Gramai

Privacy policy

Last updated: 2026-09-12

What Gramai does

Gramai is a browser extension for Chrome, Firefox and Safari. It rewrites the text you select: fix the grammar, make it professional, friendly or concise, or translate it into any of 30+ languages. It comes in four packages. On Free (10 actions per installation), Basic and Pro the rewrite runs on Gramai's own key through Gramai's server, so you need no API key of your own. On Own key you use your own API key with the AI provider you pick, and Gramai's server is not involved at all.

Data Gramai sends

When you pick a Gramai action from the right-click menu, the text you selected goes to one place and no other:

  • On Free, Basic and Pro, to Gramai's own server (see below), which passes it to OpenAI and returns the rewrite.
  • On Own key, straight from your browser to the AI provider you set up (for example OpenAI, Anthropic, Google, DeepSeek, Alibaba Cloud, Moonshot, Z.ai, MiniMax, or a custom endpoint you entered). No Gramai server is involved here, and we never see the text.

Gramai's server (Free, Basic and Pro)

The hosted packages are the one case where your text passes through Gramai. It goes to Gramai's own server, a Cloudflare Worker at api.gramai.dev, which forwards it to OpenAI using Gramai's key and sends the rewrite back. We do not store your text and we do not log it, at any point. OpenAI processes it under its own terms, and Cloudflare hosts the server under its own terms.

Besides the text, a request like that carries two things:

  • An installation id, a random identifier created in your browser the first time Gramai needs one and stored with your settings. It is there to count the 10 free actions per installation, and it identifies nothing else: not you, not your device, not your browsing.
  • Your license key, once you subscribe to Basic or Pro, so the server can confirm the subscription with Lemon Squeezy and count that day's usage against it.

The server stores counters, and only under a SHA-256 hash of the value they belong to: free actions used, per hashed installation id. Today's action and character count per hashed license key, together with the cached "is this subscription active" answer from Lemon Squeezy. Requests in the current minute per hashed IP address, which is a rate limit and is kept about two minutes. And a running count of all the characters Gramai sent to OpenAI today. The daily counters expire within days. The free counter is kept, because it is what makes the 10 actions a one-off per installation. Gramai's server never writes your text, your license key, your installation id or your IP address in a readable form, and nothing about the content of a request is logged. Cloudflare, which hosts the server, sees requests under its own terms (see above).

Basic and Pro subscriptions are sold and billed by Lemon Squeezy, the same as the one-time Own key purchase. You cancel or change a subscription from Lemon Squeezy's "My orders" page.

Data Gramai stores

  • Settings (provider, model, base URL, language, menu options) are stored in the browser's extension storage and synchronised across your devices by the browser's own sync (for example Chrome Sync).
  • API keys exist only on Own key, where you enter one, and they are stored in the browser's extension storage. If "Sync API keys across my devices" is on, which is the default, they are synchronised the same way. If it is off, they stay only on the current device. Safari does not sync API keys between devices.
  • Your license key and installation id are stored in the browser's sync storage alongside the settings.

We collect no analytics, we do not log your text, and there are no accounts.

Licenses

A Basic, Pro or Own key license key is stored in your browser's sync storage, the same as your settings. When you activate a license, Gramai sends the license key and a short device label (for example "Chrome on macOS") to Lemon Squeezy to confirm the license and record which devices it's active on. Lemon Squeezy is the merchant of record for Gramai purchases. It handles checkout, receipts and your payment details directly, and Gramai never sees your card number. See Lemon Squeezy's privacy policy for how they handle payment data.

Permissions

  • contextMenus, to add the Gramai items to the right-click menu.
  • activeTab, scripting, to read the selection and replace text in the tab where you used the menu, and only after you click a Gramai menu item.
  • storage, to save your settings, your API key if you use Own key, your license key and the installation id the free actions are counted against.
  • Access to api.gramai.dev, which is Gramai's own server, so Free, Basic and Pro work without any setup. It is granted when the extension is installed, and in Firefox the options page asks for it. It covers no other website.
  • Optional host permission for the AI provider's API domain you select on Own key, requested when you choose that provider.

Third parties

On Free, Basic and Pro your selected text is processed by OpenAI, reached through Gramai's server hosted by Cloudflare, under OpenAI's own terms and privacy policy. On Own key it is processed by the provider you chose, under that provider's terms and privacy policy. Purchases and license activation are processed by Lemon Squeezy, under its terms and privacy policy.

Contact

Any questions about this policy? Write to support@gramai.dev.