Privacy Policy
Effective date: October 20, 2026
Squire is a PDF workbench operated by BayGull AI. This policy explains what information we collect, how we use it, and the choices you have. The short version: your documents stay in your browser, and we collect only what we need to run accounts and understand how the product is used.
1. Information we collect
Account information. You create an account by signing in with Google. We receive your email address, name and profile picture through our sign-in provider, Clerk, and assign you a user ID. Section 2 describes exactly how that Google data is used.
Your documents. The PDFs you add, every working copy and every result are processed and stored in your browser (IndexedDB). They are never uploaded to our servers. We cannot see, open or recover them. Clearing your browser's site data deletes them.
Usage data. We record which tools you use and in what order, how many pages and how large the files were, how long operations took, and your browser and device type, together with your user ID. We never record file names, document titles, text or contents. To apply plan limits and, on paid plans, to produce your invoice, our payment provider Stripe keeps one entry per document you finish (when, never the document itself).
Error data. When something breaks, we record the error, the steps that led to it (tool names and counts only), how long it took and your user ID. We do not collect your IP address, cookies, request headers or page contents in these reports.
Google Drive (only if you connect it). A future version may let you copy a project to your own Google Drive. If you connect it, Squire will ask for access limited to files it creates, and the files go directly from your browser to your Drive. Nothing changes in this policy until that feature exists and you turn it on.
2. Google sign-in data
You sign in to Squire with your Google account. Through Google's sign-in service we receive your email address, your name and your profile picture, together with a Google account identifier. We ask for nothing else: no access to your Gmail, Google Drive, Calendar, Contacts or any other Google data.
We use this Google data only to:
- create and secure your account and recognise you when you sign in again;
- show your name and picture inside the app;
- label your billing record at Stripe with your name and email so usage is counted against the right account, and reach you about your account.
We do not sell Google user data, do not use it for advertising, do not share it with third parties other than the processors listed in section 4 (Clerk, which holds the account, and Stripe, which holds the billing record), and do not use it to train machine-learning or artificial-intelligence models. Deleting your account removes it from Clerk, Stripe and PostHog. Squire's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. How we use your information
- Provide the service: keep you signed in and tie projects and results to your account.
- Improve the product: learn which tools are used, where people get stuck and how big real-world files are.
- Keep it working: find and fix errors and slow operations.
- Talk to you: answer support requests and send account emails, such as a notice that your plan limit is near.
We do not sell personal information and we do not use it for advertising.
4. Third-party services
| Service | Data | Purpose | Policy |
|---|---|---|---|
| Clerk | Email address, sign-in method, user ID; name and avatar if you sign in with Google; a Gravatar picture if your email has one | Accounts and sign-in | Clerk privacy |
| Vercel | Request logs (IP address, user agent) for the time needed to serve the page | Hosting | Vercel privacy |
| PostHog | User ID, sign-up date and method, which tools you use, page counts and file sizes, durations, browser and device type, one record per finished document sent by our server, your plan and monthly totals, error reports | Product analytics and error monitoring | PostHog privacy |
| Stripe | Your name and email address for the customer record, and one entry per document you finish (when, never the document itself); payment details only if you subscribe to a paid plan | Counting usage against your plan and, on paid plans, billing | Stripe privacy |
| Gravatar | A one-way hash of your sign-in email, sent from your browser to fetch your profile picture | Profile picture | Gravatar privacy |
5. Data retention
- Account data is kept while your account exists and removed when you delete it.
- Documents live only in your browser. Delete a project, clear a library, or clear the site data to remove them. We hold no copy.
- Usage data is retained in PostHog for 12 months, then purged. Stripe keeps its usage and billing records for as long as the law requires.
6. Your rights and choices
- Delete your account: open your account menu in the app and choose Manage account, or email us and we will delete it within 30 days.
- Delete your documents: any time, from the app. They were never with us.
- Access or export: email us for a copy of the account and usage data we hold about you.
- Correct: change your email or name in your account settings.
7. California residents (CCPA / CPRA)
You have the right to know what personal information we hold, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information beyond what the service strictly needs. To exercise these rights, contact manish@redshiftvelocity.com. We will not treat you differently for doing so.
8. Canadian residents (PIPEDA and Quebec Law 25)
You may request access to and correction of your personal information, withdraw consent where it applies, and complain to the Office of the Privacy Commissioner of Canada. Our privacy contact is manish@redshiftvelocity.com.
9. Indian residents (DPDP Act 2023)
As a Data Principal you may obtain a summary of the personal data we process, request correction or erasure, raise a grievance, and nominate someone to exercise your rights on your behalf. Contact manish@redshiftvelocity.com.
10. Children
Squire is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has created an account, email us and we will delete it.
11. Changes to this policy
When this policy changes we update the effective date above. If the change matters to how your data is handled, we will also tell you in the app or by email.
12. Contact
Questions about privacy: manish@redshiftvelocity.com.