Legal
Privacy policy
What we collect, what we never keep, who else touches it, and how to get rid of it.
Last updated 7 November 2026
Zero data retention on the AI path
MySmartPress processes AI requests statelessly. The text you send for an AI action travels to the model, the result comes back, and the request is discarded — it is not logged, cached or stored by our AI layer or by the model provider, and it is never used to train any model. What we keep is only what you choose to keep: the articles saved in your workspace stay there until you delete them, along with counts of how many AI actions you have used against your plan.
Enterprise-grade model access
We use enterprise-grade model endpoints only (Google Gemini through Vertex AI, reached via Cloudflare). On those endpoints client data is isolated per request, is not retained by the provider, and is never used to train public AI models.
What we collect
When you sign in with Google, we collect your account name, email address and avatar image. When you use the product, we store the articles you save and edit, and counts of your AI action usage against your plan’s allowance. We do not collect your card details — Razorpay does, and we never see them.
Sessions and cookies
Signing in stores one session token in your browser’s local storage, and sets no cookie. It carries an opaque session identifier and a signature over that identifier — never your user id, your email, or anything meaningful on its own. The database row is what grants access, so a session can be revoked immediately. On an individual plan only one session is live at a time: signing in on a second device ends the first. A second local storage entry remembers which organisation you last had active; it is only a hint, and every request re-checks your membership. There are no advertising or analytics cookies.
What is retained, and for how long
Account data and saved articles are retained for as long as your organisation’s account is active. Article version history is kept for the period your plan provides; when a plan lapses, snapshots older than the free limit are retained for a further 30 days before pruning. AI request payloads are not retained at all — see the first section.
Who else touches the data
Cloudflare hosts and runs the application and stores its data. Google provides the models that generate and refine text, through enterprise endpoints, and provides the sign-in. Razorpay processes payments and receives what it needs to take one.
Requesting deletion
To request deletion of your account and associated data, contact us at the address on the contact page. Deleting an organisation removes its articles, version history and usage records.
Changes to this document
When this document changes materially, the date at the top changes with it.
Questions about this document go to the contact page.