Privacy Policy

1. Data we process

Account data: your email address (for passwordless sign-in) and plan status.

Usage data: the inputs you submit to tools and the generated outputs, basic logs (e.g., tool used, locale, timestamp), and anonymous, aggregated analytics.

Billing data: handled by Polar (Merchant of Record). We receive limited information such as plan, subscription status, and the email associated with a purchase — not full card details.

2. Why we process it (legal bases)

To provide the Service and generate your requested content (contract performance); to operate accounts and entitlements; to maintain security and prevent abuse (legitimate interests); to comply with legal obligations; and, where required, with your consent (e.g., non-essential analytics).

3. Processors & sub-processors

Cloudflare (hosting, CDN, security); Supabase (database & authentication); OpenAI (AI text processing of your inputs); Polar (payments & Merchant of Record); Resend (transactional email). These providers process data only to deliver their service to us and may be located outside your country, with appropriate safeguards for international transfers.

Inputs sent to AI tools are transmitted to the AI provider to produce outputs. Do not submit sensitive personal data you would not want processed by a third-party AI provider.

4. Retention

Account data is kept while your account is active. Generation logs are kept for a limited period for security and product improvement, then deleted or anonymised. You can request deletion at any time.

5. Your rights

Subject to applicable law (GDPR/KVKK and similar), you may request access, correction, deletion, restriction, portability, and you may object to certain processing or withdraw consent. KVKK Article 11 rights apply to users in Türkiye.

To exercise rights, contact support@toohottopost.com. You also have the right to complain to your local data protection authority.

6. Cookies

We use strictly necessary cookies/storage for core functionality and your consent choice. Non-essential analytics cookies are used only with your consent via the cookie banner.

7. Children

The Service is not directed to children under 16. We do not knowingly collect their data.

8. Changes & contact

We may update this Policy; the effective date above reflects the latest version. Contact: support@toohottopost.com.