Privacy Policy

1. About this policy

This Privacy Policy explains how Pathway for Thought LLC (“WordSatori,” “we,” “us,” or “our”) collects, uses, shares, retains, and protects information when you use:

• The WordSatori website and web applications
• The WordSatori iOS application
• The WordSatori Chrome extension
• WordSatori account, vocabulary, writing-support, and communication services

This policy applies to information collected through WordSatori services and does not apply to third-party websites, applications, or services that WordSatori does not control.

By using WordSatori, you acknowledge the practices described in this policy. Where consent is required by applicable law, we will request it separately.

2. Information we collect

We collect only information reasonably needed to provide, secure, improve, and support WordSatori.

2.1 Account and identity information

Depending on how you create and use your account, we may collect:

• Name or display name
• Email address
• Password credential or authentication-provider identifier
• Profile preferences
• Authentication and account-recovery events
• Information needed to verify or secure an account

WordSatori does not store passwords in readable form. Passwords should be handled by WordSatori's selected authentication provider where that provider owns identity management.

2.2 Vocabulary and learning information

To provide WordSatori's learning features, we may collect and process:

• Words or phrases you capture
• The word form you captured
• Definitions, parts of speech, and contextual examples
• The source or category associated with a captured word
• WordBank status, learning progress, mastery, retention, and review state
• Recognition, exposure, lookup, production, and other learning events
• Your selected learning preferences

This information is associated with your account so that WordSatori can synchronize learning progress across supported devices.

2.3 Reading and writing context

Features such as WordCapture, WordHits, NewsBites, and WordAssist may process text that you choose to submit, capture, highlight, or use with the feature.

Depending on the feature and your settings, this may include:

• The selected word or phrase
• A limited surrounding sentence or passage
• A sentence you submit for writing assistance
• A suggested replacement or definition
• A page title, source, or URL needed to identify context

WordSatori should not collect unrelated browsing history or the contents of pages that you have not selected for a WordSatori feature.

2.4 Device and technical information

We may collect technical information needed to operate and secure the services, such as:

• IP address
• Browser, operating system, and device type
• Application and extension version
• Language, time zone, and general settings
• Authentication-session information
• Diagnostic, crash, and performance information
• Approximate region inferred from an IP address, where needed for security or service operation

We do not use technical information to create a detailed advertising profile.

2.5 Usage and interaction information

We may collect information about how you use WordSatori, including:

• Pages, screens, and features viewed
• Feature interactions
• Capture, lookup, suggestion, and acceptance events
• Settings and preferences changed
• Errors and performance events
• Whether an email or product message was opened or acted on, where permitted

We aim to use aggregated or de-identified information for product analysis whenever individual identification is not needed.

2.6 Communications

If you contact us or receive communications from us, we may collect:

• Your name and contact information
• The content of your message
• Support requests and feedback
• Information needed to investigate and resolve an issue

We may send service messages, including account, security, recovery, billing, and material product-change notices. Marketing messages will include an unsubscribe option where required.

2.7 Purchases and subscriptions

If WordSatori offers paid plans, we may receive:

• Subscription status
• Plan and product information
• Transaction identifiers
• Billing country or region
• Payment status and limited payment metadata

Payment-card numbers and other full payment credentials should be handled by the selected payment provider. WordSatori should not store full payment-card numbers unless the applicable payment and security requirements are met.

3. How we use information

We may use information to:

1. Create and administer accounts.
2. Authenticate users and protect accounts.
3. Provide vocabulary capture, WordBank, WordHits, NewsBites, WordAssist, and related features.
4. Select contextually appropriate definitions and suggestions.
5. Synchronize progress across the web, app, and extension.
6. Deliver password recovery, security, support, and service communications.
7. Process subscriptions and transactions.
8. Respond to support requests and feedback.
9. Detect, prevent, and investigate fraud, abuse, unauthorized access, and security incidents.
10. Diagnose errors and improve reliability.
11. Measure feature performance and improve the product.
12. Comply with legal obligations and enforce our agreements.
13. Protect the rights, safety, and property of WordSatori, our users, and others.

We will not use the contents of a private writing or reading submission for an unrelated purpose merely because it was processed by a WordSatori feature.

4. Artificial intelligence and language processing

Some WordSatori features may use automated language-processing or artificial-intelligence services to generate definitions, identify word forms, evaluate context, or suggest vocabulary.

When these features are used:

• We send only the information reasonably needed to provide the requested feature.
• We may remove or minimize direct identifiers before sending content to a processing provider where practical.
• We require providers to process information according to applicable contracts and instructions.
• We do not use private user content to train a public model unless we clearly disclose that practice and obtain any consent required by law.
• We may retain feature inputs, outputs, and quality signals for the period needed to provide, secure, debug, and improve the service, subject to the retention policy below.

5. How we share information

We may share information in the following limited circumstances.

