Privacy Policy

Last updated: 7 October 2026

The short version. What you type to rewrite is processed in memory and thrown away immediately, never saved, never logged, never used to train AI. We keep only your email, your plan, your purchase history (amounts and dates, never card details), how many rewrites you use each day, your settings, and your Voiceprint (style settings like "short openings", plus a short list of your own recurring words and phrases, kept on your device so rewrites sound like you, and deletable anytime). From extension 1.0.7, unless you turn it off in Settings, Privacy, Unvent also sends anonymous usage counts (how often features were used each day, with no ID and never your text or sites); in the EU and EEA they stay off unless you turn them on. Detailed analytics, which use a random ID on your device, are off unless you turn them on. You can delete your Voiceprint or your entire account anytime from Settings → Privacy. (This is separate from the Google Analytics on our website, our blog and our Chrome Web Store listing page; see section 4.)

1. Who we are

Unvent is a browser extension that rewrites text you are composing, in place, in a tone you choose. Unvent ("we", "us") is made in Singapore, and we are responsible for your personal data under Singapore's Personal Data Protection Act (PDPA).

For any privacy question, access or correction request, or data-protection matter, you can reach our data-protection contact at jobuildsstuff@gmail.com. We will respond as required by law.

2. Your drafts are never stored

The text you ask Unvent to rewrite is processed in memory for the duration of the request and then discarded. It is never stored by Unvent, never written to a log, and never used to train shared AI models. Rewriting happens through a cloud AI model provider, which processes your text only to generate your rewrite and never uses it to train its models. The provider does not retain your text for any general purpose; it may retain inputs briefly and solely to detect abuse or enforce its usage policies, after which they are deleted, and never for any other use. Model names and providers are operational details that do not appear in the product.

2a. Unvent Flow: your voice never leaves your device

Unvent Flow (Flow Mode in the extension) captures your microphone only while you are actively speaking, and transcription happens on your device using your browser's built-in on-device speech recognition. No audio ever leaves your device. To sharpen the result, a feature called Flow+ sends the finished text transcript (never the audio) to Unvent's processor to be cleaned up, handled exactly like drafts under section 2: processed in memory, never stored, never logged, never used to train any model. Flow+ is on by default and you can turn it off anytime in the extension's settings; with it off, the transcript stays on your device and cleanup runs entirely on your device. The cleaned-up transcript is placed into the text field you are writing in and belongs to you; if you later ask Unvent to rewrite that text, it is handled like any other draft under section 2. Microphone access is granted by you through the normal browser prompt and can be revoked at any time in your browser's site settings. If your browser does not support on-device speech recognition, Flow Mode is simply unavailable; Unvent never falls back to cloud speech processing.

3. What we store

Your account email address and your plan type.
Your scheduled plan change and its effective date, if one is pending (used to apply a deferred downgrade at your next renewal). This is a status field only; it contains no draft text.
How many rewrites you use each day, linked to your account (numbers only, never any text).
Your settings (tone, theme, the sites you've turned Unvent off on).
Your Voiceprint: derived style settings (typical sentence length, greeting style, your tone lean) plus a short, capped list of your own recurring words and phrases, learned only when they repeat across several separate drafts. We never store the full text of a draft. Your Voiceprint is stored on your device and you can delete it anytime (Settings → Privacy). These signature words stay on your device on the free plan; on paid plans a few may be sent with your rewrite request so the result sounds like you.
Audience profiles you deliberately create and name (for example, "My manager" with a formality and length preference). These are configuration you write; they are stored in your browser and synced to your browser profile. When you rewrite for a chosen audience, a compiled descriptor is sent to the rewrite model together with your draft so the model can tailor the tone. That descriptor is never stored, logged, or used to train shared AI models: the same promise that applies to your drafts applies to your audience configuration.
Your credit wallet balance and a ledger of credit grants, purchases, and usage (counts and timestamps only, never any text).
Your membership status, including which Founding variant is active (Founding or Founding Plus), if applicable, alongside your Founding Member number and bonus-credit (drip) progress.
Billing identifiers: an opaque Paddle customer identifier, an opaque Paddle subscription identifier, and Paddle's reference for each transaction, refund and chargeback, stored so we can manage your subscription and your purchase history. These are Paddle-generated references only; we never receive or store your card number, expiry, CVV, or any other payment-card data.
Purchase and plan history: a record of each checkout you start, each payment, renewal, refund or chargeback with its amount, and each plan change or cancellation, with dates and a fixed label for the Unvent button that started the checkout (for example the daily-limit prompt or the plan page). It never contains card details or draft text. It is kept while your account exists and deleted when you delete it. We use it to run your plan, resolve payment problems, and learn in aggregate which parts of Unvent lead people to upgrade. Aggregate weekly and monthly totals, not linked to any account, are kept after deletion. Paddle keeps its own records as described in section 5.
Founding and slot accounting: your Founding Member number (if any), the active Founding variant (Founding or Founding Plus), active-slot flag, a reclaim-window timestamp (up to 90 days after a lapse), a pending-slot flag (set briefly if the slot cap is full at the moment of payment), and reserved-slot counts used for slot-cap enforcement. The 500-slot cap is shared across both Founding variants. These are status and accounting fields only; they contain no draft text.
Billing event processing log: a deduplication log of processed billing webhook events (event identifiers and timestamps only) used to prevent double-processing. Billing dispute and chargeback events received from Paddle may also be processed and recorded. No payment-card data or draft text is included.
An internal administration log: a record of account-level actions we take on your account (for example, a credit grant or refund, a Founding status change, or an account freeze), including the type of action and the date and time. This log exists for our own accountability and abuse-response purposes, is never shown publicly, and contains no draft text.
Shared cards (only if you choose to share one): see section 6 below. When you share a card we generate a public link that shows only non-text values (such as your persona type, your Founding Member number if you have one, and aggregate counts), never any text you wrote.
Feedback you choose to send us via the feedback form.

