← Back to home

Privacy Policy

Last updated: May 25, 2026

1. Overview

Grami (“we”, “us”, “our”) operates the Grami Chrome extension and the website at grami.chat. The Grami Chrome extension is managed by WeNext Coder. This policy explains what data we collect, why we collect it, and how it is protected. We do not sell your data.

2. Data the Extension Collects

  • Text you submit — text you paste or select for grammar fixing, reply generation, or chat. This text is sent to our server (cloud mode) or directly to OpenAI / Google (BYOK mode) to generate a response. We do not store the content of your messages beyond what is needed to return the response.
  • Chat threads — conversation history is stored locally in your browser via chrome.storage.local. It never leaves your device unless you explicitly send a message.
  • Settings — your selected theme, connection mode, and (if BYOK) your own API key are stored locally in chrome.storage.local on your device. We never transmit your personal API key to our servers.
  • Session token — if you sign in with a Grami account, a short-lived JWT is stored locally and sent with each request to authenticate you. It contains only your user ID.

3. Data the Website Collects

  • Account information — email address and display name when you create an account or sign in with Google OAuth.
  • Usage counts — number of AI requests made per day, used to enforce your plan's daily quota. No message content is stored.
  • Payment information — billing is handled by Lemon Squeezy. We do not store card details. We receive subscription status and email from Lemon Squeezy webhooks.

4. How We Use Your Data

  • To provide and improve the AI features of the extension.
  • To enforce daily usage quotas and manage your subscription.
  • To authenticate you securely across sessions.
  • We do not use your data for advertising or sell it to third parties.

5. Third-Party Services

  • OpenAI — text submitted in OpenAI mode is sent to OpenAI's API. Subject to OpenAI's Privacy Policy.
  • Google Gemini — text submitted in Gemini mode is sent to Google's Generative Language API. Subject to Google's Privacy Policy.
  • Neon (database) — account and quota data is stored in a Neon-hosted PostgreSQL database.
  • Lemon Squeezy — payment processing and subscription management.

6. Host Permissions

The extension requests access to <all_urls> solely to detect text selections in inputs and textareas on any page and display the floating Fix button. We do not read page content, track browsing history, or transmit any page data without explicit user action.

7. Data Retention

Chat threads and settings stored in chrome.storage.local remain on your device until you clear them or uninstall the extension. Account data on our servers is retained while your account is active and deleted within 30 days of account deletion upon request.

8. Security

API keys stored in our database are encrypted with AES-256-GCM before storage. All communication between the extension and our servers uses HTTPS. Session tokens are short-lived JWTs verified server-side on every request.

9. Children's Privacy

Grami is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Contact Us

If you have any questions about this Privacy Policy, or your personal data, please contact us:

11. Changes to This Policy

We may update this policy periodically. The “Last updated” date at the top will reflect any changes. Continued use of Grami after changes constitutes acceptance.