Privacy Policy

Last updated: March 29, 2026

Your writing is yours. We don't sell your data, use it for advertising, or train AI models on it.

Y10.ai ("Y10," "we," "our") provides an AI-powered grammar and style checker for Google Docs. This policy explains what data we collect, how we use it, and the choices you have.


What We Collect

Text you write. When you use Y10 in Google Docs, portions of your document text are sent to our servers for grammar and style analysis. We do not store your text after processing is complete — it is analyzed and discarded.

Account information. If you sign in with Google, we receive your name, email address, and profile picture from Google. This is used solely to identify your account and remember your settings across devices.

Settings and preferences. Your grammar and style preferences (such as which categories are enabled) are stored to provide a consistent experience.

Local cache. Grammar results are cached on your device to avoid re-processing text you've already checked. This cache is automatically deleted on a rolling basis.

What We Don't Collect

How We Use Your Data

To provide grammar suggestions. Your text is sent to our servers, processed by our AI service, and grammar suggestions are returned to your browser. Text is not stored after processing.

To maintain your account. If you sign in, we use your account information to save your preferences and provide a consistent experience across sessions.

We do not use your data for any other purpose. We do not profile you, target you with ads, or share your data for marketing.

AI and Model Training

Your text is not used to train or improve AI models. Our AI infrastructure contractually prohibits the use of customer data for model training. Your writing is processed and discarded — it is never added to any training dataset.

Data Security

All data is encrypted in transit and at rest. Our servers run on enterprise-grade cloud infrastructure that is independently certified to SOC 2, ISO 27001, and GDPR standards. We do not operate our own physical servers.

Your text is never reviewed by humans at Y10 or our infrastructure providers.

Third-Party Services

Google Cloud / Vertex AI. Grammar analysis is performed using Google's Vertex AI (Gemini) API, hosted on Google Cloud Run. Document text is transmitted to Google's infrastructure for processing. Google Cloud's data processing terms prohibit the use of customer data for model training. Your text is processed and discarded — it is never stored by Google or by us. See Google Cloud Privacy.

Firebase (Google). User authentication is managed through Firebase Authentication, a Google service. When you first install Y10, the extension creates a temporary anonymous Firebase session with no personal data attached, so grammar checking works immediately. If you later sign in with Google, this session is upgraded to your Google account. Firebase receives and stores your user ID and, if you sign in with Google, your email address and display name. See Firebase Privacy.

Google Sign-in. If you choose to sign in, the OAuth flow is handled by Google. We receive only your basic profile information (name, email, profile picture). See Google's Privacy Policy.

Stripe. If you purchase a paid plan, payments are processed by Stripe, Inc. We do not collect or store your credit card information — it is handled directly by Stripe. See Stripe's Privacy Policy.

PostHog. We use PostHog for product analytics to understand how the extension and website are used. PostHog collects usage events (such as when the extension is installed, when a grammar check is performed, or when you sign in). On our website, PostHog uses cookies to track anonymous sessions. In the extension, when you sign in with Google, your Firebase user ID and email address are associated with your usage events so we can understand how identified users engage with the product over time. PostHog processes this data on servers in the United States. We do not use this data for advertising. See PostHog's Privacy Policy.

Google Analytics. Our website uses Google Analytics (via Google Tag Manager) to measure page traffic and visitor behavior. Google Analytics uses cookies and collects anonymous usage data. See Google's Privacy Policy.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Data Retention

Your Choices

Children's Privacy

Y10 is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Where We Operate

Y10 is operated from the United States. If you use Y10 from outside the US, your data may be transferred to and processed in the United States, where our servers are located.

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision. For material changes, we will notify you through an extension update or a notice within the product.

Contact

If you have questions about this policy or your data, contact us at:

recruit@y10.ai