, tones, generated versions, feedback and other content you choose to submit. Saved workspace threads and messages remain associated with your account until they are removed under our retention practices.
• Extension and device information: A device identifier and label, platform, extension authentication status, selected text and the minimum active-page access needed when you invoke the extension. ProPhrase does not intentionally collect your full browsing history.
• Universal Copy information: Copied text, a short preview, source and receiving device labels, status, timestamps and expiry information used to make text available across your signed-in devices.
• Usage, credits and diagnostics: Feature used, request and response timing, character and token counts, credit cost, credit grants and expiry, rate-limit events, error information, model tier and security or abuse-prevention records. Billing usage records are designed to store operational metadata rather than the full text of your request.
• Payments and subscriptions: Plan, billing interval, subscription status, transaction or provider reference identifiers and limited payment-event information. Payment credentials are collected and processed by Razorpay; ProPhrase does not receive or store your complete card number or security code.
• Preferences and local storage: Writing-style settings, recent history, device identifiers, session information and extension tokens may be stored in your browser or extension storage so the Service works across visits.

3. How we use information

• Authenticate you, secure your account and connect approved devices.
• Provide rewrites, Outcome Assistant, saved history, Universal Copy, developer APIs and other requested features.
• Measure and deduct credits consistently across the workspace, extension and API.
• Process subscriptions, maintain billing records and provide plan entitlements.
• Prevent fraud, abuse, token misuse and security incidents; enforce rate limits and these Terms.
• Troubleshoot, maintain, analyze and improve reliability, safety and user experience.
• Comply with legal obligations and protect the rights, safety and integrity of users, ProPhrase and others.

4. AI processing

ProPhrase sends the content and instructions needed for a requested rewrite or outcome to Google’s Gemini API. Depending on the configured Gemini service tier, Google may retain or use prompts, responses and related metadata as described in its then-current Gemini API terms. In particular, free or unpaid API services may provide different data-use protections from paid services.

Do not submit passwords, payment credentials, regulated records, trade secrets or other information you are not authorized to share. ProPhrase does not use your private writing content to train its own general-purpose model, but it cannot override the independent data practices of an AI provider.

5. When we share information

We do not sell your personal data. We disclose information only as needed to operate the Service, complete a transaction, follow your instruction, protect the Service or comply with law.

• Google Gemini: for AI generation and safety processing.
• Supabase: for authentication, database and application infrastructure.
• Razorpay: for checkout, payment and subscription processing.
• Operational providers: such as hosting, security, email and monitoring vendors acting for ProPhrase.
• Legal or business events: when required by law, to investigate misuse, or as part of a merger, financing, reorganization or transfer of the Service, subject to appropriate safeguards.

6. Browser extension permissions

The extension requests active-tab, scripting, context-menu, identity and local-storage permissions. It uses these permissions to read or replace text on the active page when you ask it to, authenticate your ProPhrase account, remember a pending selection and call ProPhrase services. It is not designed to operate as a general browsing-history tracker.

Text saved in extension storage and the extension access token remain on your browser profile until used, replaced, cleared or the extension is removed. Treat any signed-in browser profile as an authorized device and sign out or revoke the extension token if a device is lost or shared.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

7. Universal Copy

Universal Copy places text on ProPhrase servers so another signed-in device can retrieve it. A copy is normally available for 10 minutes and may be claimed once. The expiry stops normal retrieval; it does not necessarily mean the database record is deleted at that exact moment. Related content and metadata may remain until routine cleanup or account deletion.

Universal Copy is not an end-to-end encrypted password manager, secure vault or backup service. Do not use it for passwords, one-time codes, financial credentials, health records or other highly sensitive information.

8. Retention and deletion

We retain account information while your account is active and as reasonably needed to provide the Service. Saved threads, messages and generated content may remain in your history; archiving a thread may hide it without immediately deleting the underlying record. Local browser history remains until you clear it or your browser removes it.

Device registrations and API or extension-token records remain until revoked, expired, deleted or no longer operationally required. Credit, subscription, payment, fraud-prevention and security records may be kept for the period required for accounting, dispute resolution, legal compliance and service integrity.

You may request account or personal-data deletion by contacting us. We may retain limited information where required by law, to complete an active transaction, resolve a dispute, prevent fraud or establish and defend legal claims.

9. Security

We use reasonable technical and organizational safeguards, including authenticated access, row-level data controls, hashed API-token storage, access restrictions and encrypted network transport where supported. No online service is completely secure, so we cannot guarantee that information will never be accessed, lost or disclosed without authorization.

You are responsible for protecting your account, browser profile, devices and API or extension tokens. Notify us promptly if you believe your account or token has been compromised.

10. International processing

Our providers may process information in India and other countries where they or their subprocessors operate. Those locations may have different data-protection laws. Where required, we use contractual or other lawful safeguards for cross-border processing.

11. Your choices and rights

Depending on applicable law, you may request access to, correction of or deletion of personal data, withdraw consent, object to or restrict certain processing, request information about sharing, or raise a grievance. You may also clear local history, revoke an extension or API token, stop using Universal Copy, cancel a subscription or stop using the Service.

We may need to verify your identity before completing a request. Withdrawing consent or deleting required information may prevent some or all of the Service from working. You may use any complaint or appeal mechanism available under applicable law.

12. Changes and contact

We may update this policy as the Service, providers or law changes. We will post the revised policy with a new “Last updated” date and provide additional notice where required. For privacy questions, grievances or data-rights requests, email privacy@prophrase.in.