How we handle your data.

1. Information We Collect

When you use AnythingText, we collect information you provide directly to us, including:

• Account Information: When you sign in with Google, we receive your name, email address, and profile picture.
• Uploaded Content: Images, screenshots, and documents you upload for text extraction.
• Usage Data: Information about how you use our service, including conversion history and feature usage.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our text extraction services
• Process your image-to-text conversions using AWS Textract
• Send you service-related notifications and updates
• Respond to your requests and provide customer support
• Monitor and analyze usage trends to improve user experience

3. Data Storage and Security

Your uploaded files are stored temporarily on Amazon S3 for processing purposes. We use industry-standard security measures including encryption in transit (TLS/SSL) and at rest. Extracted text is stored in our secure database for your convenience.

4. Third-Party Services

The complete list of third-party services AnythingText uses. Each has its own privacy policy linked below.

• Google OAuth2: authentication only (name, email, profile picture). Google policy.
• Google Analytics Data API: used only in the Analytics Dashboard tool, which displays your own GA property metrics back to you after you explicitly grant access.
• OpenAI: powers AI writing, image generation (DALL-E), and vision tools. OpenAI API data usage policy.
• ElevenLabs: text-to-speech and voice cloning. ElevenLabs privacy.
• Serper: Google search proxy for SEO and research tools. Serper privacy.
• PayPal: payment processing. We never see your card number. PayPal privacy.
• Amazon Web Services (AWS): infrastructure only — MySQL RDS (accounts, tool usage, blog posts) and S3 (ElevenLabs-generated audio cache). All in US regions. AWS privacy.

See the AI Models & Data Handling page for a per-tool breakdown of which provider handles which input.

5. Google User Data — Sharing, Transfer, and Disclosure

AnythingText's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Google user data we access

• Google Sign-In profile: your name, email address, and profile picture (from the openid, email, profile scopes).
• Google Analytics (read-only): when you explicitly connect the Analytics Dashboard tool, we use the analytics.readonly scope to fetch report data from Google Analytics properties you own or administer. We never write to, modify, or delete Google Analytics data.

How we use Google user data

• Profile data is used solely to identify your account, sign you in, and personalize your experience inside AnythingText.
• Google Analytics data is used solely to display your own property's reports back to you inside the Analytics Dashboard tool. It is fetched on demand, shown in your browser, and not used for any other purpose.

With whom we share, transfer, or disclose Google user data

We do not sell, rent, trade, or otherwise share Google user data with any third party for advertising, marketing, profiling, data brokering, creditworthiness assessment, or for training, improving, or developing generalized AI / ML models. Google user data is only shared in the following narrow, necessary circumstances:

• With you, the account holder: Google Analytics reports and profile information are displayed back to the same signed-in user who authorized access. No other AnythingText user can see your Google user data.
• With our infrastructure provider (Amazon Web Services): your Google profile (name, email, profile picture) is stored in our AWS-hosted database (Amazon RDS) and object storage (Amazon S3) in the United States, purely so we can operate the service. AWS acts as a data processor under our instructions and does not have independent rights to your data.
• When required by law: we may disclose Google user data if compelled to do so by a valid legal process (for example, a subpoena, court order, or binding request from a government authority), or where necessary to investigate fraud, security incidents, or violations of our Terms of Service.
• In a business transfer: if AnythingText is involved in a merger, acquisition, or sale of assets, Google user data may be transferred to the successor entity, which will be bound by this Privacy Policy (or a policy at least as protective).

We do not transfer Google user data to OpenAI, ElevenLabs, Serper, or any other third-party API provider. Google user data is never sent to AI models and is never used to train AI.

Revoking access

You can revoke AnythingText's access to your Google account at any time from your Google Account permissions page at myaccount.google.com/permissions. You can also delete your AnythingText account by contacting us at the email below, which will remove all stored Google profile data from our systems.

6. Data Retention

• Account info (name, email, profile picture): kept while your account is active. Deleted within 30 days of account deletion.
• Tool usage counters: aggregated, anonymous per-tool totals kept indefinitely for public stats. No per-user tracking in these numbers.
• Purchase records: PayPal transaction ID + plan + date, kept for 7 years (tax and refund requirements).
• Uploaded files: for server-side tools, files live in memory during the request and are discarded. We do not persist uploaded files.
• AI prompts and responses: not stored. Sent to the AI provider, returned to you, and discarded.
• Access logs (IP, user agent, timestamp): 30 days, then rotated.
• Generated audio cache: ElevenLabs-generated audio is cached in our S3 so identical synthesis requests across users share one file. Cache entries are keyed by (voice + text hash), not by user.

7. Your Rights

Under GDPR, CCPA, and similar laws, you have the right to:

• Access the data we hold about you — available in your Account page or by email.
• Export your data — available from the Account page.
• Delete your account and data — "Delete My Account" in the Danger Zone of your Account page, or by email.
• Correct data — most fields update automatically from Google; for other corrections, email us.
• Object to processing or restrict it — email us.
• Lodge a complaint with your local data protection authority.

All requests are handled within 30 days, typically within 24 hours.

8. Cookies & Local Storage

We use:

• Session cookie (essential): keeps you logged in after Google OAuth2. Deleted on sign-out.
• CSRF cookie (essential): prevents cross-site request forgery on form submissions.
• localStorage: your tool inputs, recent tools, pinned tools, preferences, and per-tool history. Stays on your device only. Clearing browser storage removes everything.
• Google Analytics (optional): we load gtag.js for anonymized traffic measurement on public pages. No personally identifiable info is sent.

9. Children

AnythingText is not directed at children under 13. Some educational tools (K-12 review, language tutorials) may be used by minors under parental supervision. We do not knowingly collect data from children under 13. If you believe we have, email us and we'll delete the account immediately.

10. Changes to this Policy

If we make material changes, we'll update the "Last updated" date at the top and notify signed-in users by email. Minor clarifications (typos, link updates) are made without notice.

11. Contact

Questions, requests, complaints — all go to the founder directly:

• Email: cholo.asis@qnsub.com
• X / Twitter: @choloasis

Typical response time is under 24 hours.