Privacy Policy

Silvertext is a product name of, and is operated by, Elowin Labs LLC. For the purposes of applicable privacy law, Elowin Labs LLC is the controller of personal information processed through Silvertext. This policy explains what we collect, why, who processes it on our behalf, and the choices and rights you have.

1. Information we collect

Account information. Your email address, name (if provided), and authentication identifiers, managed through our sign-in provider. We never see or store your password.

Content you submit. Text you paste or files you upload for checking, the extracted text, the resulting reports (matches, sources, issues, scores), and fixes you apply. Original upload bytes are deleted after text extraction; the extracted text and report are retained in your account so you can revisit them.

Billing information. Paid plans are sold and billed through Stripe's Link merchant-of-record service, which also collects any tax and handles refunds and payment disputes. We store Stripe customer and subscription identifiers, plan and invoice records, and, for fraud prevention, Stripe's non-reversible payment-method fingerprint token. We never store full card numbers.

Usage and device information. Product events (for example: a check started or completed), quota and credit usage, approximate region, and technical logs (IP address, browser type, timestamps) needed to secure and operate the Service.

Cookies. Essential cookies keep you signed in and the site working. Optional functional, analytics and advertising-measurement cookies run only with your consent, which you can change any time from Your privacy choices in the footer of every page. We show no ads on our pages. We do advertise Silvertext on Google Search. If you arrive from one of those ads and allow Advertising measurement, we tell Google when that visit leads to a trial or a paid plan, sending the ad's click id (a gclid) and a one-way (SHA-256) hash of your email address so Google can match the two. Google uses this for measurement only: ad personalization stays off, and Google never receives the text you check. Without that consent the click id stays in our own cookie and is never sent to Google. We treat a Global Privacy Control signal from your browser as declining Advertising measurement. Browsers' Do Not Track signal has no agreed meaning, so we do not respond to it; Global Privacy Control is the signal we honor. No interest profiles, no remarketing. The Cookie Policy lists every cookie.

2. How we use information

To provide and operate the Service (running your checks, storing your reports, enforcing quotas); to process payments and prevent fraud and trial abuse; to secure the Service and debug problems; to communicate with you about your account, receipts, and material changes; to understand product usage (with consent where required); and to comply with legal obligations. We do not sell your personal information, and we do not use your submitted text to train general-purpose AI models.

3. Your text, specifically

Text you check is processed to produce your report: it is segmented, selected passages are searched against public web sources, and analysis is performed by the model and search providers listed below under contracts that restrict their use of the data. Your text is never published, offered to other customers, resold, or used for advertising, and we configure providers not to use it to train their general models where that control is available.

4. Service providers (subprocessors)

We share information with providers only as needed to run Silvertext: Stripe (payments, through Link, its merchant-of-record service), Clerk (authentication), Vercel and Railway (hosting), Cloudflare (network, security checks and bot protection), Neon (database), Upstash (caching and rate limiting), OpenAI and Anthropic (text analysis models and web search for source matching), Firecrawl (fetching the public web pages found as possible sources), Resend (transactional email), Sentry (error monitoring), Plausible (cookieless page counts), and, with your consent, Google (analytics, and advertising measurement limited to reporting that an ad click led to a trial or paid plan). Each processes data under its own security and privacy commitments and on our instructions. Short passages of a document are also sent as search queries to public search services, such as Wikipedia's, which receive the query and nothing that identifies you.

5. Retention

Account content (text, reports, preferences) is kept for as long as you have a plan or purchased credits. Canceling a plan does not delete anything by itself: your account, reports and any purchased credits stay, and you can sign in to view or export your work at any time. Once an account has no plan and no credits, each report is kept for 6 months from the last time you opened it, then removed; opening a report restarts its clock, and we email you before the first removal. Operational logs are kept for a limited period for security and debugging. Billing records are retained as required for tax and accounting. If you delete your account, you confirm the request with a code we email you, renewals stop immediately, and the deletion is carried out 30 days later; until then the account is locked and you can cancel the deletion by signing in and choosing Keep my account, or through the link in the email we send you. On the deletion date your content, reports, usage history, local billing profile, API keys and the messages you sent us through support are deleted.

What outlives a deleted account, and for how long: a limited fraud-prevention record (such as the payment-method fingerprint, kept for 24 months); transaction and tax records, kept for as long as tax and accounting rules require, typically seven years; and a support thread that is the subject of an open payment dispute or abuse investigation, kept until it closes and no longer than 24 months after that. Nothing else is kept indefinitely.

Messages you send us without an account, or that outlive one, have their own limits: support tickets and their messages are deleted 24 months after the conversation ends, and help-chat transcripts and contact-form messages after 12 months. Deleted records are removed from our live systems immediately and age out of encrypted backups shortly afterwards.

Free scans without an account: text you paste into a free scan, and the resulting partial report, are kept for a short period (currently about three days) so you can claim them into an account, then deleted automatically. They are never published, resold, or used to train models.

Inactive accounts: if an account has no active plan, no remaining purchased credits, and no sign-in for approximately twelve months, we may delete the account and its content. We send at least two email warnings to the account's address before any deletion, and simply signing in keeps the account and resets the clock.

6. Your rights and choices

You can access and update account details, manage cookie consent, cancel your plan, and delete your account directly from the Service. Depending on where you live (for example under the GDPR, UK GDPR, or US state privacy laws such as the CCPA/CPRA), you may also have rights to request access to, correction of, deletion of, or a portable copy of your personal information, and to object to or restrict certain processing. To exercise any of these, contact us or email support@silvertext.com. We respond to verified requests within the timelines the applicable law requires, and we do not discriminate against you for exercising your rights.

7. Security

Data is encrypted in transit, credentials are handled by our authentication provider rather than stored by us, payment data stays with Stripe, and access to production systems is restricted. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by law.

8. International transfers

We operate from the United States and our providers process data in the United States (and, for some providers, other regions). Where data is transferred from jurisdictions with transfer restrictions, we rely on our providers' recognized transfer mechanisms.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the Service evolves. For material changes we will give notice (for example by email or in-product) before they take effect. The "Last updated" date above always reflects the current version.

11. Contact

Elowin Labs LLC (operating Silvertext) · support@silvertext.com. If you have an unresolved privacy concern, you may also have the right to lodge a complaint with your local supervisory authority.