Privacy Policy

We collect the following categories of data:

• To create and manage your account and authenticate you.
• To process your text through AI models and return results to you.
• To enforce your plan's word and run limits.
• To process subscription payments via Lemon Squeezy.
• To display your tool run history if you have it enabled.
• To send transactional emails (account confirmation, password reset, trial reminders). We do not send marketing emails without your consent.
• To detect and prevent abuse, fraud, or misuse of our services.
• To improve our product through aggregated, anonymised analytics.

We use the following third-party services to operate TextCraft. Each has its own privacy policy.

When you use a tool, your text is sent to NVIDIA's language model API to generate a result. NVIDIA processes this text to produce the AI response. Its retention and training practices are governed by the applicable service terms and configuration; TextCraft does not promise zero provider retention.

Run history: By default, workspace runs record metadata rather than input or output text. Text can be saved when text storage is enabled and ephemeral mode is off. The workspace also saves document text under those settings. Contact support for help with stored data or deletion.

Submitted text is shared with the service providers needed to process your request. The application does not implement training of its own AI models on your text.

• Account data: Retained until you delete your account.
• Tool run history: Retained until you delete individual runs or your account.
• Analytics events: Retention depends on the analytics service and its configured settings. Contact support for the current retention details.
• Rate limit counters: Used to enforce limits over defined usage windows. A counter reset does not necessarily delete the underlying database record.
• Hashed abuse-prevention ledger: Retained after account deletion where needed to enforce one-time trial eligibility and prevent fraud or abuse.

You have the following rights over your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Deletion: Request deletion of your account and associated personal data. You can initiate this in Settings, or email us. We may retain minimal hashed identifiers where needed for fraud, abuse prevention, and billing integrity.
• Portability: Request an export of your data in a machine-readable format.
• Restriction: Contact us to request that we stop storing your submitted text going forward.
• Objection: Contact us to object to a specific use of your data.

To exercise any of these rights, email us at textcrafthelp@zohomail.com. We will respond within 30 days.

TextCraft uses browser cookies for authentication sessions (managed by Supabase) and local storage to remember UI preferences such as theme and guest demo limits. Google Analytics and the support chat integration may also use cookies or similar technologies.

TextCraft is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

We take reasonable technical measures to protect your data: all connections use HTTPS/TLS, passwords are hashed (never stored in plain text), access to the database is restricted to server-side code, and API keys are stored as environment variables.

No system is 100% secure. If you discover a security issue, please report it to textcrafthelp@zohomail.com.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date above and, where appropriate, sending an email notification. Continued use of TextCraft after changes constitutes acceptance.

For any privacy-related questions, requests, or concerns, contact us at: