Privacy Policy
Last updated: October 12, 2026
Tweed Collective LLC operates GREX and tweedcollective.ai. We are a California limited liability company. This policy describes what GREX collects when you text us, why, who handles it, and how long we keep it. The rest of the site is covered briefly at the end.
GREX
GREX is a texting service. You send a screenshot, pasted text, or a link to +1 (855) 635-4332. GREX pulls out the claims, checks them against public evidence, and texts you a link to a report. There is no account and no sign-in.
What GREX collects
Phone number. Twilio includes your phone number with the message. We do not save the number as digits. We save a one-way HMAC-SHA256 hash of it, made with a secret that stays on our server. We cannot read the number back out of that hash. We hold the number in memory only long enough to send the reply through Twilio.
Screenshot. We download the image from Twilio into memory and send it through OpenRouter to a model that reads the text. If you attached a caption, we include up to 500 characters of it with that request. We do not save the image file. We drop it from memory as soon as reading finishes or fails, and we record the time we dropped it. Twilio may still keep its own copy of the message. We do not delete that copy.
Pasted text and links. If you text words instead of an image, we use them as the text to check. If you text a link, we fetch that public page and use its text. That request does not include your phone number.
Text to check. We store the transcript so the check can run, including when we decide the image cannot be scored. It is marked to expire after one day.
The report. When a check finishes, we store the claims taken from the transcript, an evidence-strength score, a short summary, and the public pages used in the check (links, titles, and short excerpts). The report does not include the image and does not include the full transcript. The claims can still quote what was in your screenshot.
Check records. For each check, we also store the claims, the search queries, the evidence links and excerpts, the scores, and which models ran. These records hold no phone number, phone-number hash, or image.
Message records. For each text, we store the Twilio message id, the phone-number hash, a status (such as queued, finished, refused, or opted out), timestamps, and, when there is one, the report id and a short error code.
Opt-out. If you opt out, we store the phone-number hash, a flag that texts are off, and the time that flag last changed. Opting back in updates the flag.
We also keep a daily total for the service as a whole, used to pause GREX for the day. That total is not tied to your phone number.
Why
We use this information to:
- Run the check, send the reply, and host the report at the link we text you.
- Enforce limits: one check at a time on a number, and 100 finished checks on that number in any 24-hour period.
- Ignore a duplicate delivery of the same Twilio message.
- Honor opt-out and opt-in, and remember that choice.
- Pause the service when a daily limit is hit, and prevent abuse.
Who processes it
Twilio carries the texts. It receives your message, holds the image for us to download, and delivers our reply. We pass your phone number to Twilio for that delivery. We do not pass the number to anyone else.
OpenRouter routes our model requests to open-weight Kimi models: Kimi K2.6 reads screenshots and Kimi K3 pulls out the claims. The models run on hosts OpenRouter routes to, such as Fireworks and DigitalOcean. We send the image, any caption we include, and the text to check.
Parallel (parallel.ai) runs the web searches and reads text from the pages found. We send it search queries built from the claims, and page links. We remove phone numbers, email addresses, street addresses, and similar details from those queries first.
TypeSafe's Jev model scores each claim against the evidence, through OpenRouter. We send it the claim and the evidence excerpts.
Neon hosts the Postgres database that holds the check records and a 24-hour cache of search results and finished checks.
Vercel hosts tweedcollective.ai. Reports, transcripts, message records, and opt-out flags are stored as private files in Vercel Blob, the storage on that host.
We do not send your phone number to OpenRouter, the model hosts, Parallel, TypeSafe, or Neon.
How long we keep it
Screenshots. We do not store them. They are dropped from our memory when reading finishes or fails.
Transcripts. The stored text is set to expire one day after we save it. After that, it is deleted the next time cleanup runs. That cleanup runs when a new text arrives. The weekly report job does not delete transcripts, and one pass does not always reach every file. A quiet period can leave a transcript in place longer than a day.
Reports. A report can be opened for 7 days after we create it. After that, the link stops working even if the file is still in storage. A weekly cleanup, scheduled for Mondays at 4:00 UTC, deletes report files that are at least 7 days old. A later text to GREX can also delete reports that are already past 7 days.
Check records. At 7 days, the link between a check record and its report is removed. Claim text is deleted after 12 months. The rest of the record, including evidence links and excerpts and the scores, is kept to measure and improve GREX.
Cache. Cached search results and finished checks are used for 24 hours.
Message records, phone-number hashes, and opt-out flags. Nothing in the service deletes these on a timer. We keep them so the limits and your STOP choice keep working. The daily service total is kept the same way. It is not tied to a phone number.
Who can see a report
Anyone with the link can open the report. There is no sign-in. The link is a long random id. Do not forward it if you do not want other people to read the report. We ask search engines not to index report pages.
Do not send sensitive personal information
Do not text us medical records, bank or card numbers, government ID numbers, passwords, or photos of those things. A screenshot often shows more than the one claim you meant to check, and the report can quote the claims we found. Anyone with the link can read it.
Marketing, and selling personal information
We do not sell personal information. GREX does not send marketing or promotional texts.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
The rest of tweedcollective.ai
The public pages of the site can be read without an account. Client areas require sign-in. Sign-in is provided by Clerk, which processes the account details used to sign in. Our code reads the email address on the Clerk account, and we store which client areas and documents an account may open in Clerk metadata. GREX texting does not use Clerk and does not ask you to create an account.
The site is hosted on Vercel, which keeps basic hosting logs as part of running and protecting the site.
Changes
We may update this policy. When we do, we change the date at the top.
Contact
Tweed Collective LLC, California.
GREX and this policy: grex@tweedcollective.ai
Other questions about the site: hello@tweedcollective.ai