Last updated: April 2026
What We Collect
- Account info: Email and password (hashed) when you sign up
- Conversation content you paste or upload: Messages, screenshots, and OCR-extracted text are sent to OpenAI for processing. Saved threads and coach sessions are stored in our database so you can resume them later.
- Generated content: AI replies, drafts, and strategy outputs are saved to your account history.
- Usage data: Daily limits, copy events, and feature interactions for product analytics and abuse prevention.
- Billing info: Handled by Stripe — we never see your card number.
- Anonymous analytics: Page views and performance metrics via Vercel Analytics (no third-party cookies).
- Error logs: Crash reports via Sentry (text masked, media blocked) to fix bugs.
How We Use Your Data
- Generate AI-powered reply suggestions and strategy
- Save your sessions so you can pick up where you left off
- Manage your account, plan, and subscription
- Improve product quality (aggregated usage patterns only)
- Send important account or billing updates
What We Don't Do
- We don't sell your data to third parties
- We don't use your conversations to train public AI models
- We don't spam you with marketing emails
- We don't connect to your messaging apps or read texts directly — you choose what to share
Data Retention
Saved threads, coach sessions, and reply history persist on your account until you delete them. Usage logs are retained for up to 90 days for abuse prevention. You can delete your account at any time, which removes all associated data within 30 days.
Subprocessors
We rely on these vetted third-party services to operate Text Wingman:
- Supabase — database + authentication
- Vercel — hosting + analytics
- OpenAI — AI inference (per OpenAI's API policy, your data is not used to train their models)
- Stripe — payments
- Sentry — error monitoring
Data Security
All data is encrypted in transit (TLS) and at rest. Row-level security policies in Supabase ensure your data is never accessible to other users. Production secrets are stored only in our hosting platform and never exposed in client code.
Your Rights
You can delete your account and all associated data at any time. Contact us to request data export or deletion.