Privacy policy
We collect as little as we can, we do not store the text you submit, and we never use it to train AI models.
Last updated: 2026-10-28
Who we are
This policy covers humanizergpt.ai and the HumanizerGPT tools. The data controller is NOWAY MOBILE OÜ (registry code 17201091), Tornimäe tn 5, 10145 Tallinn, Estonia. Questions about privacy can be sent to contact@nowaymobile.com.
What we collect and why
| Data | Why | How long |
|---|---|---|
| Text you submit to a tool | To produce the result you asked for. It is sent to our AI model provider and the result is streamed back to your browser. | Not stored by us, whether or not you are signed in. |
| Files you upload (.docx, .pdf, .txt, .md) | To put their text in the input box. | Read in your browser only; files never reach our servers. |
| Account email address | To create your account, send sign-in codes and contact you about your account or billing. | Until you delete your account. |
| Sign-in sessions (a hashed session token) and sign-in codes (hashed) | To keep you signed in and to verify sign-in codes. | Sessions up to 30 days; codes 10 minutes. |
| Plan, word balance and subscription status | To provide the plan you chose and enforce word limits. | Until you delete your account. |
| A salted hash of your IP address, rotated daily, and the number of words used that day | To enforce the free daily limit. We do not store your raw IP address for this. | About 7 days. |
| Sign-in attempt records (email and a salted IP hash) | To stop brute-force and spam sign-in attempts. | About 24 hours. |
| Usage metrics per request (tool, mode, word and token counts, status, time) | To run, bill and improve the service. These records contain no text. | Up to 24 months; unlinked from you when you delete your account. |
| Billing records (Stripe customer and subscription IDs, invoices) | To charge for paid plans and meet accounting law. | 7 years, as required by the Estonian Accounting Act. |
| Email address you give us for a waitlist | To tell you when the product you signed up for launches. | Until it launches or you ask us to remove it. |
| Messages you send us | To answer you. | As long as needed to resolve the request. |
| Technical request data (such as IP address and browser) processed by Cloudflare | Security, bot protection and keeping the site running. | Per Cloudflare's retention. |
Payment card details are entered on Stripe's checkout page and never reach our servers.
We do not train on your text
We never use the text you submit to train AI models, and we do not sell personal data. We only work with AI model providers whose terms do not allow them to use our API traffic to train their models.
Service providers
- Our AI model provider provides the AI model that processes the text you submit.
- Cloudflare hosts the site and database, sends sign-in emails and provides security and bot protection (Turnstile).
- Stripe processes payments, subscriptions and invoices.
These providers process data on our behalf and only for the purposes above. Some of them process data outside the European Economic Area; where required, we rely on appropriate safeguards such as the EU standard contractual clauses or the EU–US Data Privacy Framework.
Cookies
We use one essential cookie, a secure session cookie that keeps you signed in. Our bot protection (Cloudflare Turnstile) may also set technically necessary cookies. We do not use advertising or tracking cookies, and our fonts are served from our own domain. If we add analytics or advertising tools later, we will update this policy and ask for consent where the law requires it.
Legal bases (EEA and UK)
We process data to provide the service you request (contract), to protect and improve the service and prevent abuse (legitimate interests), with your consent where we ask for it (for example a waitlist), and to meet legal obligations such as accounting rules.
Your rights
Depending on where you live, including under the GDPR and the CCPA, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, to withdraw consent, and to complain to a data protection authority. In Estonia that is the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee). We do not sell or share personal information for cross-context behavioural advertising.
You can delete your account yourself at any time from your account page. For any other request, email contact@nowaymobile.com. We may need to verify your identity first.
Security
We use encryption in transit, store only hashes of sign-in tokens and codes, limit access to production systems and keep the data we hold to a minimum. No system is perfectly secure, but we work to keep the data we hold as small and as safe as possible.
Children
HumanizerGPT is not directed at children under 13, and we do not knowingly collect their personal data. Paid plans are for adults or need a parent's or guardian's permission.
Changes
If we change this policy, we will update the date at the top of this page and, for significant changes, give notice on the site or by email.
Governing law
These terms are governed by the laws of the Republic of Estonia. Disputes are settled by Harju County Court (Harju Maakohus), unless mandatory consumer law where you live gives you the right to bring a claim in your own courts.