Privacy Policy

This Privacy Policy explains how Kobaltstack LLC (“Company”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use Human Auto Typer, including the Chrome extension, website, hosted Google sign-in page, and subscription features (collectively, the “Service”).

Information we collect

Google account information. If you choose Google sign-in, we receive your verified email address and a technical identity token needed to verify the sign-in. We use the verified email to restore or link an eligible subscription. We do not request access to Gmail messages, Google Drive files, contacts, or other Google account content.

Subscription information. When you buy a subscription, our payment providers may send us a payment or subscription identifier, plan, status, and renewal date, along with the email used for the purchase when necessary to provide access. Payment-card information is processed by the payment provider and is not stored by us.

Usage and diagnostics data. We collect an anonymous installation identifier, extension version, device category, language/time-zone signals, feature and paywall events, aggregate character-count and typing-duration metrics, and technical error information. We use these data to operate the Service, enforce free-plan limits, prevent abuse, understand conversion, and improve reliability. We do not send the text you type to our analytics systems.

Website data. Our website and infrastructure may process standard technical data such as IP address, browser/device information, request time, cookies, and country information supplied by Cloudflare. This is used for security, delivery, fraud prevention, and localized service configuration.

How we use information

• to provide, authenticate, secure, and maintain the Service;
• to process subscriptions, restore paid access, and provide support;
• to measure product usage and the conversion path from paywall to purchase using anonymous identifiers;
• to detect fraud, abuse, and technical problems; and
• to comply with legal obligations and enforce our agreements.

Legal bases

Where GDPR or similar law applies, we process information to perform our contract with you, pursue legitimate interests in security and service improvement, comply with legal obligations, and obtain consent where it is required.

Service providers and sharing

We share information only as needed with providers that help us run the Service: Google and Firebase for authentication and hosting, Cloudflare for infrastructure and security, EasyPay and its payment-processing partners (including Stripe where applicable) for payments, and hosting/analytics providers. We may also disclose information when required by law or to protect the rights, safety, and security of the Company, users, or the public. We do not sell personal information or use it for cross-context behavioral advertising.

Retention

We retain subscription and account-linking information while access is active and for a reasonable period afterwards to handle support, disputes, and legal requirements. Payment records may be retained for up to seven years where required. Anonymous usage and analytics events are retained for up to 26 months, then deleted or anonymized unless a longer period is required for security or law.

Cookies and local storage

We use essential browser storage and cookies for authentication, settings, and operation of the website and extension. Analytics technologies may be used to understand aggregate website usage. You can control cookies in your browser, though disabling essential storage may prevent some functions from working.

Security and international transfers

We use reasonable technical and organizational safeguards, including encryption in transit and access controls. No transmission or storage system is completely secure. Information may be processed in the United States and other countries where our providers operate; where required, we use appropriate safeguards for international transfers.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing is based on consent. California residents may have CCPA/CPRA rights, including rights to know, delete, correct, and not be discriminated against. To exercise a right, contact us at [email protected]. We may need to verify your identity before acting on a request.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided information to us, contact us so that we can take appropriate action.

Changes and contact

We may update this Privacy Policy from time to time by posting the revised version and updating the date below. For privacy questions or requests, contact [email protected].

Company details

Kobaltstack LLC
447 Broadway, 2nd Floor, 3436, New York, NY 10013, United States