Sign-in tokens are short-lived and stored only in hashed form; the raw token is never kept. We never store your drafts, your rewrites, the "Tune for…" context you type, or recipient names.

4. Analytics

The extension measures how it is used in two separate ways, described in 4a and 4b. The purchase record in section 3 is not product analytics and is kept whether or not analytics are on.

4a. Anonymous usage counts

Starting with version 1.0.7 of the extension, and unless you turn them off, Unvent sends anonymous usage counts: how many times each thing on a fixed list happened on a day. The list is: the extension was opened for the first time, onboarding was finished, an upgrade prompt was shown (and whether it came from the daily limit, audience tuning, or settings), the plan page was opened (and from where), a checkout button was clicked (and which one), the extra-rewrites sheet was opened, and a rewrite was applied. A batch carries no identifier, no link to your account, none of your text and no web addresses; it is added to daily totals when it arrives and is never stored on its own. Your IP address is used only to deliver the request and limit abuse: it is never stored with the counts, our rate limiter keeps a hashed form for at most an hour, and our host keeps short-lived request logs. We will not try to link these counts to you. The counts are on by default and you can turn them off at any time in Settings, Privacy. When your browser's time zone is in the EU or EEA, they stay off unless you turn them on. We use them only to improve Unvent.

4b. Detailed usage analytics

Detailed usage analytics are off by default. If you turn them on in Settings → Privacy, we collect content-free usage events (for example, "a rewrite was applied") linked to a random ID kept on your device (not your name or email) and sent to our analytics provider, PostHog. They never include your draft text or the URLs or specific sites you visit. The one exception is the optional note you type into the feedback prompt: it is sent only because you chose to send it. You can turn detailed analytics off at any time, which deletes the random ID. We do not use your data for advertising and we do not sell it.

Our website at unvent.app, our blog at blog.unvent.app, and our Chrome Web Store listing page (all separate from the extension) use Google Analytics to understand how many people visit, which pages they view, the campaign parameters on links they followed, and, on unvent.app, whether they join the waitlist. Google Analytics sets cookies on your device and, as a measurement provider acting on our behalf, processes usage data including an approximate location derived from your IP address. It never receives your name or the content of anything you type. We do not use this data for advertising and we do not sell it. You can prevent it by blocking analytics cookies in your browser or with a content blocker, or by using Google's Analytics opt-out add-on.

