Privacy notice

Who is responsible

Polisher is run by Cameron Pittaway, Aberdeen, Scotland. Email: polisher.help@gmail.com. Postal address: 17 Park Road, Aberdeen AB15 9HR.

For UK data protection law, this person is the controller of your data.

Polisher is for adults aged 18 and over who live in the UK.

What we collect and why

Account: your email address, your first name and surname if you choose to add them in Settings, how you sign in (the email link, Google or both), when you signed up and last signed in, and how many free rewrites and credits you have used (counts and costs only, never your writing), so we can provide the service you signed up for (contract).

Free try without an account: your answers to the questions stay only in your own browser until you sign in. When you ask for the free rewrite, your answers and your draft are sent to us and to Anthropic to make it, and Polisher does not save them (steps you asked for before an account). To allow one free try, your browser keeps a small cookie for a year that says it has had it, holding only the time and a signature, and we keep a scrambled version of your internet address for a day; your browser also first solves a small puzzle that shows it is not a bot, with no outside service (legitimate interests). If you then sign in, your answers are saved as writing samples.

Continue with Google: if you sign in with Google, Google tells us your email address, your name and a link to your Google profile picture, and confirms the email address is yours. Supabase keeps these in your sign-in record. Polisher uses only the email address and never sees your Google password (contract).

Writing samples and your style profile: stored so you don't have to paste them again (contract). You can edit or delete them at any time.

Drafts and rewrites: Polisher does not save them. They are sent to Anthropic to make the rewrite. Anthropic deletes them within 30 days, or keeps them for up to 2 years if its automated safety checks flag them, and does not train its AI on them. Your samples are sent the same way when your style profile is made. A locked free rewrite is kept sealed in your own browser for up to 24 hours so you can open it after subscribing.

Payments: Stripe takes your card details. We never see them. We keep your email, subscription status, amount and dates (contract, and legal obligation for tax records). When you first pay, we email you a confirmation of your subscription with your right to cancel, as consumer law requires (contract and legal obligation).

Usage: counts of AI words used and their cost, with no text, so we can keep costs under control (legitimate interests).

Security records: our servers see your internet address. We keep only a scrambled version, to limit spam and abuse (legitimate interests). Supabase keeps sign-in logs, including internet addresses, for security.

Visits: page counts from Vercel Web Analytics and our own records, with no cookies and nothing that identifies you (legitimate interests). See Cookies and visit counting below to switch this off.

You need to give your email address to make an account or pay, because the service cannot work without it. Polisher makes no decisions about you by automated means that have legal or similarly significant effects.

Who helps run Polisher

These companies process your data for us under data processing agreements. Supabase stores the database and handles sign-in, with the data held in London. Vercel hosts the website and counts visits, with its servers for Polisher in London. Anthropic makes the rewrites (we contract with Anthropic Ireland, Limited, and the processing takes place in the United States). Brevo, in France, sends sign-in emails and the email confirming your subscription. Brevo records whether these emails are opened and their links clicked, and sends each link through its own address first. Polisher does not use these records.

Google runs Continue with Google. If you use it, Google knows you signed in to Polisher and handles that under its own privacy policy, as a separate controller.

Stripe takes payments. It also uses payment data for its own purposes, such as preventing fraud and meeting financial rules, as a separate controller under its own privacy policy.

Where these companies process data outside the UK, including in the United States, they rely on safeguards approved under UK law: Vercel on the UK Extension to the EU-US Data Privacy Framework, Anthropic on the UK International Data Transfer Addendum to the EU standard contractual clauses, and Supabase on the UK International Data Transfer Addendum to the EU standard contractual clauses in its data processing agreement. Email us for a copy of the safeguard for any of these companies.

Cookies and visit counting

Polisher uses cookies only to keep you signed in and to remember that this browser has had its free try. They are needed for the site to work. Your browser also stores your theme, motion, spelling and visit counting choices if you change them in Settings, your answers to the free-try questions until you sign in, a sealed copy of a locked free rewrite for up to 24 hours, and your History (your last 5 rewrites and what you wrote for them) until you sign out or clear it. You can remove these by clearing this site's data in your browser. There are no advertising or tracking cookies, so there is no cookie banner.

Visit counting: Vercel Web Analytics and our own counter record the pages visited, the link you came from, and your browser type and country, without cookies and without identifying you, only so we can improve Polisher. To switch it off, turn off Count my visits in Settings, or turn on Global Privacy Control in your browser.

How long we keep it

Scrambled internet addresses: deleted within 30 days.

Account data and samples: until you delete your account, which removes them straight away. Usage counts are kept without any link to you.

Payment records: for 5 years after the 31 January tax return deadline for the tax year of the payment, as HMRC requires (up to about 7 years in all). Stripe keeps its own records under its privacy policy.

Your rights

You can ask for a copy of your data, have it corrected or deleted, ask us to restrict or stop using it, take it elsewhere, and withdraw consent at any time. Your account page lets you download your data and delete your account yourself.

To ask for anything else, or to complain about how we handle your data, email polisher.help@gmail.com. We will confirm we have your complaint within 30 days and tell you the outcome.

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this notice changes, the date at the top changes too. Big changes will be emailed to account holders.