TextCraft (“we”, “us”, or “our”) operates the website textcraft.co and provides AI-powered writing tools. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have over it.
By using TextCraft, you agree to the practices described in this policy. If you disagree, please do not use our services.
1. Data We Collect
We collect the following categories of data:
Account data
- Email address: used to create and identify your account.
- Password: stored as a secure cryptographic hash by Supabase. We never see your plain-text password.
Usage data
- Tool run history: when you use a tool (Grammar Checker, Humanizer, etc.), we store the input text, output text, word count, language, and timestamp. This powers your History page. You can disable this in Settings → Privacy, or delete individual runs.
- Tool usage counts: how many times you have used each tool within a billing window, used to enforce plan limits.
- Analytics events: page views and feature interactions (e.g. “tool_run”, “upgrade_click”) stored without personally identifiable content to help us improve the product.
Billing data
- Subscription status and plan: stored in our database (Supabase).
- Payment details: handled entirely by Lemon Squeezy. We never store card numbers or bank details.
Abuse-prevention data
- Hashed account identifier: we may retain a one-way HMAC hash of your email address after account deletion to prevent repeated trial abuse, fraud, and quota circumvention. This record does not contain your raw email address.
Technical data
- IP addresses (used for rate limiting and fraud prevention, not linked to your identity in our analytics).
- Browser and device type (from standard HTTP headers).
2. How We Use Your Data
- To create and manage your account and authenticate you.
- To process your text through AI models and return results to you.
- To enforce your plan's word and run limits.
- To process subscription payments via Lemon Squeezy.
- To display your tool run history if you have it enabled.
- To send transactional emails (account confirmation, password reset, trial reminders). We do not send marketing emails without your consent.
- To detect and prevent abuse, fraud, or misuse of our services.
- To improve our product through aggregated, anonymised analytics.
3. Third-Party Services
We use the following third-party services to operate TextCraft. Each has its own privacy policy.
| Service | Purpose | Data sent |
|---|
| Supabase | Authentication & database | Email, password hash, tool runs, subscription |
| Lemon Squeezy | Payment processing | Email, payment details (card data stays with Lemon Squeezy) |
| NVIDIA | AI text processing | The text you submit to a tool. Not stored by NVIDIA. |
| Vercel | Hosting & CDN | Standard HTTP request data (IP, headers) |
| Tawk.to | Live chat support | Messages you send in the chat widget |
4. Text You Submit to Tools
When you use a tool, your text is sent to NVIDIA's language model API to generate a result. NVIDIA processes this text to produce the AI response and does not retain it for training.
Run history: By default, your input and output text is saved in our database so you can review it later on your History page. You can delete individual runs from your History page at any time, or request full deletion of your run history by contacting us.
We do not sell, share, or use your submitted text to train our own AI models.
5. Data Retention
- Account data: Retained until you delete your account.
- Tool run history: Retained until you delete individual runs or your account.
- Analytics events: Retained for up to 12 months in aggregated form.
- Rate limit counters: Automatically deleted after each billing window.
- Hashed abuse-prevention ledger: Retained after account deletion where needed to enforce one-time trial eligibility and prevent fraud or abuse.
6. Your Rights
You have the following rights over your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Ask us to correct inaccurate data.
- Deletion: Request deletion of your account and associated personal data. You can initiate this in Settings, or email us. We may retain minimal hashed identifiers where needed for fraud, abuse prevention, and billing integrity.
- Portability: Request an export of your data in a machine-readable format.
- Restriction: Contact us to request that we stop storing your submitted text going forward.
- Objection: Contact us to object to a specific use of your data.
To exercise any of these rights, email us at textcrafthelp@zohomail.com. We will respond within 30 days.
7. Cookies & Local Storage
TextCraft uses browser cookies for authentication sessions (managed by Supabase) and local storage to remember UI preferences such as theme and guest demo limits. We do not use advertising cookies or third-party tracking cookies.
8. Children's Privacy
TextCraft is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
9. Security
We take reasonable technical measures to protect your data: all connections use HTTPS/TLS, passwords are hashed (never stored in plain text), access to the database is restricted to server-side code, and API keys are stored as environment variables.
No system is 100% secure. If you discover a security issue, please report it to textcrafthelp@zohomail.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date above and, where appropriate, sending an email notification. Continued use of TextCraft after changes constitutes acceptance.
11. Contact
For any privacy-related questions, requests, or concerns, contact us at:
TextCraft
Email: textcrafthelp@zohomail.com
Website: textcraft.co