Privacy Policy

Silvertext is a product name of, and is operated by, Elowin Labs LLC. For the purposes of applicable privacy law, Elowin Labs LLC is the controller of personal information processed through Silvertext. This policy explains what we collect, why, who processes it on our behalf, and the choices and rights you have.

1. Information we collect

Account information. Your email address, name (if provided), and authentication identifiers, managed through our sign-in provider. We never see or store your password.

Content you submit. Text you paste or files you upload for checking, the extracted text, the resulting reports (matches, sources, issues, scores), and fixes you apply. Original upload bytes are deleted after text extraction; the extracted text and report are retained in your account so you can revisit them.

Billing information. Paid plans are sold and billed through Stripe's Link merchant-of-record service, which also collects any tax and handles refunds and payment disputes. We store Stripe customer and subscription identifiers, plan and invoice records, and, for fraud prevention, Stripe's non-reversible payment-method fingerprint token. We never store full card numbers.

Usage and device information. Product events (for example: a check started or completed), quota and credit usage, approximate region, and technical logs (IP address, browser type, timestamps) needed to secure and operate the Service. Unless you decline Analytics, we also record how pages are used (scrolling, clicks, taps and the layout of the page) so we can see where visitors get stuck. The text you paste or upload, your report and every form field are masked in those recordings and never leave your browser this way.

Cookies. Essential cookies keep you signed in and the site working. Optional functional, analytics and advertising-measurement cookies run only with your consent, which you can change any time from Your privacy choices in the footer of every page. We show no ads on our pages. We do advertise Silvertext on Google Search. If you arrive from one of those ads and allow Advertising measurement, we tell Google when that visit leads to a trial or a paid plan, sending the ad's click id (a gclid) and a one-way (SHA-256) hash of your email address so Google can match the two. Google uses this for measurement only: ad personalization stays off, and Google never receives the text you check. Without that consent the click id stays in our own cookie and is never sent to Google. We treat a Global Privacy Control signal from your browser as declining Advertising measurement. Browsers' Do Not Track signal has no agreed meaning, so we do not respond to it; Global Privacy Control is the signal we honor. We also advertise Silvertext inside ChatGPT; those ads are measured by an OpenAI script we treat as essential, which keeps the ad's click reference in a cookie and, when you sign up, start a checkout, start a trial or pay for a plan, receives that reference with a one-way hash of your email address and of your account id, nothing more, and nothing at all if your browser sends Global Privacy Control. If you have a Silvertext account, we also give OpenAI a one-way hash of your email address so our ads inside ChatGPT are not shown to existing customers; we leave you out of that list if your browser has sent Global Privacy Control. No interest profiles, no remarketing. The Cookie Policy lists every cookie.

Reddit advertising measurement. Reddit measurement stays off until you explicitly allow Advertising measurement, and stays off if your browser sends Global Privacy Control. Earlier Advertising choices stay unchanged and do not enable Reddit; you can make a fresh choice from Your privacy choices. When allowed, Reddit's pixel receives page visits and whether you sign up, start a trial or complete a purchase, with browser and ad-click identifiers, an event reference and, for a purchase, the amount paid and currency. The pixel also receives technical browser data, such as your IP address and browser type. We do not send Reddit your document text, report contents, report page address or title, email address or name. You can stop this measurement from Your privacy choices; declining Advertising also removes the Reddit identifiers stored in your browser.

2. How we use information

To provide and operate the Service (running your checks, storing your reports, enforcing quotas); to process payments and prevent fraud and trial abuse; to secure the Service and debug problems; to communicate with you about your account, receipts, and material changes; to understand product usage (with consent where required); and to comply with legal obligations. If you create an account or start a checkout and do not buy, we may send you a few follow-up emails about Silvertext (at most four per series, never more than one every two days). Every one has an Unsubscribe link that works with one click and no sign-in, and unsubscribing never affects account emails such as receipts. If you are in the European Union, the United Kingdom or Switzerland we send these only if you have asked for them. We record whether these emails are delivered and which links in them are clicked, to measure whether they help, and a one-way hash of an unsubscribed address is kept so it is not emailed again. We do not sell your personal information, and we do not use your submitted text to train general-purpose AI models.

