privacy policy & terms of use

last updated: march 2026

who we are

fix.the.text. is a text correction service operated by an independent developer based in Poland. for the purposes of applicable data protection law (including the EU General Data Protection Regulation, “GDPR”), the operator is the data controller responsible for your personal data.

you can reach us via our contact page.

acceptance of terms

by accessing or using fix.the.text. (the “service”), including the web application at fixthetext.com and the Chrome browser extension, you agree to be bound by this privacy policy and these terms of use. if you do not agree, do not use the service.

the service

fix.the.text. is a text correction tool provided “as is” and “as available” without warranties of any kind, whether express or implied. the service uses AI to suggest corrections to text you submit. corrections are automated suggestions and may contain errors. you are solely responsible for reviewing and accepting any corrections before using them.

what we collect

when you use the service, we may collect the following:

  • account information — your name, email address, and profile image URL via Google Sign-In, used to identify and manage your account.
  • text you submit — the text you send for correction, any custom instructions you provide, and selected style preferences. we process it to return a corrected version and store it in your correction history.
  • usage data — which style options you use, correction feedback (thumbs up/down), processing time, token counts, the source of the request (web, extension, or API), and when corrections are made.
  • feedback & requests — any bug reports, feature requests, or feedback you submit, including whether you opted in for follow-up contact. credit requests and their status.
  • API keys — if you generate developer API keys, we store a cryptographically hashed version of the key and track when it was last used. the full key is shown once upon creation and cannot be retrieved afterward.
  • payment information — if you purchase credits, we store a transaction record including the Stripe session ID, payment ID, amount, number of credits, and payment status. we do not store your credit card details — all payment card processing is handled directly by Stripe.
  • technical data — IP addresses (processed for rate limiting and security purposes), request metadata, and standard server logs necessary for the operation and security of the service.

how we use your data

  • to provide and operate the correction service
  • to maintain your correction history
  • to manage your account, credits, and API keys
  • to process payments and maintain transaction records
  • to send transactional emails (e.g. credit request updates)
  • to respond to your contact form submissions or inquiries
  • to evaluate and improve correction quality through internal review of submitted text and resulting corrections
  • to improve the product based on aggregate usage patterns
  • to monitor, debug, and secure the service
  • to enforce rate limits and prevent abuse
  • to comply with legal obligations (e.g. tax and payment records)

we do not sell your data. we do not use your data for advertising.

legal basis for processing

we process your personal data under the following legal bases as defined by GDPR Article 6(1):

  • contract performance (Art. 6(1)(b)) — processing necessary to provide the service you requested: account management, text correction, credit management, payment processing, and correction history.
  • legitimate interest (Art. 6(1)(f)) — processing necessary for our legitimate interests, including service improvement, internal quality evaluation of corrections, security monitoring, fraud prevention, rate limiting, and aggregate analytics. we balance these interests against your rights and freedoms.
  • legal obligation (Art. 6(1)(c)) — processing necessary to comply with legal requirements, such as maintaining payment and tax records.
  • consent (Art. 6(1)(a)) — where you have given explicit consent, such as opting in to be contacted about feedback you submitted. you may withdraw consent at any time by contacting us.

third-party services

your data may be processed by the following third-party services as required to operate the service:

  • Google OAuth — used for authentication. we receive your name, email, and profile image URL; we do not access any other Google account data.
  • Microsoft Azure OpenAI — text you submit for correction is sent to Azure OpenAI for processing. per Microsoft's data processing terms, your data is not used to train AI models.
  • Microsoft Azure Communication Services — used to send transactional emails (e.g. credit request notifications, contact form forwarding).
  • LangSmith (optional) — we may use LangSmith for monitoring AI performance. when enabled, text you submit and the resulting corrections may be sent to LangSmith for quality monitoring and debugging purposes.
  • Stripe — used for payment processing. when you purchase credits, your email address and transaction details are shared with Stripe. Stripe processes your payment card information directly — we never receive or store your full card details. Stripe's processing is subject to Stripe's privacy policy.
  • Microsoft Azure (hosting) — the service is hosted on Microsoft Azure infrastructure. request data (including IP addresses) may be processed as part of standard hosting operations.

international data transfers

some of the third-party services listed above may process your data outside the European Economic Area (EEA). where this occurs, we rely on appropriate safeguards as required by GDPR, including:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • the service provider's participation in recognized data protection frameworks

by using the service, you acknowledge that your data may be transferred to and processed in countries outside the EEA, subject to these safeguards.

cookies & local storage

we use essential cookies required for authentication and session management (session token, CSRF protection, callback URL, OAuth state). we do not use analytics cookies, advertising cookies, or any third-party tracking.

the Chrome extension stores an authentication token and your style preferences in local browser storage (chrome.storage.local).

chrome extension

the Chrome extension requires permissions to access the active tab and run scripts to enable in-page text replacement. it requests broad host permissions to function on any website where you choose to use it.

when you trigger a correction, only the text you explicitly select is sent to our servers for processing. we do not passively read, monitor, collect, or analyze any content from pages you visit.

data retention & deletion

your data is stored as long as your account is active. we do not guarantee any specific retention period.

you may request deletion of your account and associated personal data by contacting us via our contact page. upon receiving a verified deletion request, we will make reasonable efforts to delete your personal data within 30 days.

upon account deletion:

