Humaneer

1. Overview

This Privacy Policy describes how Humaneer (“we,” “us,” or “our”) collects, uses, and protects information when you use our AI-powered text transformation service (the “Service”). We are committed to protecting your privacy and handling your data transparently.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Text content: The text you submit for transformation (“Input”) and the transformed text returned by the Service (“Output”). This content is processed transiently and is not stored on our servers after processing is complete (see Section 5).
Payment information: When you purchase credits, payment details are collected and processed directly by our third-party payment processor (e.g., Stripe). We do not receive, store, or have access to your full credit card number or payment credentials.
Contact information: If you contact us for support, we may collect your email address and any information you voluntarily provide in your message.

2.2 Information Collected Automatically

Usage data: We may collect anonymized, aggregated data about Service usage, including number of transformations, style selections, and general usage patterns. This data is not linked to individual users or specific text content.
Technical data: Standard web server logs may include IP addresses, browser type, device information, referring URLs, and timestamps. This data is used for security monitoring and service maintenance.

2.3 Information We Do NOT Collect

We do not create user accounts or require registration.
We do not collect names, physical addresses, or demographic information.
We do not store or log the content of your text submissions (see Section 5).
We do not track individual users across sessions.

3. How We Use Information

We use the limited information we collect for the following purposes:

Service delivery: To process your text transformations and deliver Output.
Credit management: To authenticate your access token and track your credit balance.
Service improvement: To analyze aggregated, anonymized usage patterns to improve the quality and performance of the Service.
Security: To detect and prevent fraud, abuse, and unauthorized access to the Service.
Legal compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use your text submissions for training AI models.

4. Data Processing & AI Services

When you submit text for transformation, it is sent to Google’s Generative AI (Gemini) API for processing. By using our Service, you acknowledge that your submitted text is transmitted to Google’s servers for the purpose of generating the transformed Output.

Google’s data handling: Google processes this data in accordance with their own privacy policies and terms of service. We encourage you to review:

When using Google’s API for paid services (as we do), Google states that they do not use customer data submitted via their API to train their models. However, we cannot independently verify or guarantee Google’s internal data handling practices, and we make no representations regarding the same.

Important: Do not submit text containing sensitive personal information, protected health information (PHI), financial account numbers, social security numbers, or any other confidential data to the Service. The Service is designed for general text content only.

5. Data Retention

5.1 Text Content

Your Input and Output text are processed in real-time and are not stored on our servers. Text is held in memory only for the duration required to complete the transformation request and is discarded immediately thereafter. We do not maintain logs, databases, or backups of user-submitted text content.

5.2 Access Tokens

Your access token encodes your credit balance in a signed, self-contained format. We do not maintain a server-side database of user tokens or credit balances. The token itself is the authoritative record of your balance.

5.3 Technical Logs

Standard web server logs (which may include IP addresses and timestamps) are retained for a maximum of 30 days for security and operational purposes, after which they are automatically deleted.

5.4 Payment Records

Transaction records are maintained by our payment processor in accordance with their retention policies and applicable financial regulations. We retain only minimal transaction metadata (amount, date, transaction ID) for accounting and support purposes.

6. Third-Party Services

The Service integrates with the following third-party services, each of which has its own privacy practices:

Google Generative AI (Gemini): Used for text processing and transformation. Subject to Google’s Privacy Policy.
Payment processor: Handles all payment transactions. We do not store payment card information. See your payment provider’s privacy policy for details on their data handling.
Hosting provider: Our infrastructure is hosted on platforms that maintain their own security and privacy standards.

We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service that interacts with your data.

7. Cookies & Analytics

The Service currently does not use cookies for tracking, advertising, or analytics purposes. We do not deploy third-party analytics tools (such as Google Analytics) on our website.

If we introduce cookies or analytics in the future, we will update this Privacy Policy and implement appropriate consent mechanisms as required by applicable law.

Your browser may store locally cached data (such as your access token if you choose to save it in a browser field). This is controlled by your browser settings and is not managed by us.

8. Data Security

We implement reasonable technical and organizational measures to protect the limited data we handle, including:

HTTPS/TLS encryption for all data in transit.
HMAC-SHA256 signed access tokens to prevent tampering.
No persistent storage of user-submitted text content.
Regular security assessments of our infrastructure.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and shall not be liable for any breach of security beyond our reasonable control. You use the Service at your own risk.

9. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

Right to access: Request information about what personal data we hold about you. Given our minimal data collection, this is typically limited to technical log data.
Right to deletion: Request deletion of your personal data. Since we do not persistently store text content or maintain user accounts, there is generally no stored content to delete.
Right to portability: Request a copy of your data in a portable format.
Right to object: Object to certain processing of your personal data.

To exercise any of these rights, please contact us at support@teachmap.org. We will respond to valid requests within 30 days or as required by applicable law.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.

European Users (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our lawful basis for processing is legitimate interest (service delivery and security) and your consent (by using the Service). You may withdraw consent at any time by discontinuing use of the Service.

10. Children’s Privacy

The Service is not intended for use by individuals under the age of 18 (or the age of majority in their jurisdiction). We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such information promptly.

11. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.

Additionally, your text data is processed by Google’s AI infrastructure, which may be located in various jurisdictions globally. Please refer to Google’s data processing documentation for information about where their services process data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@teachmap.org

We will make reasonable efforts to respond to all inquiries within 30 days.