^polish← Back

Privacy Policy

Last updated: 28 May 2026

Polish is a desktop app by RELAY X that rewrites, fixes and translates selected text using AI, right inside any app on macOS, Windows and Linux. We built it to process as little of your data as possible. This policy explains what we process, why, the legal bases under the GDPR, who we work with, and your rights.

In short: no account, no analytics, no ad tracking. The text you transform is never stored on our servers or used to train any model. In Local mode nothing leaves your device at all.

1. Who is responsible

The data controller is RELAY X, SAS, 35 rue de Rabastens, 31500 Toulouse, France (RCS Toulouse 935 082 313). For any privacy question, contact us at hello@polish.work.

2. The website (polish.work)

The website is a static page. We set no tracking cookies and run no analytics or advertising tools. Your language preference is stored locally in your browser and is never sent to us. Fonts are delivered by Google Fonts, which means Google receives your IP address when a page loads, under Google's privacy policy. The site is hosted by Vercel (see our Legal Notice).

3. The app: what happens to your text

Polish offers three ways to process text. You choose which is active:

  • Local mode: everything runs on your own device using on-device open-source models (e.g. Gemma 3, Qwen 2.5, Phi-4 Mini). No request is sent anywhere, not even to us.
  • Your own API key: your selected text is sent directly from your device to the AI provider you configure (such as Anthropic, Groq or Mistral). Polish never receives it. Your API key is stored only in your operating system's secure store (Keychain on macOS, Credential Manager on Windows, Secret Service on Linux) and is never transmitted to us.
  • Polish Cloud (hosted): your selected text is routed through our server to Anthropic (Claude) under Zero-Data-Retention terms. We do not log, store, or train on your text; it is processed in memory to produce the result and then discarded.

4. The free tier

To enforce the free-tier limit (20 transformations per month), Polish generates a random, anonymous installation identifier on your device and sends it with cloud requests solely to count usage. It is not linked to your name, email, or any account, and we do not use it to identify you.

5. Purchases & licensing

Purchases (the Pro subscription) are handled by our reseller and Merchant of Record, Lemon Squeezy. When you buy, Lemon Squeezy collects and processes your name, email, billing details, payment method and country (for tax) under its own privacy policy. From Lemon Squeezy we receive only what we need to deliver and support your license: your email, license key, plan and country. Lemon Squeezy also hosts the customer portal (passwordless) where you manage or cancel your plan.

To enforce the per-license device limit (2 devices), our server stores an irreversibly hashed version of your license key together with a device identifier. We cannot recover your license key from this hash.

6. Accessibility permission

Polish uses your operating system's Accessibility API to read the text you select and write the result back into the active app. This happens locally and is used only for the core feature, never logged, transmitted, or used for anything else. You can revoke this permission at any time in your system settings.

7. Support

If you email us, we keep your message and email address to reply to you and for our records.

8. Legal bases for processing (GDPR Art. 6)

  • Performance of a contract: delivering the app, your license, and the cloud processing you request.
  • Legitimate interests: enforcing the free-tier quota and device limit, preventing abuse, and keeping the service secure.
  • Legal obligation: keeping accounting and invoicing records (handled by Lemon Squeezy).
  • Consent: when you choose to contact us.

9. Who we share data with

We rely on a small set of carefully chosen providers, acting as our processors:

  • Vercel: website hosting (USA)
  • Cloudflare: Polish Cloud gateway & device-limit storage (USA / global)
  • Anthropic: AI inference for Polish Cloud, under Zero-Data-Retention (USA)
  • Lemon Squeezy: payments, invoicing, license delivery, customer portal (USA)
  • Google: font delivery on the website (USA)

When you use your own API key, the provider you choose acts under your own relationship with them, not ours.

10. International transfers

Some of these providers are located outside the EU/EEA, mainly in the United States. Such transfers are framed by the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework where applicable.

11. How long we keep data

  • Transformed text: not retained; processed in memory and discarded.
  • Free-tier install identifier: kept only to count monthly usage, then deleted when no longer needed.
  • License & order data: kept for the life of your license; invoices are retained by Lemon Squeezy for the statutory accounting period (10 years under French law).
  • Support emails: kept as long as needed to handle your request, then deleted.

12. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to certain processing, and to withdraw consent at any time. To exercise these rights, email hello@polish.work. You also have the right to lodge a complaint with the French data-protection authority, the CNIL (cnil.fr).

13. Children

Polish is not directed at children under 15 (the digital-consent age in France) and we do not knowingly collect their data.

14. Crash reports

If Polish crashes, your operating system may offer to send a report to Apple or Microsoft under their own policies. We receive no crash data unless you choose to send it to us.

15. Changes

If this policy changes materially, we will update the date above. Continued use of the app after a change means you accept the updated policy.

16. Contact

Questions about your privacy? Reach us at hello@polish.work.

© 2026 Polish · RELAY X
PrivacyTermsMentions légales