  • your account information, correction history, feedback submissions, and API keys will be deleted.
  • payment transaction records may be retained as required by applicable tax and accounting laws.
  • anonymized or aggregated data that can no longer be linked to you may be retained.

your rights

under GDPR and applicable data protection law, you have the following rights regarding your personal data:

  • right of access — you can request a copy of the personal data we hold about you.
  • right to rectification — you can request correction of inaccurate or incomplete personal data.
  • right to erasure — you can request deletion of your personal data, subject to legal retention obligations.
  • right to restriction — you can request that we limit the processing of your personal data in certain circumstances.
  • right to data portability — you can request to receive your personal data in a structured, commonly used, machine-readable format.
  • right to object — you can object to processing based on legitimate interest. we will cease processing unless we have compelling legitimate grounds.
  • right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • right to lodge a complaint — you have the right to lodge a complaint with a supervisory authority. in Poland, this is the Urząd Ochrony Danych Osobowych (UODO) — uodo.gov.pl.

to exercise any of these rights, please contact us via our contact page. we will respond within 30 days as required by law.

your content & intellectual property

you retain ownership of any text you submit to the service. by using the service, you grant us a limited, non-exclusive, worldwide license to process, store, and display your text as necessary to provide the correction service.

we may also use submitted text and resulting corrections for internal quality evaluation, model performance analysis, and service improvement. we do not publish your text publicly or share it with third parties except as described in this policy.

user responsibilities

  • you are responsible for the content you submit. do not submit text that is illegal, harmful, or infringes on the rights of others.
  • do not submit sensitive personal data (e.g. passwords, financial information, health records, government IDs) through the service.
  • you are responsible for maintaining the security of your account and API keys.
  • do not abuse the service, attempt to circumvent rate limits, or use automated tools to access the service beyond the provided API.
  • you must be at least 16 years old to use this service.

credits & access

the service operates on a credit-based system. credits are provided at our sole discretion and may be revoked, adjusted, or expired at any time. we reserve the right to change credit allocations, pricing, or access terms without notice.

payments & refunds

credits may be purchased through the service via Stripe. all prices are displayed at the time of purchase.

credits are digital content that is delivered to your account immediately upon successful payment. by completing a purchase, you expressly consent to the immediate delivery of credits and acknowledge that you thereby waive your right of withdrawal under EU Directive 2011/83/EU (Consumer Rights Directive), to the extent permitted by applicable law.

refunds are generally not available once credits have been delivered. if you believe a payment was made in error, please contact us and we will review your case on an individual basis. this does not affect any mandatory consumer rights under applicable law that cannot be waived.

we reserve the right to change pricing at any time. price changes will not affect credits already purchased.

API usage

if you use the developer API, you agree to abide by any rate limits and usage restrictions. API keys are your responsibility — treat them as secrets. we reserve the right to revoke API access at any time for any reason.

content moderation

text submitted to the service may be screened by automated content filters provided by our AI infrastructure. if your text is flagged by these filters, the correction request will be rejected and your text will not be processed. no credits are deducted for rejected requests.

limitation of liability

to the maximum extent permitted by applicable law, fix.the.text. and its developer shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from:

  • your use of or inability to use the service
  • any errors, inaccuracies, or omissions in corrections provided by the service
  • any unauthorized access to or use of our servers or any personal information stored therein
  • any content or data submitted to or through the service
  • any interruption or cessation of the service
  • any third-party services, APIs, or integrations used by the service

in no event shall our total liability exceed the amount you have paid us in the twelve (12) months preceding the claim, or €10, whichever is greater.

disclaimer of warranties

the service is provided “as is” and “as available”. we make no warranties, expressed or implied, regarding the service, including but not limited to implied warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement. we do not warrant that corrections will be error-free, complete, or suitable for any particular use. you use the service at your own risk.

indemnification

you agree to indemnify and hold harmless fix.the.text. and its developer from any claims, damages, losses, liabilities, and expenses (including legal fees) arising from your use of the service, your violation of these terms, or your violation of any rights of a third party.

service availability & termination

we reserve the right to modify, suspend, or discontinue the service (or any part of it) at any time, with or without notice. we may terminate or suspend your account at our sole discretion, without prior notice, for any reason including breach of these terms.

upon termination, your right to use the service ceases immediately. any credits remaining in your account at the time of termination are forfeited and non-refundable, except where prohibited by applicable law.

force majeure

we shall not be liable for any failure or delay in performing our obligations under these terms where such failure or delay results from circumstances beyond our reasonable control, including but not limited to natural disasters, war, terrorism, pandemics, government actions, power failures, internet or telecommunications failures, third-party service outages, cyberattacks, or any other force majeure event.

data security

we implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. these include encryption in transit (TLS), hashed storage of sensitive credentials, rate limiting, and access controls.

however, no method of electronic transmission or storage is 100% secure. we cannot guarantee absolute security of your data.

in the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR, and will inform affected users without undue delay where the breach is likely to result in a high risk.

changes to this policy

we may update this policy at any time. continued use of the service after changes constitutes acceptance of the updated terms. we encourage you to review this page periodically.

governing law & jurisdiction

these terms shall be governed by and construed in accordance with the laws of Poland, without regard to conflict of law principles. any disputes arising from or relating to these terms or your use of the service shall be subject to the exclusive jurisdiction of the competent courts of Poland.

contact

questions, privacy requests, or concerns? reach us via our contact page.