Privacy Policy

Who operates the service.

HumanizationAI is operated by PoloStudio. For privacy, account, or billing questions, contact polostudio.brand@gmail.com. This policy describes this application’s actual processing; it does not claim a certification or compliance status.

What we collect and why.

Guest drafting and local writing scans run in your browser. A local recovery buffer retains the draft until cleared or 24 hours of inactivity. We receive selected content only when you explicitly request a rewrite. Signed-in autosave stores documents and versions; voice-profile creation stores your approved samples and preferences.

We process verified email identity, session data, service usage, word-credit movements, and payment references to provide accounts, prevent abuse, and operate billing. Support requests store the message you submit. Do not submit material you lack permission to process.

Where processing happens.

The frontend is hosted on Vercel. The application API, rewrite worker, and PostgreSQL database run on Hetzner infrastructure in Nuremberg, Germany. Draft content and voice samples in the application database are encrypted with AES-256-GCM, and public connections use TLS. Access is scoped to your account.

Rewrites send the selected writing and necessary preferences to OpenRouter and the selected Google/OpenAI model providers. We request provider routes with data collection denied. Provider processing and retention are governed by their applicable terms; processing is not entirely on your device. We do not train cross-customer models, publish drafts as examples, or use samples in marketing by default.

Better Auth manages authentication. Google processes identity information when you choose Google sign-in. Brevo delivers sign-in emails. Dodo Payments processes checkout, taxes, and payment details under its own terms. We retain provider references rather than raw card details.

Analytics is optional and excludes private writing.

With your consent, Google Analytics and Microsoft Clarity may measure public marketing-page visits. We do not load session replay in the editor, account, documents, profiles, billing, or sign-in pages. Public-to-private navigation reloads the document so public replay scripts do not follow you into the workspace.

Analytics events contain restricted metadata such as editing mode or word-count buckets. They exclude draft text, output text, titles, profile names, and clipboard content. You can decline analytics in the consent banner or account settings. Essential session and guest-preview cookies support sign-in and abuse prevention independently of analytics consent.

Retention and deletion.

Guest server content is removed within 24 hours. Current signed-in documents remain until you delete them. Previous versions are retained for 90 days; unapplied candidates and job content for 30 days. Voice samples and profile rules remain until profile or account deletion. Support content remains while the case is handled and until account deletion.

Account deletion immediately removes active content and sessions after stopping subscription renewal. Required billing records and content-free ledger data may remain for accounting or dispute needs. Encrypted database backups expire within 35 days. Deletion tombstones are retained so restored backups can be checked before access is enabled.

You can download an account export in Settings, delete individual documents and profiles, or delete your account. Contact us if you need assistance with a privacy request. Legal rights and any required retention depend on the circumstances and applicable law.