Privacy Policy

Last updated: August 5, 2026

This Privacy Policy explains how What2Text (“we,” “us,” or “our”) collects, uses, and protects information when you use the What2Text: AI Message Writer web application at what2text.com/app (the “App”) and the website what2text.com (the “Site”).

The data controller is Coditech, a sole proprietorship registered in Poland (NIP 5273044186, REGON 524536663). Contact: support@what2text.com.

1. Information We Collect

• Account data. When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this to create and maintain your What2Text account. We never see your Google password.
• Content you provide. When you describe a situation or paste a message into the App, that text is sent to our AI provider to generate message suggestions. We do not ask for, and you should not include, other people's full names, phone numbers, or other identifying details — the App works just as well without them.
• Usage data. We record when you generate messages and which tone and length you chose, so we can enforce plan limits and improve the product. We do not store the text of your situations or the generated messages on our servers.
• Billing data. Subscriptions are processed by Stripe. We receive your subscription status and a customer reference, never your full card details.
• Support data. If you contact us, we receive your email address and the contents of your message.

2. What We Do NOT Collect

• We do not read, access, or store your actual text message conversations or your contacts.
• We do not sell your personal information to anyone.
• We do not use your message drafts for advertising or to train AI models.
• We do not store your card number — payment details go directly to Stripe.

3. How We Use Information

• To generate AI message suggestions in response to your requests;
• To operate your account, enforce free-tier and subscription limits, and process billing;
• To operate, maintain, and improve the App and Site;
• To provide customer support, monitor performance, fix bugs, and prevent abuse.

4. AI Processing

Message generation is powered by third-party large language model providers (currently OpenAI). The text you submit is transmitted securely to these providers to generate suggestions, is processed under contractual confidentiality obligations, and is not used by us to train models. Please avoid submitting sensitive personal data (yours or anyone else's) in your requests.

5. Cookies and Local Storage

We use browser local storage and cookies for essential functions only: keeping you signed in, remembering your language preference, and carrying a draft you started on the homepage into the App. We do not use advertising or cross-site tracking cookies. For visitor statistics we use Plausible Analytics, which we host ourselves — it sets no cookies, stores no personal data and does not track you across sites.

6. Data Retention

Account and usage records are kept while your account is active. If you ask us to delete your account, we delete your profile and usage records. Anonymous, aggregated statistics may be retained. Support emails are retained as long as needed to resolve your request.

7. Third-Party Services

We use a small number of service providers to operate the App: OpenAI (message generation), Supabase (authentication and database hosting), Google (sign-in), Stripe (payments), Netlify (website hosting), and self-hosted Plausible Analytics (cookieless visitor statistics). Each provider receives only the data necessary for its function and is bound by its own privacy commitments.

8. Children's Privacy

The App is not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing (including rights under the GDPR and CCPA/CPRA). To exercise any of these rights, contact us at the address below. We will respond within the timeframe required by applicable law.

10. Security

All data transmitted between your browser and our services is encrypted in transit using TLS. Access to your data is protected by row-level security in our database, and payment flows are handled entirely by Stripe. No method of transmission or storage is 100% secure, but we work to protect your information accordingly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, notified in the App. Continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

Questions about this Privacy Policy or your data? Email us at support@what2text.com.