Shellway ("we", "our", "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.
We collect:
Context you share with the AI during a session is relayed to our inference provider (Anthropic) for that inference only and is not logged or retained by Shellway.
We use account and usage data to provide and improve the service, enforce plan limits, send transactional emails (password reset, receipts), and detect abuse. We do not sell your data or use it for advertising.
| Anthropic | AI inference provider. Context sent per request; not retained. |
| Razorpay / Stripe | Payment processing. Governed by their own privacy policies. |
| Cloudflare | DDoS protection and DNS. Processes request metadata. |
| Postmark | Transactional email delivery. |
Account data is retained while your account is active. Usage metadata is aggregated and anonymized after 90 days. You may request deletion of your account at any time by emailing privacy@getshellway.com.
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, object to its processing, or request a copy in a portable format. Contact us at privacy@getshellway.com to exercise these rights.
Data in transit is encrypted with TLS 1.3. Account credentials are stored as salted bcrypt hashes. We conduct periodic security reviews and promptly disclose significant vulnerabilities affecting user data.
Shellway is not directed at children under 13. We do not knowingly collect personal data from children.
We will notify registered users by email of any material changes to this policy at least 14 days before they take effect.
Questions about this policy: privacy@getshellway.com.