🔒 Privacy Policy

Last updated: December 10, 2025

Textify ("we", "us", "our", or "the extension") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, how we store it, and how we share it. By using Textify, you agree to the practices described in this policy.

1. Data Collection

We collect the following categories of user data:

1.1 Account Information (Collected)

• Email address: Required for account creation and authentication
• Password: Securely hashed, never stored in plain text
• Account creation date: For record-keeping purposes

1.2 Usage Data (Collected)

• File processing records: File names, sizes, and types of documents processed (for billing and history features)
• Token usage: Number of AI tokens consumed (for billing purposes)
• Transaction history: Records of payments and balance changes
• Timestamps: When files were processed

1.3 Device Information (Collected)

• Device identifier: An anonymized identifier to prevent signup bonus abuse

1.4 File Content (Temporarily Processed, NOT Stored)

• Uploaded files: Images, PDFs, spreadsheets, and documents you upload are processed in memory and immediately discarded
• Extracted text: The text extracted from your files is returned to you and stored locally in your browser history - we do not retain it on our servers

1.5 Data We Do NOT Collect

• Browsing history or websites visited
• Personal files not explicitly uploaded by you
• Location data
• Contacts or address book
• Microphone or camera data (beyond screenshots you explicitly capture)

2. Data Handling and Use

We use collected data for the following purposes:

Data Type	Purpose	Legal Basis
Email address	Account authentication, password reset, important service notifications	Contract fulfillment
Usage data	Billing, providing extraction history feature, service improvement	Contract fulfillment, Legitimate interest
Device identifier	Preventing abuse of signup bonuses	Legitimate interest
Uploaded files	Text extraction (processed immediately, not stored)	Contract fulfillment

We do NOT use your data for:

• Advertising or marketing to third parties
• Selling to data brokers
• Training AI models (your files are not used for training)
• Profiling or automated decision-making that affects you

3. Data Storage

3.1 Where Data is Stored

• Account data: Stored securely on Supabase servers (cloud infrastructure)
• Payment data: Stored and processed by Stripe (we never see your full card number)
• Local data: Authentication tokens and extraction history are stored locally on your device using Chrome's storage API

3.2 Data Retention Periods

Data Type	Retention Period
Account information	Until you delete your account
Usage/transaction history	Until you delete your account
Uploaded files	Not retained - processed in memory and immediately discarded
Extracted text	Stored locally on your device only - you can clear this anytime
Device identifier	Until you delete your account or uninstall the extension

3.3 Data Security Measures

• All data transmission is encrypted using HTTPS/TLS
• Passwords are hashed using industry-standard algorithms
• Authentication tokens are stored securely in browser storage
• Server infrastructure uses modern security practices
• Access to user data is restricted to authorized personnel only

4. Data Sharing

We share user data with the following third-party services, which are essential for the operation of Textify:

Service Provider	Data Shared	Purpose	Privacy Policy
OpenAI	Uploaded file content (temporarily)	AI-powered text extraction	OpenAI Privacy Policy
Supabase	Email, hashed password, usage data	Authentication and database	Supabase Privacy Policy
Stripe	Email, payment information	Payment processing	Stripe Privacy Policy

We do NOT share your data with:

• Advertisers or ad networks
• Data brokers
• Social media platforms
• Any other third parties not listed above

Exceptions: We may disclose data if required by law, court order, or to protect our legal rights.

5. Cookies and Tracking

Textify does not use cookies for tracking or advertising purposes.

• Authentication tokens: Stored in browser local storage (not cookies) for keeping you logged in
• No third-party trackers: We do not embed any analytics, advertising, or tracking scripts
• No cross-site tracking: We do not track your activity across other websites

6. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States, where our service providers operate. We ensure appropriate safeguards are in place:

• Our service providers (OpenAI, Supabase, Stripe) maintain compliance with international data protection standards
• Data transfers are protected by encryption in transit

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

7.1 Access and Portability

• View your account information and usage history within the extension
• Request a copy of your personal data by contacting us

7.2 Correction

• Update your email address through the account settings
• Contact us to correct any inaccurate data

7.3 Deletion

• Delete your local extraction history within the extension
• Request complete account deletion by contacting us - we will delete all your data within 30 days

7.4 Restriction and Objection

• You may request we stop processing your data for certain purposes
• Contact us to exercise these rights

7.5 Withdrawal of Consent

• You may stop using the extension at any time
• Uninstalling the extension removes all locally stored data

To exercise any of these rights, contact us at daniel.ntumbakazadi@gmail.com. We will respond within 30 days.

8. Children's Privacy

Textify is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data, we will delete it promptly. If you believe a child has provided us with their data, please contact us.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request what personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• No Sale of Data: We do not sell your personal information

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• All rights listed in Section 7 above
• Right to lodge a complaint with your local data protection authority
• Right to data portability in a machine-readable format

Legal basis for processing: We process your data based on contract fulfillment (providing the service you signed up for) and legitimate interest (preventing abuse, improving the service).

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last updated" date at the top of this policy
• For material changes, we may notify you via email or a notice in the extension
• Continued use of Textify after changes constitutes acceptance of the updated policy