Your deleted words deserve more protection, not less.

We process your account email, connected X identity, sealed post, ordered text edits, selections, session timing, focus and visibility changes, blocked paste or drop attempts, attached media, media alternative text and file hashes, coarse platform and browser categories, technical integrity signals, receipts, subscription state, and security audit records.

We never read clipboard contents. We do not collect screen recordings, camera, microphone, geolocation, other open applications, or activity in unrelated tabs.

Session data is used to reconstruct the final text, calculate a session-only Trust Score, create the replay mode you choose, publish on X at your request, secure the service, prevent abuse, and provide account or billing support.

The Trust Score concerns one session. HumanTyped does not compare your rhythm across sessions to identify you and does not make automated decisions with legal or similarly significant effects.

Receipt scores, summary statistics, signatures, the sealed final post, and its attached media are public when a receipt is shared. Media files are kept in private storage and exposed through temporary signed links. A privacy-safe replay masks text later deleted. A full replay may reveal deleted drafts. A private replay is available only to its author.

Service providers currently include Supabase for authentication and data, Vercel for hosting, X when you connect or publish, Stripe for subscriptions, and Resend for transactional email. Product analytics must never contain post text, deleted text, keystroke events, raw timing, tokens, or private replay URLs.

Inactive unsealed drafts are scheduled for deletion after 7 days. Sealed but unpublished sessions are scheduled for deletion after 30 days. Free replay data is retained for 7 days after publication. Public Pro replay data remains while its receipt and account are active; private Pro replay data is retained until deletion or account closure. Attached media follows the lifecycle of its draft, sealed receipt, or account.

Revoked public receipts remain visible with a revoked label so a public proof does not vanish silently. Deleting your account permanently removes sessions, replay data, X tokens, receipts, and subscription records from the live service, subject to limited legal, security, and backup retention.

From Account and each receipt, you can export your data, disconnect X, reduce replay visibility, revoke a receipt, or delete your account. You may also ask to access, correct, delete, restrict, or receive your data, and object where applicable.

Contact privacy@humantyped.app. You may also complain to your competent data-protection authority.