Scope and our role
This policy explains how HumanShade processes personal information when you visit our website, create an account, buy a subscription or additional word credits, or use the HumanShade playground, HTTP API, or MCP server. It does not govern third-party sites or services that you choose to use independently.
When we say “HumanShade,” “we,” or “us,” we mean the operator of the HumanShade service. If you use HumanShade for another person or organization, you are responsible for having the authority and notices required to submit information on their behalf.
Information we process
We process only the information needed to provide and protect the service:
- Account information. Clerk processes your sign-in details, such as your email address and authentication factors. HumanShade stores the Clerk user identifier linked to your account and account status.
- Billing information. We store top-up amounts, currency, status, timestamps, and Polar checkout, order, and customer identifiers. Polar and its payment partners process payment-card and billing details; HumanShade does not store full card numbers.
- API-key information. We store key names, non-secret lookup and display details, a keyed cryptographic digest, creation and revocation times, and last-used time. We show the full secret only once and do not store it in recoverable form.
- Usage and request metadata. This includes an internal request ID, account or API-key ID, source, mode, request state, prompt and pricing versions, word and token counts, charge, latency, provider and model identifiers, provider request ID, timestamps, and a non-content error category.
- Technical information. Our infrastructure may process network, browser, device, cookie, and security-event information needed to deliver, authenticate, rate-limit, and protect the service.
- Communications. If you contact us, we process the information in your message so we can respond and keep an appropriate support record.
Customer text stays transient
Text you submit and output generated for you are processed in memory only for the request. By default, HumanShade does not write that content, excerpts, content hashes, hidden instructions, or model reasoning to its databases, object storage, caches, analytics, queues, logs, or support tools.
We send submitted text through Cloudflare infrastructure to the configured model solely to produce your requested output. HumanShade disables AI Gateway payload logging and caching for these requests. We do not use customer text or generated output to train models. You should still avoid submitting information you are not authorized to process.
How we use information
We use personal information to:
- create and authenticate accounts;
- provide humanization, API, MCP, dashboard, and support features;
- manage subscriptions, settle shared word-credit usage, process payments, and reconcile our ledger;
- prevent fraud, abuse, duplicate charges, and unauthorized access;
- monitor reliability and troubleshoot with non-content operational metadata;
- comply with law, enforce our terms, and establish or defend legal claims; and
- communicate about transactions, security, service changes, and this policy.
Depending on where you live, our legal bases include performing our contract with you, complying with legal obligations, and our legitimate interests in securing, operating, and improving the service. We seek consent where applicable law requires it.
Retention and security
Submitted and generated text is not retained by HumanShade after the request. We keep account, request metadata, API-key metadata, billing records, and append-only financial ledger entries for as long as needed to operate the service, reconcile balances, prevent fraud, resolve disputes, and meet legal, tax, and accounting obligations. Backup copies may persist for a limited period before routine deletion or isolation.
We use access controls, cryptographic key handling, data minimization, and other technical and organizational safeguards appropriate to the information we process. No online service can guarantee absolute security. Keep API keys confidential and contact us promptly if you suspect unauthorized use.
Your choices and rights
Depending on your location, you may have the right to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; or appeal a request decision. You may also complain to your local data protection authority.
Email privacy@humanshade.com to make a request. We may need to verify your identity and may retain information where required by law or necessary for security, fraud prevention, billing reconciliation, or legal claims. You may also manage authentication information through your account controls.
International use and children
HumanShade and its service providers may process information in countries other than yours. Where required, we rely on recognized transfer mechanisms and contractual or other safeguards for international transfers.
HumanShade is a paid service for adults and is not directed to anyone under 18. If you believe a minor has provided personal information to us, contact us so we can investigate and take appropriate action.
Changes and contact
We may update this policy as our service or legal obligations change. We will post the revised policy here, change the effective date, and provide any additional notice required by law. Material changes apply prospectively unless the law permits otherwise.
For privacy questions, email privacy@humanshade.com. For account, billing, or service support, email support@humanshade.com.