Privacy Policy

Your data, your control

You own your data. You can delete your analysis history at any time from your dashboard. We do not sell conversation data, ever.

What we collect

• Account info (email, display name) for authentication.
• Conversations and screenshots you submit for AI communication coaching.
• Usage metadata (timestamps, counts) for rate limits and reliability.
• Billing metadata from our payment processor (we never see your card number).

How we use it

We use submitted text and images solely to generate your communication analysis, store it under your account, and operate the product. AI processing happens through trusted model providers under data-processing terms.

Data retention

• Account data: kept while your account is active.
• Analyses & screenshots: kept until you delete them or close your account. Deleted items are purged from primary storage immediately and from encrypted backups within 30 days.
• Billing records: retained for up to 7 years to comply with tax and accounting law.
• Security & abuse logs: retained for up to 12 months.
• Closed accounts: personal data is deleted within 30 days of account closure, except where retention is legally required.

Your rights

Depending on where you live (including under GDPR and CCPA), you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your account and associated data.
• Export a copy of your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent at any time without affecting prior processing.
• Opt out of sale of personal information — we do not sell it.
• Lodge a complaint with your local data protection authority.

Exercise any right by emailing privacy@textherback.app. We respond within 30 days.

Security

Data is protected using industry-standard practices: encryption in transit, encryption at rest, row-level security, and least-privilege access. Screenshots live in a private bucket scoped to your user ID.

Legal basis for processing (GDPR)

Where the GDPR or UK GDPR applies, we process your personal data on the following legal bases:

• Performance of a contract — to provide the Service you signed up for (account, analyses, billing).
• Legitimate interests — to secure the Service, prevent abuse and fraud, improve reliability, and communicate service updates.
• Consent — for optional marketing communications and any non-essential cookies. You may withdraw consent at any time.
• Legal obligation — to retain billing and tax records and to respond to lawful requests.

Sharing & payment processing

Your conversations are never shared publicly without your action. When you create a share card, only the resulting analysis page is public — never your raw conversation or screenshot.

We share limited personal data with the following categories of recipients:

• Paddle.com Market Ltd ("Paddle") — our Merchant of Record and payment processor. When you purchase a subscription, Paddle acts as the seller of record and independently processes your name, email, billing address, country, IP address, and payment details to complete the transaction, manage subscriptions, calculate and remit sales tax/VAT, handle invoicing, prevent fraud, and process refunds and chargebacks. Paddle's handling of this data is governed by the Paddle Buyer Terms and the Paddle Privacy Notice.
• Hosting and infrastructure providers — to operate the Service (databases, storage, CDN, email delivery).
• AI model providers — to generate your communication analyses under data-processing agreements. Your private conversations are not used to train third-party foundation models.
• Professional advisors — accountants and lawyers when reasonably required.
• Authorities — where required by law or to protect rights and safety.

Deletion

Delete individual analyses or wipe everything from the dashboard. To delete your account entirely, email privacy@textherback.app.

Contact

Data controller: Hulofton Robinson II. Email privacy@textherback.app or visit our contact page.