Privacy Policy
Last updated November 3, 2026
This policy explains what personal data NaturalHumanizer collects and why. The data controller is Batuhan Şenavcı, an individual based in Turkey. Contact: support@naturalhumanizer.com.
What we collect
- Account data: your e-mail address, sign-in records, plan and word balance.
- Text you submit: sent to our AI model provider to produce the rewrite. We do not store your text or the rewrite after the request is finished, and we do not use it to train models.
- Optional tools: when you run an AI check, your text is checked on our own server and is also sent to Sapling and ZeroGPT for their scores; we ask Sapling not to retain it. When you run a plagiarism check, your text is compared on our own server with an index built from Wikipedia articles; it is not sent to another company for this. These tools run only when you start them.
- Optional survey: if you answer the one-question survey about the AI checker your school uses, we store only the answer, linked to a keyed hash instead of your account, so we ask only once.
- Usage data: word counts, mode, timestamps and processing cost per request (without the text itself), used for billing, limits and abuse prevention.
- Technical data: IP address (kept only as a keyed hash in our rate-limit records), and security checks by Cloudflare Turnstile on the free trial.
- Payment data: handled by our payment provider, the merchant of record. We receive your subscription status and e-mail, never your full card details.
- Analytics (if enabled): anonymous product events such as "rewrite done" with mode and word count, linked to a pseudonymous id. No e-mail or text is included.
Why (legal bases)
- To provide the Service you asked for (contract).
- To prevent abuse and keep the Service secure (legitimate interest).
- To meet tax and accounting duties (legal obligation).
Who processes data for us
- Hosting: Hetzner Online (Germany).
- AI model inference: our AI model provider, which processes submitted text to return the rewrite.
- E-mail delivery: Resend (sign-in links).
- Payments: our payment provider (merchant of record).
- Bot protection: Cloudflare Turnstile.
- AI check (only when you use it): Sapling, ZeroGPT.
- Product analytics: PostHog, only if enabled.
Some of these providers are outside Turkey and the EU/EEA; transfers rely on the safeguards those providers offer, such as standard contractual clauses.
How long
- Account data: until you delete your account.
- Submitted text: not stored after processing.
- Rate-limit records: about 2 days. Sign-in links: expire after 15 minutes.
- Billing records: as long as tax law requires.
- After deleting your account we keep only a keyed hash of your e-mail so the free starter words are not granted twice.
Your rights
You can ask for access to, correction of, or deletion of your personal data, object to processing, or ask for a copy in a portable format. You can delete your account yourself on the account page. You may also complain to your local data protection authority (in Turkey, the KVKK Authority).
Cookies
We use one essential cookie to keep you signed in. It is not used for advertising.
Changes
We will post updates here and e-mail account holders about material changes.