Effective date: September 1, 2026
Grammar AI Lab ("GAIL," "we," "us," or "our") is operated from Bangkok, Thailand. This Privacy Policy explains how we collect, process, retain, share, and protect personal data when you use our AI-assisted language service.
Depending on how you use the Service, we may collect account information such as your email address, authentication and session identifiers, device or browser information used to show and protect active sessions, limited IP-derived security signals, usage data needed to enforce plan limits, and messages sent to support.
We process User Content — including text, documents, prompts, instructions, and requested outputs — to provide the feature you ask us to perform. If history or saved-content features are enabled, we may store the content or output until you delete it, turn off the feature, or the applicable retention period expires.
We use multiple third-party AI service providers to power different features of the Service. When you submit User Content for an AI-powered feature, we transmit it to one of these providers solely to process your request and generate the requested output.
Whether your content may also be used by that provider to improve or train their models depends on which specific feature you use and which provider and account tier we use for it at the time:
We do not publish which specific providers we use or which category a given feature falls into, as this is commercially sensitive information. If you would like to know whether a specific feature you use falls into the training or non-training category, contact us at the email below and we will tell you directly. We review these arrangements periodically and may change providers or tiers as the Service develops; if a change affects whether your content may be used for training, we will update the "Last updated" date above.
We may share information with carefully selected service providers that help operate the Service, including hosting and infrastructure providers, authentication and security providers, email delivery providers, payment providers when applicable, and AI providers. They may process information only for authorized purposes and subject to applicable contractual or legal protections. We may also disclose information where required by law, to protect rights or safety, or in connection with a lawful business transfer.
We retain personal data only for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. Retention may vary by data type and system. You may delete your account and, where available, stored conversations or content through account controls.
Deletion from active systems may be followed by scheduled removal from backups and downstream systems. Some information may be retained for a limited period for security, fraud prevention, legal requirements, dispute resolution, or backup integrity. We will not promise immediate deletion from every system when that is not technically or legally possible.
Subject to applicable law, you may have rights to access, correct, delete, obtain a copy of, restrict, object to, or withdraw consent for certain processing of your personal data. You may manage available account data, sessions, and deletion choices in the Service. For other requests, contact [email protected]. We may need to verify your identity before responding.
You must be at least 13 years old to create an account. GAIL's 13+ rule is its minimum account age; local law may impose a higher age, require parental or guardian authorization, or require additional protection. We do not knowingly permit self-service accounts for persons under 13. If we learn an account does not meet applicable eligibility requirements, we may suspend or delete it and take appropriate steps to protect the user's information.
We use reasonable administrative, technical, and organizational measures designed to protect information, including encrypted transport, access controls, and secure credential practices. No system is perfectly secure; you should use a strong, unique password and protect your account credentials.
Our service providers may process information in countries other than the country where you live. Where applicable, we will use appropriate safeguards or rely on a lawful transfer mechanism for international data transfers.
We may update this Policy to reflect changes in the Service, law, or our practices. We will publish the updated version with a revised effective date and provide additional notice when required or appropriate.