Privacy Policy
Last updated: April 21, 2026
This Privacy Policy explains how NativeText.co ("we", "us", "our") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Polish data protection law.
1. Data Controller
The data controller for the Service is the operator of NativeText.co, based in Poland. For all data-related enquiries, contact us at support@nativetext.co.
2. Data We Collect
| Category | Data | Source |
|---|---|---|
| Account data | Name, email address, hashed password | Provided by you at registration |
| Usage data | Text submitted for processing, humanized output, credit balance, transaction history | Generated through use of the Service |
| Payment data | Order amount, purchase date, credit package | Received from Lemon Squeezy after payment. We do not store card details. |
| Technical data | IP address, browser type, session data | Collected automatically via server logs and cookies |
3. How We Use Your Data
- To create and manage your account.
- To process your text through our AI model and return the result.
- To track your credit balance and transaction history.
- To respond to support requests.
- To send transactional emails (e.g. password reset). We do not send marketing emails without your explicit consent.
- To detect and prevent abuse, fraud, or Terms violations.
4. Legal Basis for Processing (GDPR Art. 6)
| Purpose | Legal Basis |
|---|---|
| Providing the Service (account, text processing, credits) | Performance of a contract — Art. 6(1)(b) |
| Payment processing and fraud prevention | Legal obligation / Legitimate interests — Art. 6(1)(c)(f) |
| Security, abuse prevention, service improvement | Legitimate interests — Art. 6(1)(f) |
| Marketing communications | Consent — Art. 6(1)(a) |
5. Third-Party Processors
We share data with the following sub-processors to operate the Service:
| Processor | Purpose | Location |
|---|---|---|
| Google LLC (Gemini API) | AI processing of submitted text | USA (SCCs apply) |
| Lemon Squeezy | Payment processing (Merchant of Record) | USA (SCCs apply) |
| Google LLC (Fonts) | Web font delivery | USA (SCCs apply) |
We do not sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting obligations (e.g. transaction records for up to 5 years under Polish tax law).
Submitted text and humanization history are deleted along with your account.
7. Your Rights Under GDPR
As a data subject, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure ("right to be forgotten") — request deletion of your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Restriction — request that we limit how we process your data.
To exercise any of these rights, contact us at support@nativetext.co. We will respond within 30 days.
You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
8. Cookies
We use only essential cookies required to operate the Service:
- Session cookie — keeps you logged in during your session.
- CSRF token — protects against cross-site request forgery.
We do not use advertising, tracking, or analytics cookies. No cookie consent banner is required for strictly necessary cookies.
9. International Data Transfers
Some of our sub-processors (Google, Lemon Squeezy) operate in the United States. Data transfers to these processors are made pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission, providing appropriate safeguards under GDPR Chapter V.
10. Children
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact & Data Protection
For any questions, data requests, or concerns about this Privacy Policy, contact us at:
NativeText.co
Email: support@nativetext.co