Legal

Privacy Policy

Last updated: October 15, 2026

The short version. FromSource keeps a local copy of your work. Signed-in sync and browser captures also store the material you choose to save in your FromSource account so you can use it across devices. The browser extension reads a page only when you choose Save. We don't sell your data or use it for advertising, and AI generation runs when you request it.

Contents

  1. Who we are
  2. What data we handle
  3. How and why we use it
  4. Third-party services
  5. AI features
  6. Storage and retention
  7. Security
  8. Your rights and choices
  9. Children's privacy
  10. International users
  11. Changes to this policy
  12. Contact

1. Who we are

FromSource ("FromSource", "we", "us") provides the FromSource application for web, Mac, iPhone, and iPad, and a browser extension for saving source material. This Privacy Policy describes how we handle information when you use these products or visit fromsource.io.

2. What data we handle

2.1 Content you create

This includes notes, source material you save (text, URLs, screenshots, files), drafts, variants, voice samples used by the Style Engine, tags, and settings. The native app stores a local copy. When signed-in sync is enabled, content is also sent to and stored by FromSource so it can appear on your other devices. Browser captures are sent to your FromSource account when you choose Save. See Third-party services and AI features for other transfers you initiate.

2.2 Account information

If you create a FromSource account, we collect your email address and, optionally, a display name. We use this to authenticate you, manage your license, and send service messages such as account notices or important product updates. We do not send marketing email without your consent.

2.2a Guest sessions

If you try FromSource without an account, we create a temporary guest profile identified by a random ID, with no email address or password. A guest session stores the content you create, usage counts, and the kind of app you are using (for example web or macOS) so we can limit free use. To limit abuse we keep a keyed hash of your network address for a short time, not the address itself. Guest profiles that go unused for 90 days are deleted or de-identified. If you create an account, your guest content is attached to it; if you log in to an existing account instead, you choose whether to bring your guest work along.

2.3 Connected accounts

When you connect a publishing platform (for example, a social network or blogging service), the app stores the authentication tokens issued by that platform. Tokens are kept in the system keychain on your device and used only to read or post on your behalf when you ask the app to. We do not see or store your platform passwords.

2.4 Diagnostic and usage data

The app may report crash diagnostics and basic usage events (e.g., "draft created", "variant generated") so we can fix bugs and prioritize features. These reports do not include the contents of your notes, drafts, or sources. You can turn diagnostics off in Settings. On iPhone and iPad, Apple's "Share With App Developers" preference also applies.

2.5 Purchase data

Purchases made through the App Store are processed by Apple. We receive a transaction receipt to validate your subscription or purchase. We do not receive your full payment card details.

2.6 Website data

Our website uses privacy-respecting analytics that count page views without setting tracking cookies or building advertising profiles. If you contact us for support or product updates, we collect the information you provide in that message.

2.7 Browser extension captures

The browser extension requires a FromSource account. It does not record your browsing history or read pages in the background. Clicking its toolbar icon opens the capture panel on the current page, which previews the page URL, title, and any text you have selected. If you choose Save page, the extension then extracts and sends that page's URL, title, and readable text to your FromSource library, along with any note, tags, and destination you chose. If you choose Save selection, it sends the selected text and page URL instead. Nothing is sent merely because you open the panel. Some pages, including browser-protected pages and known sign-in or payment hosts, cannot be captured.

The extension keeps a scoped capture key and panel preferences in browser-local extension storage. The key is sent to FromSource only to authenticate saves and list your available destinations; you can revoke it in the app. Captured material is used to provide the save-and-draft workflow. We do not use extension data for personalized advertising or sell it. Our use of information received through the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not allow staff to read captured content except with your specific consent for support, where needed for security or legal compliance, or as aggregated and de-identified information for internal operations.

3. How and why we use it

  • Operate the app: keep a local copy, sync signed-in content through FromSource, use iCloud sync if enabled, save browser captures you request, and publish to platforms you connect.
  • Provide AI features: generate drafts, variants, and edits when you invoke them (see AI features).
  • Account and licensing: verify your subscription and manage access.
  • Improve the product: diagnose crashes and understand which features are used, in aggregate.
  • Communicate: reply to support requests and send important service messages.
  • Comply with the law: meet legal, tax, and regulatory obligations.

We do not sell your personal information. We do not use your content to train our own or any third-party machine-learning models.

4. Third-party services

FromSource only shares data with third parties when it is necessary to do something you asked for. The main categories:

  • Publishing platforms you connect (for example, social networks or blogging services). When you publish, the post content and any media you attach are sent to that platform under its own terms and privacy policy.
  • AI providers used to power optional generation features (see AI features).
  • Sync through Apple iCloud, if you enable it. Data syncs between your own devices via your Apple ID and is governed by Apple's privacy terms.
  • Email and analytics providers used to send service messages, handle support conversations, and count page views on our website.
  • Apple, for App Store distribution, in-app purchase processing, and crash reports you opt into.

We share only what is needed for the service to function, and we require providers to handle data under reasonable confidentiality and security terms.

5. AI features

Some features — for example, generating a draft from a source, producing voice-aware variants, or suggesting edits — require sending the relevant inputs to a large language model. Depending on your settings, this may be:

  • An on-device model, where supported, so no content leaves your device.
  • A hosted AI provider we use under a data-processing agreement that prohibits the provider from training models on your inputs and limits retention to what is needed to deliver the response.

You control when AI features run. The app does not silently send content to AI providers — generation happens when you trigger it.

6. Storage and retention

Native app content remains on your device until you delete it or the app. Signed-in synced content and browser captures remain in your FromSource account until you delete them or request account deletion, subject to legal retention needs. If you enable iCloud sync, copies may also be stored in your iCloud account. Account information is retained while your account is active and for a short period afterward to handle billing and legal requirements. Diagnostic reports are retained for a limited period and then deleted or aggregated. You can request deletion of your account-level data at any time (see Your rights).

7. Security

We use industry-standard practices to protect data, including encryption in transit (HTTPS/TLS) and storing platform tokens in the system keychain. No system is perfectly secure; if we become aware of a breach that affects your data, we will notify you as required by law.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can:

  • Export or delete your content directly in the app.
  • Disconnect any connected platform at any time, which revokes the stored token.
  • Revoke a browser capture key in FromSource settings and remove the extension from your browser.
  • Turn off diagnostics in Settings.
  • Email creataai.com@gmail.com to request account deletion or to exercise other rights.

We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising these rights.

9. Children's privacy

FromSource is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International users

FromSource is operated from the United States. If you use the app from outside the U.S., information we handle may be transferred to and processed in the U.S. or other countries where we or our providers operate. We rely on appropriate safeguards for international transfers as required by applicable law.

11. Changes to this policy

We may update this Privacy Policy as the product evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email.

12. Contact

Questions, requests, or concerns about this policy? Email creataai.com@gmail.com.