SpellFix

Privacy Policy

Last updated: October 7, 2026

This policy explains how SpellFix handles information when you use its Chrome extension. For privacy questions and requests, contact gta.stories999@gmail.com.

Your writing and AI processing

SpellFix reads text in supported editable fields locally to display its tools and populate the editable preview. Password fields are excluded. When you click Correct, Translate, or Rewrite, the draft and the selected action, language or writing style are sent over HTTPS to the SpellFix server and then to Google Gemini for processing. Results are returned to your browser for application or review. SpellFix does not send surrounding page content, page URLs or browsing history to its server.

Submitted drafts and AI results are not stored in the SpellFix application database. Google processes submitted text under the terms and privacy practices applicable to its Gemini API service; provider retention and use may differ from SpellFix’s own database practices. Avoid submitting information you do not want processed by an external AI provider.

Local preferences and sign-in

Chrome local storage holds the enabled/disabled setting, movable tool positions, a generated device identifier, and your session token when signed in. The token and device identifier accompany requests to the fixed SpellFix server. Signing out removes the local session token. Removing the extension removes its local extension storage.

Accounts and usage limits

If you register, SpellFix stores your email address, a salted password hash, account identifier and subscription entitlement. Passwords are sent over HTTPS for authentication and are not stored as plaintext. Session records support sign-in. Usage counters and rate-limit records enforce free and Premium limits and protect the service against abuse. Free usage is associated with a keyed hash derived from your IP address; Premium usage is associated with your account identifier. These identifiers are not used to track browsing activity.

Infrastructure and technical information

Supabase hosts the backend and application database. Network services necessarily receive technical information such as IP addresses, request times and response status. Infrastructure logs and backups may retain technical metadata under the provider’s practices. Application usage records are cleaned after seven days, stale rate-limit records after two days, and event-deduplication records after thirty days. Expired session and reset records are cleaned periodically. Account and billing records remain while needed to operate the account, resolve payment issues or meet applicable obligations.

Payments

Premium subscriptions use PayPal checkout. PayPal handles payment details under its own privacy policy. SpellFix stores subscription identifiers, status, transaction references and paid-access periods to manage Premium access. SpellFix does not receive or store full card numbers or PayPal passwords. Cancelling a subscription stops renewal; it does not automatically delete your account.

Feedback

When you choose Send feedback, the message, category, optional name and email address, extension version and submission reference are forwarded through FormSubmit for delivery to our support inbox. Your active draft and page URL are not included. Feedback content is not stored in the SpellFix application database, but the email service and support inbox retain the submitted message as needed to respond and handle the request.

Sharing and purposes

Information is used to provide requested writing features, authenticate accounts, manage subscriptions, enforce limits, prevent abuse and respond to feedback. SpellFix does not sell user data or use it for targeted advertising. Service providers may process information outside your country. Their own terms and privacy policies govern their services.

Your choices and requests

You can disable SpellFix from the popup, use the free tier without an account, sign out, or uninstall the extension. Contact our support email to request access to, correction of, or deletion of your account information, or to raise a privacy concern. Some records may need to be retained for security, payment disputes or legal obligations. Depending on your location, you may also have rights to object, restrict processing or complain to a data-protection authority.

Policy updates

We may update this policy when features or data practices change. The date above identifies the current version.