Privacy Policy
Draft for launch preparation · 7 September 2026
Operator and contact
HumanWords is operated by Soh Zu Wei in Singapore. For privacy questions, contact hello@humanwords.app. This notice is a launch draft and should be reviewed before live customer onboarding.
Information you provide
We store account name, email address, password hash, session information, documents, revisions, usage records, and support requests. Passwords are handled by the authentication system; raw passwords are not stored as account records. Stripe handles payment details on its hosted pages.
How your writing is processed
When you request detection, your draft is sent over an authenticated connection to HumanWords’s detector service, which runs the Vanguard model. When you request humanization, the complete source text is sent to our contracted humanization provider. HumanWords checks numbers and quotations in the returned text and may retry a revision that fails those checks. The provider processes text under its own applicable terms and privacy policy. Do not submit sensitive information you do not want processed by these services.
Storage and deletion
Documents and revision history are stored in the Cloudflare D1 application database so you can return to them. Deleting a document removes its content and revisions from active storage. Deleting your account removes account-associated application records. Stripe retains payment records under its applicable policies. Encrypted application backups use Cloudflare R2 with a seven-day retention policy; deleted content may remain in an existing backup until that backup expires. Unattended backup scheduling is still a launch-preparation dependency.
Analytics and operational records
We record limited events such as page visits, successful operations, checkout activity, and subscription changes to understand the funnel and service cost. We do not intentionally include essay text in analytics or routine error logs. Usage and job records include word counts, provider identity, status, timing, and estimated cost. Anonymous daily provider-cost totals may remain after account deletion; those totals contain no account identifiers or writing.
Cookies and security
Authentication uses HTTP-only session cookies. The app checks account ownership on document requests, restricts admin access to explicitly authorized accounts, and keeps service credentials on the server. No system can promise absolute security.
Your choices
You can download your drafts, delete documents, request account deletion, and contact support about your information. Do not upload content you lack permission to process. The initial service is intended for adults aged 18 or over.