Privacy Policy
Plain-English version: your input is never stored, never logged, never used for training, never shared. Long version below for the lawyers.
The short version
- Free tier requires no account. We cannot link your writing to your identity even if we wanted to.
- Your humanization input and output text is never stored on our servers . it passes through, gets processed, gets returned, and disappears.
- We never use your text for training models, never share it, never sell it.
- For Pro/Founders accounts, we store your email and Stripe customer ID only. Not your humanization history.
- We use a tiny amount of analytics (page views, country code) to understand traffic. No personal identifiers.
What we collect when you use the free tier
For each humanization request, we log: a SHA-256 hash of your input (one-way, irreversible), a SHA-256 hash of your output (also irreversible), the language detected, the country code from your request headers (ISO-3166 alpha-2), the model used, and milliseconds elapsed. We do not log the actual text. We cannot reconstruct what you humanized from the hash.
We also rate-limit by hashed client identifier (IP + browser fingerprint hashed together, also one-way). This is how we enforce the 200 words/day free tier without requiring a signup. The hash is rotated every 24 hours.
What we collect when you sign up for Pro or Founders
We store: your email address (so we can send you receipts and reset your password), your Stripe customer ID (so payments work), your plan tier, your word usage counter for the current billing period, and the timestamp of your last login. We do not store your humanization history. The Pro "history" feature in your account is stored client-side in your browser's local storage, not on our servers.
Cookies
We use one essential cookie for session management on Pro/Founders accounts. We use no third-party tracking cookies, no Google Analytics, no Facebook pixels, no advertising trackers. Page-view counts come from server logs (request URL + country code, no personal data).
Third parties
Three third parties touch your data:
- The LLM provider that runs your humanization request. We use multiple providers behind a failover chain. Each provider receives your input text only for the seconds it takes to humanize. None of them are configured to log it for training. Their privacy policies apply for those seconds.
- Stripe, our payment processor. Stripe sees your billing details for Pro/Founders subscriptions. Stripe's privacy policy: stripe.com/privacy.
- Vercel, our hosting provider. Vercel sees the standard server logs (IP, request URL, response time). They don't see your humanization content because we don't store it.
How long we keep things
- Humanization input and output text: never stored
- SHA-256 hash logs: 30 days (used for abuse detection only, then deleted)
- Account email and Stripe customer ID: until account deletion
- Server logs (IP, URL): 14 days
- Email correspondence: 2 years (so we can find your previous tickets)
Your rights (GDPR / CCPA)
Email [email protected] from your account email and we'll do any of the following within 30 days:
- Send you a copy of all data we have on you
- Delete your account and all associated data
- Correct any data that's wrong
- Restrict processing of your data
- Provide a portable export
For free-tier users with no account, there's no data to export . we don't have any.
Changes to this policy
If we change this policy in any material way, we'll send Pro/Founders users an email notification. Free-tier users will see a banner on the site for 30 days. The "last updated" date at the top of this page reflects every revision.
Contact
Privacy questions go to [email protected]. We respond within 48 hours, usually faster.