Privacy Policy
KnightWriter — an AI-powered English writing assistant
Operated by Fordhsons Studio (UDYAM-MH-33-0765892)
503, Woodpark Building, Rodas Enclave, Hiranandani Estate, Thane, Maharashtra 400607, India
Effective date: July 12, 2026
Last updated: July 12, 2026
1. Overview
KnightWriter is a browser extension that helps you write clearer, more natural English. We built it with a simple privacy principle: your writing is yours. We process your text to correct it and immediately discard it. We do not read it, store it, sell it, or use it to train AI models.
This policy explains what data we collect, why we collect it, who sees it, and what rights you have.
2. What Data We Collect
2.1 Data You Provide
| Data | Purpose | Stored? |
|---|---|---|
| Email address | Account creation and login | Yes — in our database |
| Payment information | Subscription billing | No — handled entirely by Paddle (see Section 5) |
2.2 Data We Collect Automatically
| Data | Purpose | Stored? |
|---|---|---|
| Account tier and status | Determining your plan (trial / pro / expired) | Yes — one row per user |
| Daily fix count | Enforcing usage limits | Yes — resets daily |
| Fix count date | Resetting the daily counter | Yes |
| Extension install and usage events | Understanding product quality (e.g. fix acceptance rate) | Yes — in PostHog analytics, anonymised |
2.3 Data We Do NOT Collect
- Your text. The text you submit for correction is sent to our AI processing service and immediately discarded after the corrected version is returned. It is never written to any database, log file, or storage system.
- Your browsing history.
- The specific websites you use KnightWriter on.
- Any content from pages you visit beyond what you explicitly submit for correction.
- Payment card numbers, bank details, or any financial data.
3. How We Process Your Text
When you use KnightWriter to correct a piece of text, the following happens:
- Your text is sent over an encrypted HTTPS connection to our processing server (Cloudflare Worker, located in Singapore).
- Our server forwards the text to Google's Gemini AI API for correction.
- The corrected text is returned to your browser.
- The text is discarded. Nothing is written to any database or log.
Our server logs are structured JSON and explicitly exclude user text. No human at Fordhsons Studio reads your writing.
Google's data handling: Google processes your text under Google's Cloud Data Processing Addendum. Google has committed that Gemini API inputs are not used to train Google's models when accessed via the API. For Google's current data retention terms, see Google Cloud's data processing terms.
4. Sub-Processors
We use the following third-party services to operate KnightWriter. Each processes only the data necessary for their function.
| Sub-Processor | Role | Data Shared | Location |
|---|---|---|---|
| Google (Gemini API) | AI text correction | Your submitted text (not stored by us after processing) | USA |
| Supabase | User database and authentication | Email, account tier, fix counts | USA (AWS us-east-1) |
| Paddle.com | Payment processing and subscription management | Your payment details and billing information | UK / USA |
| Cloudflare | Server infrastructure and DDoS protection | IP address (standard network traffic) | Global CDN |
| Vercel | API hosting | Account status requests (no user text) | USA |
| PostHog | Product analytics | Anonymised usage events (no text content) | USA |
| Resend | Transactional email | Email address | USA |
We do not sell, rent, or share your personal data with any other third party for marketing or commercial purposes.
5. Payment Data
We do not store or process your payment card details. All payment processing is handled by Paddle.com, our Merchant of Record. When you subscribe, you are entering into a payment relationship directly with Paddle. Paddle collects and stores your card details under their own privacy policy and PCI DSS compliance.
Fordhsons Studio receives only a Paddle customer ID and your subscription status — not your card number, expiry date, or CVV.
Paddle's privacy policy: paddle.com/privacy
6. Cookies and Local Storage
KnightWriter does not use browser cookies.
The extension uses chrome.storage.local (or the Safari equivalent) to store:
- Your authentication token (JWT) — so you remain logged in between sessions
- Your cached account status — refreshed every 60 seconds from our server
- Your extension preferences (tone mode, disabled sites)
None of this data leaves your device except for the JWT token used to authenticate API requests.
Our marketing website (knightwriter.ai) may use analytics cookies from PostHog to understand page visits. You will be presented with a consent choice when you first visit.
7. Data Retention
| Data | Retention period |
|---|---|
| Your account (email, tier, fix counts) | Retained while your account is active |
| Account data after deletion request | Deleted within 30 days |
| Server logs | 7 days (structured JSON, no user text) |
| Analytics events (PostHog) | 12 months |
| Payment records | 7 years (required by Indian accounting law) |
Your text is never retained. There is no retention period to set — it is discarded in real time.
8. Your Rights
All Users
You have the right to: - Access the personal data we hold about you - Correct inaccurate data - Delete your account and associated data - Export your data in a portable format
To exercise any of these rights, email: hello@fordhsons.com
We will respond within 30 days.
8A. Additional Rights — Indian Residents (DPDP Act 2023)
If you are located in India, you have additional rights under the Digital Personal Data Protection Act, 2023:
- Right to information about how your data is processed (this policy fulfils this obligation)
- Right to correction and erasure — contact us at hello@fordhsons.com
- Right to grievance redressal — if your request is not resolved within 30 days, you may contact the Data Protection Board of India once it is operational
- Right to nominate a person to exercise your rights in the event of your death or incapacity
Consent: By creating an account, you provide consent for us to process your email address and account data for the purposes described in this policy. You may withdraw consent at any time by deleting your account.
Data Fiduciary: Fordhsons Studio, 503 Woodpark Building, Rodas Enclave, Hiranandani Estate, Thane, Maharashtra 400607. Contact: hello@fordhsons.com
8B. Additional Rights — EU/EEA Residents (GDPR)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):
Lawful basis for processing: - Account data (email, tier): processed on the basis of contract performance — necessary to provide the service you signed up for - Analytics events: processed on the basis of legitimate interests — understanding product quality to improve the service
Your GDPR rights: - Right of access (Article 15) - Right to rectification (Article 16) - Right to erasure (Article 17) - Right to restriction of processing (Article 18) - Right to data portability (Article 20) - Right to object (Article 21)
To exercise these rights: hello@fordhsons.com
Data transfers: Your data is processed by sub-processors located in the USA. These transfers are made under Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR Chapter V. Supabase, PostHog, Vercel, and Google Cloud all maintain SCCs.
You also have the right to lodge a complaint with your local supervisory authority if you believe your data is being processed unlawfully.
9. Children's Privacy
KnightWriter is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at hello@fordhsons.com and we will delete it promptly.
10. Security
We implement the following technical measures to protect your data:
- All data in transit is encrypted via HTTPS/TLS
- Authentication tokens are stored in
chrome.storage.local, not inlocalStorage - API keys are stored in server-side environment variables and never included in the extension bundle
- Row-Level Security (RLS) on our database ensures users can only access their own data
- Server logs contain no user text
- Access to production systems is restricted to the operator (Fordhsons Studio)
No method of internet transmission is 100% secure. In the event of a data breach affecting your personal data, we will notify you and relevant authorities within 72 hours as required by applicable law.
11. Changes to This Policy
If we make material changes to this policy, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of KnightWriter after the effective date of changes constitutes acceptance of the updated policy.
12. Contact
For any privacy questions, data requests, or complaints:
Fordhsons Studio
503, Woodpark Building, Rodas Enclave
Hiranandani Estate, Thane, Maharashtra 400607
India
Email: hello@fordhsons.com
UDYAM Registration: UDYAM-MH-33-0765892
We aim to respond to all requests within 30 days.