3. Your text, specifically

Text you check is processed to produce your report: it is segmented, selected passages are searched against public web sources, and analysis is performed by the model and search providers listed below under contracts that restrict their use of the data. Your text is never published, offered to other customers, resold, or used for advertising, and we configure providers not to use it to train their general models where that control is available.

4. Service providers (subprocessors)

We share information with providers only as needed to run Silvertext: Stripe (payments, through Link, its merchant-of-record service), Clerk (authentication), Vercel and Railway (hosting), Cloudflare (network, security checks and bot protection), Neon (database), Upstash (caching and rate limiting), OpenAI and Anthropic (text analysis models and web search for source matching), Firecrawl (fetching the public web pages found as possible sources), Resend (email delivery), Sentry (error monitoring), Plausible (cookieless page counts), OpenAI again (advertising measurement for our ads inside ChatGPT, limited to reporting that an ad click led to a sign-up, a trial or a paid plan, and to keeping existing customers out of those ads), and, with your consent, Google (analytics, and advertising measurement limited to reporting that an ad click led to a trial or paid plan), Reddit (advertising measurement after you explicitly allow it, as described above), and Microsoft (Clarity, the page-usage recordings described above). Each processes data under its own security and privacy commitments and on our instructions. Short passages of a document are also sent as search queries to public search services, such as Wikipedia's, which receive the query and nothing that identifies you.

5. Retention

Account content (text, reports, preferences) is kept for as long as you have a plan or purchased credits. Canceling a plan does not delete anything by itself: your account, reports and any purchased credits stay, and you can sign in to view or export your work at any time. Once an account has no plan and no credits, each report is kept for 6 months from the last time you opened it, then removed; opening a report restarts its clock, and we email you before the first removal. Operational logs are kept for a limited period for security and debugging. Billing records are retained as required for tax and accounting. If you delete your account, you confirm the request with a code we email you, renewals stop immediately, and the deletion is carried out 30 days later; until then the account is locked and you can cancel the deletion by signing in and choosing Keep my account, or through the link in the email we send you. On the deletion date your content, reports, usage history, local billing profile, API keys and the messages you sent us through support are deleted.

What outlives a deleted account, and for how long: a limited fraud-prevention record (such as the payment-method fingerprint, kept for 24 months); transaction and tax records, kept for as long as tax and accounting rules require, typically seven years; and a support thread that is the subject of an open payment dispute or abuse investigation, kept until it closes and no longer than 24 months after that. Nothing else is kept indefinitely.

Messages you send us without an account, or that outlive one, have their own limits: support tickets and their messages are deleted 24 months after the conversation ends, and help-chat transcripts and contact-form messages after 12 months. Deleted records are removed from our live systems immediately and age out of encrypted backups shortly afterwards.

Free scans without an account: text you paste into a free scan, and the resulting partial report, are kept for a short period (currently about three days) so you can claim them into an account, then deleted automatically. They are never published, resold, or used to train models.

Inactive accounts: if an account has no active plan, no remaining purchased credits, and no sign-in for approximately twelve months, we may delete the account and its content. We send at least two email warnings to the account's address before any deletion, and simply signing in keeps the account and resets the clock.

6. Your rights and choices

You can access and update account details, manage cookie consent, cancel your plan, and delete your account directly from the Service. Depending on where you live (for example under the GDPR, UK GDPR, US state privacy laws such as the CCPA/CPRA, or similar laws in other countries), you may also have rights to request access to, correction of, deletion of, or a portable copy of your personal information, and to object to or restrict certain processing. To exercise any of these, contact us or email support@silvertext.com. We respond to verified requests within the timelines the applicable law requires, and we do not discriminate against you for exercising your rights.

7. Security

Data is encrypted in transit, credentials are handled by our authentication provider rather than stored by us, payment data stays with Stripe, and access to production systems is restricted. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by law.

8. International transfers

We operate from the United States and our providers process data in the United States (and, for some providers, other regions). Where data is transferred from jurisdictions with transfer restrictions, we rely on our providers' recognized transfer mechanisms.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the Service evolves. For material changes we will give notice (for example by email or in-product) before they take effect. The "Last updated" date above always reflects the current version.

11. Contact

Elowin Labs LLC (operating Silvertext) · support@silvertext.com. If you have an unresolved privacy concern, you may also have the right to lodge a complaint with your local supervisory authority.