Privacy Policy

1. Introduction

This Privacy Policy explains how Host Server SRL ("Company", "we", "us", or "our"), a company registered in Iasi, Romania, collects, uses, stores, and protects your personal data when you use the TextCharm platform at textcharm.com (the "Service").

We are committed to protecting your privacy and processing your data in compliance with the General Data Protection Regulation (GDPR) and applicable Romanian data protection law. By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

• Host Server SRL
• Iasi, Romania
• Email: office@textcharm.com

3. What Data We Collect

3.1 Account Data

When you create an account, we collect:

• Name
• Email address
• Password (stored securely using one-way hashing — we cannot read your password)

3.2 Billing Data

When you subscribe to a paid plan or purchase credits, your payment information (card number, billing address) is collected and processed directly by Stripe, our payment processor. We do not store your full card details on our servers. We receive and store a limited set of billing metadata from Stripe, such as the last four digits of your card, payment status, and transaction IDs.

3.3 Usage Data

When you use the Service, we collect:

• The tools you use and the content you generate (stored in your generation history)
• Credit usage and transaction records
• Feature interactions (e.g., exports, library actions)

3.4 Contact Data

If you contact us through the contact form, we collect the name, email address, and message content you provide.

3.5 Analytics Data

We use a privacy-focused analytics service provided by Pivlu (pivlu.com) to understand how visitors use our website. This service does not store IP addresses and does not use cookies. It collects only aggregated, anonymous usage data such as page views, referral sources, and device types. No personally identifiable information is collected through our analytics.

4. How We Use Your Data

We use your personal data for the following purposes:

• Providing the Service — to operate your account, process generations, manage credits, and deliver the features you use
• Billing and payments — to process subscriptions, credit purchases, and issue invoices through Stripe
• Support — to respond to your inquiries and provide customer support
• Security — to detect and prevent fraud, abuse, and unauthorized access
• Legal compliance — to comply with applicable laws, regulations, and legal obligations

We do not use your data for marketing emails, advertising, or profiling. We do not sell your data to third parties.

5. AI Content Processing

When you use a TextCharm tool to generate content, the input you provide (such as topics, descriptions, and field values) is sent to Anthropic, our third-party AI provider, for processing. Anthropic processes this data solely to generate the requested output and returns it to TextCharm.

Key points about AI data processing:

• Your input is sent to Anthropic's API to generate the content you requested
• Anthropic's data processing is governed by their own privacy policy and data processing terms
• We do not send your personal account data (name, email, billing details) to Anthropic — only the content-related input fields required for generation
• You retain full ownership of both the input you provide and the output generated

For more information about how Anthropic handles data, please refer to Anthropic's Privacy Policy.

6. Cookies

TextCharm uses only essential cookies required for the Service to function:

• Session cookie — keeps you logged in while you use the Service. This cookie is automatically deleted when you close your browser or after a period of inactivity.
• CSRF token — a security cookie that protects against cross-site request forgery attacks on form submissions.

We do not use advertising cookies, tracking cookies, or any third-party cookies. Our analytics service (Pivlu) is completely cookie-free.

7. Data Sharing

We share your data only with the following third-party services, strictly as needed to operate the Service:

Provider	Purpose	Data Shared
Stripe	Payment processing	Email, billing details
Anthropic	AI content generation	Tool input fields only
Pivlu	Website analytics	Anonymous, aggregated data only (no IP, no cookies)

We do not sell, rent, or trade your personal data to any third party for advertising or marketing purposes.

8. Data Storage and Security

Your data is stored on servers located in the European Union. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure password hashing (bcrypt)
• Regular security updates and server maintenance
• Access controls limiting who can access personal data internally

9. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service. Specifically:

• Active accounts: Data is retained for the lifetime of the account.
• Account deletion: When you request account deletion, all personal data (account information, generation history, and associated records) is permanently deleted within 30 days.
• Billing records: We may retain billing transaction records for up to 10 years as required by Romanian tax and accounting regulations.
• Contact messages: Retained for up to 12 months after resolution, then deleted.

10. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct any inaccurate or incomplete personal data.
• Right to erasure — You can request that we delete your personal data ("right to be forgotten").
• Right to restriction — You can request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability — You can request your data in a structured, commonly used, machine-readable format.
• Right to object — You can object to certain types of data processing.
• Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at office@textcharm.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) if you believe your data rights have been violated.

11. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has provided us with personal data, please contact us at office@textcharm.com.

12. International Data Transfers

Your data is primarily stored and processed within the European Union. However, some of our third-party service providers (Stripe and Anthropic) may process data in the United States or other countries outside the EU. In such cases, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data receives an adequate level of protection.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us:

• Host Server SRL
• Iasi, Romania
• Email: office@textcharm.com