Privacy Policy
Last updated: May 9, 2026
1. What we collect
How to Talk Corporate is designed to work without an account. We collect only the data necessary to enforce the free tier and prevent abuse:
- Hashed IP + fingerprint — a composite one-way hash derived from your IP address, User-Agent header, and Accept-Language header. This is used exclusively for rate limiting (10 rewrites per 24-hour rolling window). The raw inputs are never stored, and the hash cannot be reversed to identify you.
- Usage count — the number of rewrites your hashed identity has used in the current window. Stored in Redis with a 24-hour TTL, then automatically purged.
- Aggregate analytics — anonymised counts of which tone presets are used across all users. No personal data is included. Retained for 90 days.
2. What we NEVER collect
- Your name, email address, or any account identifier
- Your message content (input or rewritten output)
- Cookies or tracking identifiers
- Your raw IP address in long-term storage
3. How message content is handled
When you submit a message for rewriting, it is sent to our rewrite API, processed by the ToneOrchestrator agent pipeline (powered by Anthropic Claude Haiku), and the rewritten result is returned to you. The message content is never stored or logged by How to Talk Corporate. It is processed in memory only and discarded immediately after the response is returned.
The Anthropic API receives your message for the purpose of performing the rewrite. Anthropic does not use your content to train their models. See Anthropic's Privacy Policy for their data handling commitments.
4. Cookies and local storage
How to Talk Corporate does not use cookies or any form of client-side tracking. The browser extension may use chrome.storage.local to persist your remaining daily usage count so the counter survives a browser restart. This data never leaves your device. The web app stores nothing on the client.
5. Data retention
| Data type | Retention |
|---|---|
| Hashed IP + fingerprint | 24 hours (rolling window) |
| Usage count | 24 hours (Redis key TTL) |
| Aggregate analytics | 90 days |
| Message content | Never stored |
6. Your rights
Under the GDPR (EU), India DPDP Act 2023, and CCPA (California), you have the right to access, correct, or delete personal data. Because How to Talk Corporate stores only hashed, non-reversible identifiers, we cannot identify or locate data belonging to a specific individual. However, all stored data is automatically purged within 24 hours.
7. Third-party services
How to Talk Corporate uses the following third-party services. Each processes only the data described above and is contractually prohibited from using it for any purpose other than providing the service:
- Anthropic (Claude API) — LLM inference for message rewrites. See the Anthropic privacy policy linked above.
- Upstash (Redis) — serverless rate-limiting storage. No message content is stored.
- Vercel — hosting for the web application. Vercel may process IP addresses and request metadata for operational purposes.
8. Contact
If you have questions about this policy, open an issue at github.com/itsmuskanagarwal/professional-message-writer.