Last updated: May 2026
Email address. Collected when you create an account.
IP address. Used to enforce rate limits for guest users. Not stored long-term.
Text you submit. Sent to our AI provider to generate a rewrite. We do not store the content of your paraphrases beyond your saved history.
Writing samples. Stored on your account to build your voice profile. Never shared or used to train other profiles.
Payment information. Handled entirely by Stripe. We never see or store your card details.
To provide the rewriting, composing, and voice matching service.
To enforce daily usage limits and prevent abuse.
To process subscription and credit purchases through Stripe.
To send transactional emails (account confirmation, receipts, weekly digests).
We do not sell your data or use it for advertising.
Account data is kept for as long as your account is active.
Rewrite history is stored for logged-in users and deleted when you delete your account.
Writing samples and voice profiles are deleted when you delete your account.
IP-based rate limit counters reset daily and are not retained.
Anthropic. Processes the text you submit to generate rewrites. Subject to Anthropic's privacy policy.
Stripe. Handles all payment processing. Subject to Stripe's privacy policy.
PostHog. Product analytics to understand how features are used. Hosted in the EU. No personal data is shared. Used both on the website and inside the browser extension (anonymous device ID, the website hostname where the extension was used, tone selected, and aggregate usage events; never the text you rewrite or the URL path of the page). You can opt out inside the extension popup under Anonymous analytics.
Google Analytics. Aggregate visit and traffic-source metrics. Subject to Google's privacy policy.
Resend. Delivers transactional and digest emails.
Authentication. We store your session token in your browser's localStorage, not in a cookie. It is removed when you sign out or clear site data.
Analytics cookies (PostHog). Set on first visit (ph_*) to anonymously distinguish browsers so we can measure feature usage. No personal data attached.
Analytics cookies (Google Analytics). Set on first visit (_ga, _gid) for aggregate traffic metrics.
Stripe checkout. Stripe sets its own cookies on its checkout pages for fraud prevention. We do not see them.
No advertising cookies. We do not run ads or use ad-targeting cookies.
You can block any of these by disabling third-party cookies in your browser settings or by using a content blocker. The product still works without them. Sign-in continues to work because authentication uses localStorage, not cookies.
You can delete your account at any time from Settings. Deleting your account removes your email, writing samples, voice profiles, rewrite history, and any unused credits.
Questions about this policy? Email hello@toneswap.app.