Privacy Policy

1. Who is responsible for your data

1.1. The controller of personal data is Sole proprietor (FOP) Vitalii Pelin, taxpayer ID (RNOKPP) 3427107290 (“we”). Privacy contact: [email protected].

1.2. We process data under the Law of Ukraine “On Personal Data Protection” and, for users in the European Union and the European Economic Area, also under the EU General Data Protection Regulation 2016/679 (GDPR), which applies to us under Article 3 GDPR.

1.3. For the content of files and texts you upload (for example, documents containing other people’s data) we act as a processor: we process them only on your instructions to provide the service (Article 28 GDPR).

2. What data we process

• Files and texts for server tools, and processing results.
• Account data: email; name and profile picture if you sign in with Google; sign-in method; settings; plan and credit balance.
• Payment data: amount, currency, payment status and date, transaction ID, price zone, card country and last digits as provided by WayForPay. We never receive the full card number.
• Technical data: IP address, browser and device type, language, approximate country, request times, error and security logs, an anonymous visitor identifier, limit counters.
• API data: API keys (stored in protected form), call logs (time, tool, volume, result).
• Request history: if you are signed in, the text of your request to an AI tool is kept in your account history for 90 days so you can return to it. You can clear the history in your account at any time.
• Correspondence with support.
• Google analytics and advertising data — in the EEA, the UK and Switzerland only with your consent; in other countries until you opt out in “Cookie settings” (see the Cookie Policy).

2.1. We do not ask for or need special categories of data (health, biometrics, etc.). If your files contain such data, it is processed only technically and deleted together with the file.

3. What happens to your files

• Browser tools (“Runs in your browser”) process the file on your device — it is not sent to us.
• Server tools receive the file over an encrypted connection, scan it with antivirus and process it in an isolated environment with no network access.
• Files and results are deleted automatically after 2 hours, or immediately with “Delete now”. A result is visible only to the browser or account that created it.
• AI tools run on our own models on our own servers: files and texts are not sent to third-party AI providers and are not used to train models.
• Staff do not look at file contents. The only exception is when you send a file to support yourself so we can investigate a problem.

4. Purposes and legal bases

• Providing the services, processing files, running your account, sign-in, crediting and debiting credits, payments, service emails (sign-in codes, receipts, notices) — performance of a contract (Article 6(1)(b) GDPR; Article 11(1)(3) of the Law of Ukraine “On Personal Data Protection”).
• Security, abuse and fraud prevention, free-tier limits, antivirus scanning, debugging, our own de-identified statistics, internal admin notifications — legitimate interests (Article 6(1)(f) GDPR; Article 11(1)(6) of the Law).
• Google Analytics 4 and Google Ads, marketing emails (if we ever send them) — consent (Article 6(1)(a) GDPR; Article 11(1)(1) of the Law). You can withdraw consent at any time without affecting prior processing.
• Accounting and tax records of payments, responding to lawful requests from authorities — legal obligation (Article 6(1)(c) GDPR; Article 11(1)(5) of the Law).

4.1. We do not sell personal data and do not use the content of your files for advertising.

5. Who receives your data

Data is shared only with those the Service cannot run without, and only as much as needed. Data protection terms are in place with our processors.

• Hosting provider (data centre) — hosting servers, databases and temporary files.
• Cloudflare, Inc. — content delivery network, protection against attacks and bots; sees IP addresses and technical request data.
• Google: Google Workspace (Gmail) — sending service emails from [email protected]; Sign in with Google (OAuth) — if you choose it; Google Analytics 4, Google Tag Manager, Google Ads — only with consent.
• WayForPay — payment processing (cards, Apple Pay, Google Pay); WayForPay is an independent controller of payment data.
• Telegram — internal admin notifications (may include a user’s email, the fact of registration or payment, amount and plan). File contents are never sent there.
• Public authorities — only on a lawful basis and to the extent required by law.

6. International transfers

6.1. We are an entrepreneur registered in Ukraine, so data of users from other countries is processed in Ukraine. If you are in the EU/EEA, the GDPR applies to this processing in full.

6.2. Some processors (Cloudflare, Google, Telegram) may process data in the United States and other countries. We rely on: adequacy decisions (including the EU–U.S. Data Privacy Framework for certified companies), EU Standard Contractual Clauses (Article 46 GDPR) and, in exceptional cases, necessity for performing our contract with you (Article 49 GDPR).

6.3. Under Article 29 of the Law of Ukraine “On Personal Data Protection”, EEA member states are recognised as ensuring an adequate level of protection; transfers to other countries take place on the grounds set out in that Article, in particular to perform a contract for your benefit.

7. How long we keep data

• Server-processed files and results — up to 2 hours (or less if you delete them).
• Account — while active; after deletion, up to 30 days in backups, then destroyed.
• Payment records — for the period required by tax and accounting law.
• Security and technical logs — up to 90 days.
• Support correspondence — up to 2 years after your last request.
• Analytics cookies — see the periods in the Cookie Policy.

8. Your rights

Under Articles 15–22 GDPR and Article 8 of the Law of Ukraine “On Personal Data Protection” you have the right to:

• know what data we process, why and who receives it, and get a copy;
• have inaccurate data corrected;
• have data erased (“right to be forgotten”), including deleting your account;
• restrict processing;
• receive your data in a machine-readable format (portability);
• object to processing based on legitimate interests;
• withdraw consent at any time — for cookies via “Cookie settings”.

8.1. We do not make decisions with legal effects about you based solely on automated processing (Article 22 GDPR). Automatic limits and antivirus checks only ensure the technical operation of the Service.

9. How to exercise your rights and complain

9.1. Email [email protected] from the address linked to your account. We reply within 30 calendar days (extendable in the cases provided for in Article 12 GDPR, in which case we will tell you). To prevent fraud we may ask you to confirm that you own the account.

9.2. You may lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (Article 8(2)(8) of the Law of Ukraine “On Personal Data Protection”) or go to court.

9.3. If you are in the EU/EEA, you may lodge a complaint with the data protection supervisory authority in the country of your residence, work or the alleged infringement (Article 77 GDPR). We would appreciate the chance to resolve your concern first.

10. Security

10.1. We use encryption in transit (HTTPS), an isolated processing environment with no network access, antivirus scanning, automatic file deletion, restricted staff access and secure key storage.

10.2. If a data breach poses a risk to your rights, we will notify you and, where required, the supervisory authority within the statutory deadlines.

11. Children

11.1. The Service is intended for people aged 16 and over (Article 8 GDPR). We do not knowingly collect data from younger people. If you believe a child has given us data, contact us and we will delete it.

12. Changes

12.1. The new version is published on this page with its date. Registered users receive advance notice of material changes by email.