PhraseSafePrivacy policy
Last updated Oct 18, 2026.
This policy explains what PhraseSafe collects, why, who processes it and your choices. We collect as little as we can. We don't sell or share personal information for advertising, and we don't use ad trackers or third-party analytics. Contact: phrasesafe@mail.grokbot.com.
What we collect and why
| Data | Why | Kept |
|---|---|---|
| Listing titles and tags you check (your CSV file itself is read in your browser and never uploaded) | To match them against trademark records | Not stored. We keep only a count of listings scanned. |
| Usage counters: your IP address (IPv6 shortened to its /48 network) or license-key hash, with the date and a count | Free-tier and plan limits, abuse prevention | Deleted after about 30 days |
| License key (stored as a one-way hash plus its last 4 characters), plan, Lemon Squeezy license and activation IDs | To unlock your paid plan | While your key is active, then as long as needed for billing records |
| Order and subscription data from Lemon Squeezy: name and email, plan, price, tax, status, renewal and end dates, card brand and last 4 digits. We never receive full card numbers. | To provide your plan, handle refunds and support, and keep billing records | As long as needed for billing, tax, refund and dispute records |
| Watched phrases, watched marks and on-site alerts (Pro) | To show your alerts | Until you remove them or ask us to delete them |
Referral tag from links with ?ref= (for example a partner or directory name), counted per day | To know which channels send visitors and sales | Daily totals with no IP address or personal data attached. The tag is passed to checkout so a purchase can be credited to the channel. |
| Emails you send us | To answer you | As long as needed to handle your request |
Cookies and browser storage
ps_ref(30 days) stores the referral tag from a?ref=link, andps_seen(2 days) keeps a returning visitor from being counted twice a day. Both are first-party only, contain no personal data and are not used for advertising. We don't set them for visitors in the EU/EEA, UK or Switzerland, where they would need consent. There, we count page views without storing anything on your device.- If you paste a license key, it's saved in your browser's local storage (
ps_key) so you stay unlocked. That's needed for the feature you asked for, and you can remove it anytime with “Remove key from this browser” on the dashboard. - Lemon Squeezy sets its own cookies on its checkout and portal pages, under its privacy policy.
Who processes data for us
- Cloudflare hosts the site and our database. It processes IP addresses and request data to deliver and secure the site.
- Lemon Squeezy is the merchant of record for paid plans. It collects your payment, billing and tax details directly, under its own privacy policy, and shares the order details listed above with us.
- Our support mailbox provider handles emails sent to phrasesafe@mail.grokbot.com.
- We fetch trademark status pages from the USPTO. Those requests don't include any of your data.
These providers may process data in the United States and other countries. Where required, they use safeguards such as the EU Standard Contractual Clauses. We may disclose information if the law requires it.
Your rights
You can ask to access, correct, delete or get a copy of your personal information, or object to or restrict how we use it. Email phrasesafe@mail.grokbot.com from the address you used to buy, or include your license key's last 4 characters, so we can find your records. We'll respond within 30 days (45 days where the law allows). We may need to keep some billing records to meet legal obligations. If you're in the EU/EEA or UK, you can also complain to your local data protection authority.
Legal bases (EU/UK GDPR): performing our contract with you (paid features and support), our legitimate interests in running a secure, fairly limited service and knowing which channels work (usage counters, aggregate referral counts), and legal obligations (billing records).
California and other U.S. state privacy rights: we don't sell or share personal information (as defined in the CCPA/CPRA) and don't use it for cross-context behavioral advertising. We don't collect sensitive personal information. You have the right to know, delete and correct your personal information, and we won't discriminate against you for using these rights.
Children
PhraseSafe is a tool for businesses. It isn't directed to children under 16, and we don't knowingly collect personal information from them. If you think a child has given us information, email us and we'll delete it.
We don't send marketing, login or alert emails. Lemon Squeezy sends your receipts and subscription emails.
Changes
We'll post any changes here with a new date. If we make a material change to how we use personal information, we'll say so on the site before it takes effect.