UnTXT Privacy Policy

Last updated: 20 October 2026 · Applies to untxt.uk and the UnTXT web application. The Chrome extension has an additional policy that covers its specific behaviour.

Who we are and how to contact us

UnTXT is operated by Sataklela OÜ, a company registered in Estonia, which makes us the data controller for the personal data described here. Raise anything here with us through our privacy address. We answer within a few working days.

What we collect and why

• Account data: signing in with Google passes us your email address, your name and your profile photo, all of which we use to operate the account, though your Google password is never once visible to us at any stage of that exchange.
• Age: UnTXT is for people aged 16 and over. The one exception is a pupil at a school that has agreed special terms with us, who may be younger (never under 13) and whose school is responsible for that. Those pupils can share their work only inside their school, cannot buy anything, and are sent no marketing email of any kind, only the messages an account needs to work. We cannot check anybody's age, and we do not knowingly collect data from anyone who does not meet the age that applies to them. If you think an account does not, tell us through our privacy address and we will delete it.
• Google Drive permission: the same Google screen also asks whether UnTXT may open files that you pick yourself from your Drive (the drive.file permission), and it does not give us access to anything else in your Drive. You can untick it, and you can withdraw it at any time from the third-party access page of your Google account. We use the access token once at sign-in to confirm who you are, and we never store it; later, when you choose a Drive file, your browser asks Google for a fresh token that is held in memory only.
• Submitted text: whatever you paste in gets processed so that your analysis can be produced, while saved results stay in your history for you to come back to later on.
• Usage and billing records: we keep word counts, credit movements and subscription state, because the service meters usage through CVT credits, while card payments run through Stripe, which means that card numbers never reach a server of ours at any point in the transaction.
• Analytics and advertising measurement: the sign-in page and the app load Google Analytics 4 (provided by Google Ireland Limited), which records the pages you visit, roughly where you are, the device and browser you use, and how you arrived, using cookies and similar identifiers. We use it to understand how people find and use UnTXT, and to measure our own advertising campaigns, including Google Ads. The app also loads an OpenAI advertising conversion tag, which tells OpenAI when a visit came from one of our ads there. Neither receives your submitted text or your results. You can block both with your browser's tracking protection or the Google Analytics opt-out add-on. We rely on our legitimate interest in measuring how the service and our advertising perform.
• When you use the service: we record the date you last ran an analysis, the date your account was last used for anything, and how many separate days it has been used on. We keep these dates and that count, and no record of what you did on those days. We use them to see whether UnTXT is useful enough for people to come back to, and to know which accounts are dormant. We rely on our legitimate interest in understanding whether the service works for the people who use it.
• Preferences: your language, theme and role choices live in your browser, not with us.
• Your country, for cover letters: German cover letters tend to be short, so we let them through at 150 words instead of 250, and to know when that applies we look up which country your IP address belongs to whenever you submit something of between 150 and 249 words. The lookup runs on our own server against a copy of the DB-IP country database, and the address is neither sent anywhere nor kept because of it. When the country comes back as Germany we ask Anthropic, one of the AI providers named below, whether the text is a cover letter, and we hold on to its answer, never the text itself, for up to an hour. We rely on our legitimate interest in applying the right minimum length to your text here.
• IP addresses we do keep: a few specific records hold one, namely the daily limit on free analyses from any one network, which stops the free run being claimed over and over, and the record made when you accept terms at checkout, which is our evidence that you agreed to them.

How the analysis works and where text goes

Most detection signals run as heuristics, so they never leave your machine. Some enhanced signals do send your submitted text to our servers for processing, and for those we call AI model providers, which at present means OpenAI, Anthropic and Google. Those providers handle text excerpts as subprocessors, and the excerpts are not used to train their models. Where a provider offers the control, we switch storage and training off.

How storage and security are handled

Saved analyses are encrypted while they sit at rest, always. Each history is sealed under its own AES 256 GCM key, and the app keeps only your 100 most recent entries, so the pile never grows without limit. Everything travels over HTTPS as it moves. The data itself lives in Google Cloud Firestore, which is our hosting subprocessor, rather than on hardware that we own.

Things that we never do with your data

• We do not sell personal data, nor hand it to anybody advertising at you.
• We do not use your submitted text to train AI models, ours or anybody else's, since that text is processed for exactly one purpose, which is producing your analysis.
• We do not put your submitted text, your results or your saved documents into any analytics or advertising tool.

Your rights and how deletion works

Any saved analysis can be deleted from the history view whenever you want, and that deletion takes effect immediately. The GDPR additionally gives you the right to ask for access to your data, for correction, for portability, or for full erasure of the account, and requests of that kind reach us at the same privacy address. Unlike a deletion inside the product, a full erasure request clears your account records entirely. To be clear, billing records may still be retained where the law requires that of us.

Changes to this policy and where they appear

Should this policy change in a way that genuinely matters to you, we will note the change here, and the date at the top of the page gets updated to match, so that you can tell at a glance whether anything has moved since you last looked.