Legal
Privacy Policy
Effective date: March 27, 2026 · Last updated: April 15, 2026
Texdule ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service at texdule.com.
1. Information We Collect
We collect only what is necessary to provide the service:
- Account information: When you sign in via Replit's OpenID Connect authentication, we receive and store: your internal user ID (
sub — a unique, opaque identifier issued by Replit), email address, first name, last name, and profile picture URL.
- Usage data: How many conversions you have made in the current billing period, which plan you are on, and your subscription status.
- Billing information: If you subscribe, Stripe collects and stores your payment details. We only receive your Stripe Customer ID and subscription status — we never see or store your card number, CVV, or billing address.
- Session data: A secure, encrypted session cookie is stored in your browser to keep you logged in.
- IP address (anonymous preview only): If you use the free anonymous preview on our homepage without signing in, we temporarily store your IP address in server memory solely to enforce rate limits (e.g. 1 file preview per hour). This is not written to a database, not linked to your identity, and is discarded automatically after the rate-limit window expires.
We do not collect:
- The text or documents you paste or upload — these are processed in server memory and discarded immediately after the response is sent. They are never written to disk or stored in a database.
- Your location, device fingerprint, or advertising identifiers.
2. How We Use Your Information
- To authenticate you and maintain your account.
- To track your plan and enforce usage limits.
- To process subscription payments through Stripe.
- To respond to support requests sent to us by email.
- To detect and prevent abuse or fraudulent activity.
- To send occasional product updates or promotional offers to registered users who have not opted out. Every such email includes a one-click unsubscribe link. You can opt out at any time by clicking that link or emailing us at texdulesupport@gmail.com.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. File Uploads and Pasted Text
Uploaded files (PDF, DOCX, TXT) and pasted text are processed entirely in server memory. They are never written to disk, stored in a database, or retained after your request completes. We cannot recover or access your documents.
AI processing: When you use any AI-powered feature (the AI upload tab, the Describe tab, or the AI assistant "Tex"), the text or file content you submit is used solely to extract calendar events and return results to you. It is not used to train AI models and is not retained after your request completes. This applies to both signed-in users and anonymous visitors using the free homepage preview.
4. Payments and Stripe
Subscription payments are handled by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you subscribe:
- Your card details are collected and encrypted by Stripe's hosted checkout — they never pass through our servers.
- We receive webhook notifications from Stripe to update your account status.
- Your Stripe Customer ID is stored in our database so we can manage your subscription.
Stripe's privacy policy is available at stripe.com/privacy.
5. Authentication and Replit
We use Replit's authentication (OpenID Connect) to handle sign-in. We do not store passwords. Replit's privacy policy is at replit.com/privacy.
6. Cookies
We use a single, server-set session cookie (connect.sid) to keep you logged in. This cookie is:
- HttpOnly and Secure — it cannot be accessed by JavaScript and is only sent over HTTPS.
- SameSite: Lax — it is not sent on cross-site requests, which reduces cross-site request forgery risk.
- Session-scoped — it expires when your session ends or after 7 days of inactivity.
We do not use analytics cookies, advertising cookies, or third-party tracking pixels.
7. Data Retention
Your account data (name, email, plan, usage counts) is retained for as long as your account is active. If you would like your data deleted, please contact us at texdulesupport@gmail.com and we will remove it within 30 days.
8. Data Security
All traffic is encrypted via HTTPS/TLS. Our servers are hosted on Replit's infrastructure. We apply rate limiting and authentication checks on all sensitive API endpoints. Webhook events from Stripe are verified using cryptographic signatures before processing.
9. Children's Privacy
Texdule is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us to have it removed.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact
Questions or concerns about your privacy? Contact us at:
texdulesupport@gmail.com