Privacy Policy
Last updated: October 2026
1. What Data We Collect
When you use MagikText, we may collect:
- Account information: email address and authentication data (via Clerk)
- Usage data: word counts, humanization timestamps, request metadata
- Text input: text you submit for humanization is processed by our humanizer service and returned to you. If you are signed in, your history is stored so you can revisit past results.
- Payment information: handled entirely by Stripe. We never see or store your card details.
2. How We Use Your Data
- Provide and improve the humanization service
- Track usage against your plan limits
- Process payments and manage subscriptions
- Send transactional emails (receipts, plan changes, quota notices)
3. Sub-processors
We rely on the following third parties to deliver the service. Each is listed with its country of processing and the purpose it serves.
| Sub-processor | Country | Purpose |
|---|---|---|
| Clerk | United States | Authentication, account management, signup bot protection |
| Stripe | United States / EU | Payment processing, subscription billing, customer portal, tax calculation |
| Vercel | United States | Frontend hosting and edge delivery |
| Amazon SES | United States | Transactional email delivery (welcome, quota, billing, account events) |
| RunPod | United States | GPU compute for the humanizer model |
| Cloudflare | United States / global edge | Anti-abuse, bot mitigation, DDoS protection, edge caching |
| Hetzner | Germany | Backend API hosting and encrypted SQLite backup storage (Litestream) |
| PostHog | United States | Product analytics. With your consent, your browser sends page views, clicks and humanizer usage events, under your account ID when you are signed in. Our servers send account events under your account ID: signup (your email domain only), plan changes and cancellations (with your Stripe customer ID), each completed humanization (word count, plan, language), and each text we refuse for its language (the language only). We do not attach the text you submit. |
| Sentry | United States | Error reports. With your consent, your browser sends the error, the page address and browser details. Our servers send the errors they hit, with request metadata. We do not attach the text you submit. |
We do not currently maintain a separate DPA template. If you need one for compliance review, email us and we will work with you directly.
4. Cookies
MagikText uses cookies in three categories. Strictly-necessary cookies are always on; analytics and marketing cookies only fire if you grant consent in the cookie banner.
- Strictly-necessary (always on): Clerk authentication session, CSRF protection, and your cookie consent choice itself. Without these the product cannot function.
- Analytics (requires consent): product-usage telemetry used to improve the humanizer and the funnel. Disabled by default until you accept.
- Marketing (requires consent): attribution and conversion tracking for paid acquisition. Disabled by default until you accept. We do not run third-party advertising cookies at launch.
You can change your choice anytime: the "Cookie settings" button in the site footer opens the cookie banner again. When you are signed in, the Privacy screen of your account has the same control.
5. Data Retention
- Humanizations: retained while your account is active. After you delete an item, or your account, the underlying rows are purged within 30 days.
- Application logs: retained for 90 days, then deleted. Logs are scrubbed of submitted text and contain only request metadata.
- Database backups: Litestream replicates SQLite to encrypted off-site storage with a rolling 7-day retention window.
- Anonymous (non-logged-in) usage: request metadata only; not associated with a user record.
6. International Transfers
Your data is processed in the United States, Germany, and across global edge locations operated by our sub-processors. Cross-border transfers are governed by Standard Contractual Clauses (SCCs) where required by EU/UK data-protection law.
7. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Data portability
- Object to processing
8. Your Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information is collected
- Request deletion of personal information
- Opt out of the sale of personal information (we do not sell your data)
9. We Do Not
- Sell your personal data
- Use your text for AI model training
- Share your data with advertisers
10. Contact
For privacy inquiries, contact us at info@magiktext.com