Privacy Policy

Last updated: 19 September 2026

This policy explains what PainKiller Labs collects when you use Ezsay, Language Match or Liquid Relay, why we collect it, and what we do not do with it. It is written to be read, not to be survived.

The short version

• We collect what a Service needs to work, plus basic billing and diagnostic data.
• We do not sell personal information, and we do not use your content to train models.
• Liquid Relay moves files directly between your own machines; those file contents do not pass through our servers.
• You can ask for a copy of your data, or its deletion, at rh@pklabs.ca.

Who is responsible

PainKiller Labs, a business registered in Canada, is the controller of personal information described here. Contact: rh@pklabs.ca.

What we collect

Account information

Email address, display name, authentication identifiers, and the plan you are on. Needed to give you an account and to contact you about it.

Content you put into a Service

Drafts and documents in Ezsay; messages and vocabulary in Language Match; device pairing details in Liquid Relay. Stored so the Service can show it back to you. In Liquid Relay, the contents of transferred files, clipboard items and screenshots travel directly between your paired devices and are not stored by us.

Payment information

Handled by our payment processor. We receive confirmation of payment, the plan, the last four digits and the expiry of a card - never the full card number.

Technical and usage data

IP address, device and browser type, timestamps, crash reports and error logs. Used to keep the Service secure and working, and to understand which features are actually used.

Why we are allowed to use it

Where the GDPR or similar law applies, our bases are: performance of a contract (running the Service you signed up for), legitimate interests (security, abuse prevention, product improvement), consent (optional marketing email, which you can withdraw at any time), and legal obligation (tax and accounting records).

Third parties we share with

We share personal information only with service providers who need it to make a Service run - hosting and database infrastructure, payment processing, transactional email, error monitoring, and, where a product feature depends on it, AI model providers. Each is bound to use the data only to provide their service to us. We also disclose information where the law requires it, and we would tell you unless legally barred from doing so.

AI model providers

Some features send your text to a third-party model provider in order to produce a result. Those requests are made for your session only. We select providers that do not train on data submitted through their API, and we do not submit your content for training ourselves.

International transfers

Our providers may process data outside Canada, including in the United States and the European Union. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Account and content data: for as long as your account is open, and for up to 30 days after deletion so that an accidental deletion can be reversed. Billing records: as long as tax law requires, typically seven years. Logs and diagnostics: normally under 12 months.

Your rights

Depending on where you live, you may ask us to give you a copy of your personal information, correct it, delete it, restrict or object to how we use it, or port it elsewhere. Write to rh@pklabs.ca and we will respond within 30 days. If you are in Canada and are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada; in the EEA or UK, to your local supervisory authority.

Security

We use encryption in transit, encryption at rest for sensitive fields, access controls limited to what is needed, and regular dependency updates. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant regulator as the law requires.

Children

Our products are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, write to us and we will delete it.

Cookies

We use cookies that are necessary to keep you signed in and to keep the Service secure. Where we use any analytics cookie that is not strictly necessary, we ask for consent first.

Changes

If we change this policy in a way that materially affects you, we will give notice by email or in the Service before it takes effect. The "last updated" date above always reflects the current version.