1. Who we are
The operator of the service and the controller of your personal data.
Get Text Formula is operated by Cusnir Media SRL, registered at Birladeni, r-nul Ocnita, Republica Moldova. For privacy questions contact vadim.kusnir@gmail.com. Where required, our data protection contact is Vadim Cusnir (vadim.kusnir@gmail.com).
2. What we collect
We only collect data we need to run the product, bill it, and keep it safe.
| Category | Examples | Purpose | Legal basis (EU) | Retention | Shared with |
|---|---|---|---|---|---|
| Account data | Email, display name, hashed credentials, OAuth identifiers | Create and secure your account | Contract performance | Until you delete your account, then short backup window | Supabase Auth (via Lovable Cloud) |
| Content you submit | Pasted text, uploaded source, prompts, follow-up questions | Run analysis, generate formulas and outputs | Contract performance | Stored until you delete it. DATA NEEDED: confirm backup retention window. | Supabase / Lovable Cloud (EU/US regions per project setup), Lovable AI Gateway → Google Gemini (default: gemini-3-flash-preview) |
| Generated outputs | Formula reports, variants, library items, artifacts | Make your work available to you across sessions | Contract performance | Stored until you delete the artifact or your account | Supabase / Lovable Cloud (EU/US regions per project setup) |
| Billing data | Subscription tier, invoice metadata, last 4 of card via processor | Process payments, prevent fraud, meet tax law | Contract + legal obligation | As required by accounting law (typically 7–10 years) | Stripe |
| Product analytics | Anonymous/pseudonymous event counts, route, viewport | Understand what works, fix what doesn't | Legitimate interest (and consent where required) | DATA NEEDED: confirm PostHog retention. | Google Analytics 4 (consent-gated) + PostHog (server-side relay) |
| Technical logs | IP, user agent, request timing, error stack | Security, abuse prevention, debugging | Legitimate interest | Short rolling window (typically up to 30 days) | Supabase / Lovable Cloud (EU/US regions per project setup), hosting provider |
| Support messages | What you write to us by email | Answer you and improve the product | Legitimate interest | As long as needed to resolve and reference | Internal team |
3. How we use it
We use your data only for purposes that match the table above:
- Run the product features you actively use.
- Keep your account and content secure.
- Bill you correctly and meet tax obligations.
- Understand product usage in aggregate to improve it.
- Answer support requests and notify you about material changes.
4. AI processing
The core of the product is AI analysis. Here is exactly what that means.
- 01Your inputPasted text or upload
- 02ProcessingServer function + RLS
- 03AI analysisLovable AI Gateway
- 04Your resultFormula + report
- 05Storage / deletePrivate vault, your call
Your content stays private by default. Sharing or publishing is always an explicit, opt-in action you take inside the product.
- Your submitted content is sent to Lovable AI Gateway → Google Gemini (default: gemini-3-flash-preview) for inference, then the structured result is returned and stored against your account.
- Your content stays private by default. Publishing to the Formula Gallery, sharing a public link, or exporting a report is always an explicit action you take in the UI.
- DATA NEEDED: confirm in writing whether the upstream model provider uses inputs to train models, and document the retention period at the provider. Until confirmed, we do not claim "we never train on your data."
- AI output may be incomplete, inaccurate, or stylistically off. You are responsible for reviewing anything you publish.
- Do not submit content you are not allowed to process, including confidential third-party data, special-category personal data, or anything illegal in your jurisdiction.
5. Legal bases (EU/EEA users)
For users in the EU/EEA, we rely on:
- Performance of a contract — to deliver the product you signed up for.
- Legitimate interest — for security, abuse prevention, and basic product analytics, balanced against your rights.
- Legal obligation — for billing, tax, and lawful requests.
- Consent — where required (e.g. non-essential cookies, marketing). You can withdraw consent at any time.
6. Processors & international transfers
We work with the following processors. Each is bound by a data processing agreement and uses standard contractual clauses where applicable.
| Processor | Role | Location |
|---|---|---|
| Supabase Auth (via Lovable Cloud) | Authentication, identity | EU / US (per project region) |
| Supabase / Lovable Cloud (EU/US regions per project setup) | Database & storage | EU / US (per project region) |
| Lovable AI Gateway → Google Gemini (default: gemini-3-flash-preview) | AI inference for analysis & writing | DATA NEEDED: confirm region |
| Stripe | Payments & invoicing | EU / US |
| Google Analytics 4 (consent-gated) + PostHog (server-side relay) | Product analytics (server-side relay) | US |
| Gmail (vadim.kusnir@gmail.com) — transactional sends via Lovable Cloud | Transactional email | DATA NEEDED |
7. Retention
We keep personal data only as long as needed for the purpose we collected it. Account and content data is deleted when you delete your account; billing records are kept as long as tax law requires; logs roll off on a short window. Exact retention periods for backups and the AI provider are marked DATA NEEDED above and will be published once confirmed.
8. Security
We use the following safeguards today:
- HTTPS in transit for all browser and API traffic.
- Row-Level Security on every user-data table in our database.
- Private storage buckets, scoped to the owning account.
- Server-side checks for every save, export, library and publish action.
- Server-Side Request Forgery guard on URL ingestion (private network blocks, size and timeout caps).
9. Your rights
Subject to applicable law, you can request access, correction, deletion, restriction, portability, and objection. You can also withdraw consent and complain to your local supervisory authority. See the dedicated GDPR & Data Rights page for the exact process.
10. Children
Get Text Formula is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has used the service, contact vadim.kusnir@gmail.com and we will delete the account.
11. California (CCPA/CPRA)
California residents have rights to know, delete, correct, and limit the use of sensitive personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising. To exercise your rights, contact vadim.kusnir@gmail.com. We honor Global Privacy Control (GPC) signals where they apply.
12. Changes to this policy
We will update the "Last updated" date at the top of this page when this policy changes. For material changes we will also notify you in the product or by email before they take effect.
This page is written for clarity, not as legal advice. For specific questions about your rights, your contract, or applicable law, please consult qualified legal counsel in your jurisdiction.