Privacy Policy
What we collect
- Account info: your name and email address when you sign up (phone number is optional).
- Chat sessions: when you're signed in, the text you paste and the polished result, plus the polish mode and a summary of what changed — saved so you can revisit past chats from the sidebar.
- Plan and quota data: which plan you're on and how many polishes you've used (timestamps and counts), so we can enforce daily limits.
- Anonymous polish metadata: for every polish (including guests), we log measurements only — polish mode, input/output length, whether it succeeded, and how long it took. This contains no text you typed and can't be traced back to what you wrote. We use it to find where the polisher fails so we can fix it.
- Training examples (only if you opt in): if you turn on "Help improve AvoPolisher" in Settings → Privacy, we also store the text you pasted and the polished result, plus whether you copied the result. This is off by default and only available to signed-in users.
Improving the AI (optional)
AvoPolisher gets better by learning from real examples. Sharing is entirely optional and off by default:
- You opt in with the "Help improve AvoPolisher" toggle in Settings → Privacy. Guests can't opt in.
- When it's on, we store your pasted text and the polished result as training examples, de-identified from your account before any training use.
- You can turn it off anytime. Turning it off deletes all of your stored training examples.
- We never use the text of users who haven't opted in to train AI models — their pastes are processed and discarded.
What we do NOT collect
- Guests' pasted text is never stored. Without an account, your text is sent to our AI backend for polishing and then discarded. We keep only anonymous measurements (counts, lengths, timing) that contain no text.
- Your card details. Payments go directly to Stripe; we never see or store card numbers.
How we use your data
Only to run the service: keeping you signed in, enforcing your plan's daily limits, processing payments, preventing abuse, and answering support emails. Nothing else.
Who processes your data
- Stripe — payment processing (subscriptions, invoices, billing portal). Stripe sets its own cookies on checkout and portal pages.
- Supabase — sign-in and our database (your account, plan, chats, and quota metadata).
- Google (Gemini API) — the AI that polishes your text. Your pasted text is sent to Google's Gemini API for processing.
- Cloudflare — bot protection on the signup form (Turnstile) and CDN/caching in front of the site.
- Gravatar (Automattic) — profile pictures. When you open Settings, a one-way hash of your email address is sent to Gravatar to look up your avatar; if you don't have one, nothing is displayed.
- Google, Facebook, or Apple — only if you choose to sign in with one of them. They confirm your identity to us; we receive your name and email address.
We don't share your data with anyone else, and we never sell personal data.
Cookies
We use a small number of essential cookies and browser storage (see the full Cookie Policy): your Supabase sign-in session and basic UI preferences in localStorage. There are no advertising trackers on AvoPolisher.
Data retention
We keep your account data for as long as your account exists. Chat sessions: free accounts keep the last 30 days of chats — older chats are deleted automatically. Pro, Premium, and admin chats are kept for as long as the account exists. You can delete individual chats anytime from the sidebar. Training examples: kept only while you've opted in — turning off "Help improve AvoPolisher" deletes them. Anonymous polish metadata is kept in aggregate for service improvement. Quota metadata is kept only as long as needed to enforce daily limits. If you delete your account, we delete your personal data within a reasonable time, except where we're required to keep records (for example, payment records for tax purposes).
Security
We use industry-standard measures: encrypted connections (HTTPS), authentication handled by Supabase, and card data handled entirely by Stripe. No system is perfect, but we take reasonable steps to protect your information.
Your rights
You can view and update your name and phone number in Settings → Account, delete chats from the sidebar, and turn AI training data sharing on or off in Settings → Privacy (turning it off deletes your stored training examples). To access, correct, or delete your personal data, email [email protected] and we'll handle it.
For users in the EU, UK, and other GDPR regions
Data controller: AvocadoWeb Services LLC, Wyoming, USA. Contact: [email protected].
Legal bases — we process your data only on these grounds (GDPR Art. 6):
- Contract: your account, chats, plan, and quota — needed to provide AvoPolisher to you.
- Consent: AI training examples — only when you turn on "Help improve AvoPolisher." You can withdraw consent anytime by turning it off, which deletes your stored examples.
- Legitimate interests: anonymous polish metadata (finding failures, measuring quality), security, and abuse prevention. This data contains no text you typed.
- Legal obligation: payment and tax records we must keep by law.
Your GDPR rights: access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Email [email protected] to exercise any of these — we'll respond within one month.
Complaints: you have the right to lodge a complaint with your local data protection supervisory authority.
International transfers
We're based in the United States, and your data is processed there by us and our processors (Supabase, Google, Stripe). Where data leaves the EU/UK, transfers are safeguarded by our processors' data processing agreements and Standard Contractual Clauses.
Children
AvoPolisher is for people 13 and older. We don't knowingly collect data from children under 13, and the optional AI training data sharing is not available to anyone under 13. If you believe a child under 13 has given us data, contact us and we'll delete it.
Changes to this policy
We may update this policy as the service changes. Material changes will be posted here with a new effective date.
Contact
Privacy questions: [email protected] · AvocadoWeb Services LLC.