5.1 Service providers

We may share information with vendors that provide services on our behalf, such as:

• Authentication and account management
• Hosting, storage, and infrastructure
• Email and transactional communications
• AI or language processing
• Analytics and diagnostics
• Payments and subscription management
• Customer support
• Security and fraud prevention

Service providers may process information only to provide contracted services and must be subject to appropriate confidentiality and security obligations.

5.2 Legal, safety, and security reasons

We may disclose information when reasonably necessary to:

• Comply with law, legal process, or a valid governmental request
• Protect the rights, safety, and property of WordSatori, users, or the public
• Investigate fraud, abuse, security incidents, or violations of our terms
• Enforce agreements or collect amounts owed

5.3 Business transfers

If WordSatori is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable confidentiality and privacy requirements.

5.4 With your direction or consent

We may share information when you direct us to do so or give permission.

We do not sell personal information for money.

6. Cookies and similar technologies

WordSatori may use cookies, local storage, SDKs, pixels, and similar technologies to:

• Keep users signed in
• Maintain security and session state
• Remember preferences
• Measure service use
• Diagnose performance
• Understand whether product communications are effective

Strictly necessary technologies may operate because they are required to provide the service. Optional analytics or marketing technologies will be used according to applicable consent requirements.

7. Legal bases where applicable

For users in jurisdictions that require a legal basis for processing, WordSatori may rely on:

• Performance of a contract: To provide accounts, learning features, synchronization, subscriptions, and requested support.
• Legitimate interests: To secure, maintain, improve, and understand the services, provided those interests do not override applicable rights.
• Consent: For optional analytics, marketing, or other processing that requires consent.
• Legal obligations: To comply with applicable law and lawful requests.
• Vital interests or public interest: Only where recognized and applicable.

The available legal bases depend on the user's location and the specific processing activity.

8. Data retention

We retain information only for as long as reasonably needed for the purposes described in this policy, including to:

• Provide the services
• Maintain learning history and account continuity
• Meet legal, tax, accounting, and regulatory obligations
• Resolve disputes
• Enforce agreements
• Detect and investigate abuse or security incidents

When information is no longer needed, we will delete it, anonymize it, or securely isolate it unless retention is legally required.

9. Account deletion and data export

Subject to applicable law and legitimate security or legal needs, users may request:

• Access to personal information
• Correction of inaccurate information
• Deletion of an account and associated personal information
• Export or portability of account information
• Restriction or objection to certain processing
• Withdrawal of consent where processing is based on consent
• A copy of personal information in a usable format

WordSatori will provide the available controls in account settings or through the support contact listed below.

Deleting an account may not immediately remove information from encrypted backups or records that must be retained by law. Such information will be isolated and deleted according to the applicable retention schedule.

Deletion of an account may also remove WordBank items, learning progress, preferences, and other account-associated data. The deletion experience should explain this before the user confirms.

10. Browser extension privacy

The Chrome extension may request permissions needed to support WordCapture, WordHits, or WordAssist. Permissions should be limited to what is necessary for the enabled feature.

The extension should:

• Process only selected or feature-requested text and context.
• Avoid collecting unrelated browsing history.
• Not sell browsing activity.
• Not store passwords or password-reset tokens.
• Protect authentication state using approved extension-storage practices.
• Provide a clear explanation of each requested permission.
• Provide a way to disable optional features that require additional page access.

11. Mobile application privacy

The iOS application may process account, vocabulary, learning-progress, diagnostic, and feature-interaction information described in this policy.

The app should request only permissions necessary for a clearly explained feature. Permission requests should identify what the permission does and whether the feature can be used without it.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure.

Safeguards may include:

• HTTPS for data in transit
• Encryption or access controls for data at rest
• Secure authentication and session management
• Password hashing by the authentication provider
• Least-privilege access for internal systems
• Monitoring for abuse and security events
• Secure development and dependency practices
• Backups and recovery procedures

No service can guarantee absolute security. Users should use a unique password, protect their devices, avoid sharing authentication codes, and notify us promptly about suspected unauthorized access.

13. International transfers

WordSatori and its service providers may process information in countries other than the user's country of residence. Those countries may have different data-protection rules.

Where required, we will use appropriate safeguards for international transfers, such as an adequacy decision, standard contractual clauses, or another legally recognized mechanism.

14. Children's privacy

WordSatori is intended for university students and adult learners. It is not directed to children under 13.

We do not knowingly collect personal information from children in violation of applicable law. If a parent, guardian, or user believes a child has provided personal information improperly, contact us using the details below.

15. Third-party services and links

WordSatori may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this one.

Users should review the privacy policies of any service they choose to connect to WordSatori.

16. Changes to this policy

We may update this policy as WordSatori, applicable law, or our data practices change.

When changes are material, we will provide notice through the services, email, or another legally appropriate method. The updated policy will include a revised “Last updated” date.

17. Contact us

For privacy questions, requests, or concerns, contact:

We may need to verify your identity before completing certain requests. We will use information provided in a privacy request only to process, verify, and respond to that request, unless another use is required or permitted by law.