Privacy Policy

1. Information We Collect

Information you provide:

• Account information: Name, email address, and profile photo when you sign in with Google or Apple
• Text content: Text you submit to our tools for processing
• Payment information: Processed securely by Stripe — we never store your full card details

Information collected automatically:

• Usage data: Word counts, tool usage, feature interactions
• Log data: IP address, browser type, pages visited, timestamps
• Cookies: Session tokens, referral codes, authentication state

2. How We Use Your Information

• Provide, maintain, and improve our AI writing tools
• Process your text submissions through our AI pipeline
• Track your word usage and enforce plan limits
• Send transactional emails (receipts, subscription updates, password resets)
• Respond to support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not use your submitted text to train or fine-tune AI models. We do not sell your personal data to third parties.

3. Text Content & AI Processing

Text you submit is sent to OpenAI's API for processing. OpenAI processes this data under their own privacy policy and API data usage policy. As of our last review, OpenAI does not use API data to train models.

We store your processed text in our database to power your History feature. You can delete your history at any time from your account settings. If you close your account, all stored text is permanently deleted within 30 days.

4. Cookies

We use the following types of cookies:

• Session cookies: Required for authentication — keep you signed in
• Referral cookies: Store referral codes from links (httpOnly, 30 days)
• Analytics: Vercel Analytics collects anonymous page view data

We do not use third-party advertising cookies or cross-site tracking.

5. Data Sharing

We share data only with these service providers to operate the platform:

• OpenAI — AI text processing
• Stripe — Payment processing
• Google — OAuth sign-in
• Vercel — Hosting, edge network, analytics
• Supabase/Neon/Railway — Database hosting

We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.

6. Data Retention

We retain your account information for as long as your account is active. Processed text in your history is retained until you delete it or close your account. Payment records are retained for 7 years for tax and legal compliance. Log data is typically retained for 90 days.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time

To exercise these rights, email privacy@hiddentype.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed session tokens, and restricted database access. However, no transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

10. International Transfers

Our services are hosted in the United States. If you access the Service from outside the US, your data is transferred to and processed in the US. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions or requests, contact our privacy team at privacy@hiddentype.com.