This Privacy Policy explains what information Textora collects, how we use it, and your rights regarding your personal data
By using Textora, you consent to the practices described in this policy
1. Information We Collect
Information you provide:
- Account data: email address, password (hashed), and authentication provider used (email, Google, or GitHub)
- Content: text you submit for refinement and the resulting output
- Payment data: processed by our payment provider (we do not store card details)
Information collected automatically:
- IP address, browser type, device information
- Pages visited, features used, time spent
- Error logs and performance data
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process your requests and refine text
- Send transactional emails (verification, password reset)
- Send service updates and security alerts
- Detect, prevent, and address fraud or abuse
- Comply with legal obligations
We do not sell your personal information to third parties
3. AI Processing
When you submit text for refinement, that text is sent to Groq, a third-party AI provider, for processing. The output is returned to Textora and displayed to you
We do not use your submitted text to train AI models, and we do not permit our AI providers to use it for training under their API terms for our use case. However, we recommend reviewing the AI provider's policy if this is important to you
4. Data Storage & Security
Your data is stored using industry-standard providers and protected with encryption in transit (HTTPS/TLS). Passwords are hashed and never stored in plain text
We store account and content data using services including Supabase (database and authentication), Render (backend hosting), Cloudflare (frontend hosting and DDoS protection), and Upstash (cache)
5. Third-Party Services
We share data with the following third-party processors only as necessary to provide the Service:
- Groq — AI text processing provider
- Supabase — database and authentication
- Render — backend hosting
- Cloudflare — frontend hosting and DDoS protection
- Upstash — Redis cache
- Resend — transactional email delivery
- Sentry — anonymized error tracking
Each of these providers has its own privacy policy and is bound by applicable data protection laws
6. Cookies
We use the following types of cookies:
- Essential: authentication session (required for login)
- Analytics: anonymized usage statistics (optional)
You can disable cookies in your browser, but essential cookies are required for the Service to function
7. Your Rights
Depending on your jurisdiction (GDPR, CCPA, etc.), you have the right to:
- Access request a copy of your personal data
- Rectificationcorrect inaccurate data
- Erasure delete your account and data
- Portability export your data in a machine-readable format
- Objection object to certain processing activities
To exercise these rights, contact us at privacy@textora.app. We will respond within 30 days
8. Data Retention
We retain your data for as long as your account is active. Text you process is saved to your history for the retention period of your plan
- Free: 7 days
- Starter: 30 days
- Pro: 90 days
When you delete your account, account data is deleted within 30 days. Billing records may be retained as required by tax law, and anonymized usage statistics may be retained for analytics
9. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please contact us immediately
10. International Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place (Standard Contractual Clauses) to protect your data
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service
12. Contact
Questions about this policy? Contact our privacy team at privacy@textora.app.