5. Service providers

We use a small number of service providers to run Unvent, each processing data on our behalf, only as needed to operate the service, and under their own data-protection terms:

a cloud hosting and database provider that runs our servers and stores the limited account data listed above;
a cloud AI model provider that performs rewrites and writes short summaries of aggregate service numbers for us (numbers only, never your text or identifiers), and never uses your text to train its models (see section 2);
an email provider that delivers your sign-in links, your purchase and plan confirmations, and service notices such as changes to this policy;
an analytics provider (PostHog) in the extension, used only for detailed usage analytics and only if you turn them on (see section 4b);
Google Analytics on our website, our blog and our Chrome Web Store listing page, used to measure visits and waitlist signups; it sets cookies and processes usage data (including approximate, IP-based location) on our behalf (see section 4);
Paddle, our reseller and merchant of record, if you buy a paid plan or credits; unlike the providers above, Paddle handles your payment details as an independent controller (see below);
Form hosting (Netlify): if you submit the feedback form at unvent.app/feedback, the category you pick, your message, and an optional email address are processed and stored by Netlify (our site host) and delivered to us. We use them only to fix problems and improve Unvent, review submissions as they arrive, and delete them within 12 months. You can ask us to delete your submission earlier by writing to jobuildsstuff@gmail.com.

Some of these providers may process data outside Singapore. Where data is transferred abroad, we take reasonable steps so that it remains protected to a comparable standard, as required by the PDPA. We keep a current list of these providers and will share their names on request at jobuildsstuff@gmail.com.

Payments (Paddle). If you buy a paid plan or a credit bundle, Paddle ("Paddle": Paddle.com Market Limited, or the Paddle affiliate that serves your country, such as Paddle.com Inc. in the US) sells it to you as our reseller and merchant of record. When you start a checkout, we share your account email address and an internal account reference with Paddle so the purchase is linked to your Unvent account. Paddle then collects your payment details, billing address, and tax information directly in its own checkout and processes them as an independent controller for payment, tax, fraud-prevention, and legal purposes. We never receive your card number, expiry, CVV, or any other payment-card data. The checkout page (unvent.app/pay) loads Paddle's checkout, which may set its own cookies for fraud prevention; that page runs no Unvent or Google analytics. Paddle operates under its own privacy policy; see paddle.com/legal/privacy.

6. Shareable cards (only when you share)

Unvent lets you collect persona and Founding Member cards. If you choose to share one, we generate a public link (in the form unvent.app/c/ plus a short code) and a small preview image for it. The shared page is cookieless and shows only the non-text values you chose to share: your persona type, your Founding Member number if you have one, and aggregate counts. It never shows any text you wrote, by design: the link encodes only fixed, numeric values.

A shared link is public and may stay accessible indefinitely; anyone with the link, and search or social-media previews, can see it. Sharing is entirely your choice and nothing is shared until you create a link.

7. Your rights & choices

You are in control of your data. Directly in the product, you can:

Delete your Voiceprint: Settings → Privacy → "Delete my Voiceprint".
Delete your account and all associated data: Settings → Privacy → "Delete account & data".
Turn anonymous usage counts off or on: Settings, Privacy (from extension 1.0.7).
Turn detailed usage analytics on or off: Settings → Privacy (turning them off deletes the random ID).

Under Singapore's PDPA you also have the right to access the personal data we hold about you, to correct it if it is inaccurate, and to withdraw your consent to our use of it (which may mean we can no longer provide parts of the service). Depending on where you live, you may have further rights, for example to access, correct, delete, or port your data, or to object to certain processing. To exercise any of these, email jobuildsstuff@gmail.com and we'll help.

If you are not satisfied with how we have handled your data, you may complain to Singapore's data-protection regulator, the Personal Data Protection Commission (PDPC), at pdpc.gov.sg. Users in the EU or UK may instead complain to their local data-protection authority.

8. Data retention & security

We keep the limited data listed above only while your account exists; deleting your account removes it. Purchase and plan history is kept while your account exists. Some records we are required to retain for a short period for legal, accounting, or fraud-prevention reasons (for example, billing event logs) are kept only for as long as needed for those purposes and then deleted. To limit abuse, our rate limiter keeps your IP address for at most a day.

We protect your data with reasonable security measures, and data is encrypted in transit and at rest. If a data breach occurs that is likely to cause significant harm to you, or that meets the notification threshold under the PDPA, we will notify the PDPC and affected individuals as and when the law requires.

9. Children

Unvent is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has used Unvent, contact us at jobuildsstuff@gmail.com and we will delete the data.

10. Changes

We may update this policy; we'll change the "Last updated" date above and, for material changes, give notice by email or in the product.

11. Contact

Questions or requests: jobuildsstuff@gmail.com.