Subtext

Privacy Policy

Effective Date: April 7, 2026

This Privacy Policy describes how Subtext ("we," "us," or "our") collects, uses, and protects your information when you use our web application and related services (the "Service"). By using Subtext, you agree to the practices described below.

1. Information We Collect

1.1 Account Information (via Google OAuth)

When you sign in with Google, we receive and store:

  • Your name
  • Your email address
  • Your Google profile picture URL

We do not receive or store your Google password. Authentication is handled entirely by Google's OAuth 2.0 service.

1.2 Payment Information

Payments are processed by Stripe. When you subscribe, Stripe collects your payment details (e.g., card number, billing address) directly. We do not store your full payment credentials on our servers. We receive from Stripe only the information necessary to manage your subscription, such as your subscription status, plan type, and a truncated card identifier.

1.3 User-Generated Content

The core function of Subtext is to build behavioral models of the people in your professional environment. To do this, you provide us with observations, descriptions, and other input about individuals you interact with at work. This content is stored in your account and used to generate and refine behavioral models on your behalf.

1.4 Analytics Data

We use Vercel Analytics to collect anonymized, aggregated usage data about how the Service is accessed and used. This may include page views, session duration, device type, browser type, and general geographic region. Vercel Analytics does not use cookies and does not collect personally identifiable information.

2. How We Use Your Information

We use the information we collect to:

  • Authenticate your identity and maintain your account
  • Process payments and manage your subscription
  • Generate and maintain behavioral models based on your input
  • Improve, maintain, and monitor the performance of the Service
  • Communicate with you about your account, billing, and Service updates
  • Comply with legal obligations

3. How We Process Your Content

Your observations and the behavioral models generated from them are processed using large language models (LLMs). This processing is performed solely to deliver the Service to you. We do not use your content to train our models or any third-party models. Your content is not shared with other users.

4. Third-Party Services

We share information with the following third-party service providers, only as necessary to operate the Service:

  • Google (Authentication): Handles sign-in via OAuth 2.0.
  • Stripe (Payments): Processes subscription payments. Stripe's privacy policy governs their handling of your payment data.
  • Vercel (Hosting & Analytics): Hosts the Service and provides anonymized usage analytics.
  • LLM Provider(s): Processes your input to generate behavioral models. Content sent to LLM providers is transmitted for inference only and is not used for model training.

We do not sell your personal information to any third party.

5. Data Retention

We retain your account information and user-generated content for as long as your account is active. If you delete your account, we will delete your personal information and behavioral models within 30 days, except where retention is required by law or necessary to resolve disputes.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Export your data in a portable format
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at the email address listed below.

8. Children's Privacy

Subtext is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please reach out via our contact page.