TEXXR ("we," "us," or "our") operates texxr.com (the "Site") and the TEXXR Pulse API (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Site and Service.
Last updated: April 3, 2026
Information We Collect
We may collect the following categories of information when you use the Site:
- Account information: Email address, provided when you sign up for API access via magic link authentication.
- Payment information: When you purchase credits, payment is processed by Stripe. We do not store credit card numbers or full payment details — Stripe handles this directly under its own privacy policy.
- API usage data: API key identifiers (hashed, never stored in plain text), request counts, endpoints accessed, and timestamps.
- Technical and usage information: IP address, browser type, device identifiers, pages viewed, links clicked, and timestamps, collected through cookies and similar technologies.
We do not collect passwords (we use passwordless magic link authentication). We do not sell personal information.
How We Use Information
We use personal information for purposes including:
- Providing, operating, and maintaining the Site and API Service
- Authenticating users and managing API keys
- Processing payments and managing credit balances
- Monitoring API usage and enforcing rate limits
- Analyzing site usage to improve the product
- Preventing abuse and protecting the security of the Service
- Communicating with you about your account (service emails only — we do not send marketing emails)
Analytics (PostHog)
We use PostHog, an analytics and product insights service, to understand how users interact with the Site and to improve performance and features. PostHog collects:
- All visitors: Page views, clicks on buttons and links, device information, and approximate location based on IP address
- Logged-in users: Email address and account tier are associated with your analytics profile so we can understand feature usage by user segment
- Feature usage: We track which product features you use (search queries, arc visualizations, knowledge graph queries, drift analysis) to improve the product
PostHog creates person profiles only for logged-in users (identified_only mode). Anonymous visitors are tracked with aggregate data only. PostHog processes this information on our behalf in accordance with its own privacy and compliance documentation. You can learn more at posthog.com/privacy.
Payment Processing (Stripe)
We use Stripe to process payments for API credits. When you make a purchase, Stripe collects payment information (credit card number, billing address) directly. We receive only a confirmation of payment, a transaction identifier, and basic billing details — we never see or store your full card number.
Stripe processes payment information in accordance with its own privacy policy and PCI-DSS compliance standards. You can learn more at stripe.com/privacy.
Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Session management: Maintain your authentication state across pages
- Analytics: Understand site usage (via PostHog)
- Rate limiting: Track API request rates (via Redis)
We do not use cookies for advertising or cross-site tracking. You can manage cookies through your browser settings; however, disabling cookies may affect the functionality of the Site.
Hosting and Infrastructure
The Site is hosted on Hetzner Cloud infrastructure in the United States. All data is processed and stored in the US. Data is stored in PostgreSQL databases. API keys are stored as SHA-256 hashes — we never store or can recover your raw API key after generation.
We use HTTPS (TLS) for all connections, implement rate limiting, employ security headers (HSTS, CSP, X-Frame-Options), and follow security best practices. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
How We Share Information
We may share personal information with:
- Service providers: Hosting (Hetzner), analytics (PostHog), payment processing (Stripe), email delivery (for magic link authentication), and caching (Redis)
- Professional advisors and authorities: When required by law or to protect rights, safety, or property
If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We do not sell, rent, or trade personal information to third parties for marketing purposes.
Legal Bases
Where applicable privacy laws require a specific legal basis (for example, for users in the European Union or United Kingdom), we rely on:
- Performance of a contract: Providing services you request (API access, account management)
- Legitimate interests: Securing and improving the Site, analyzing usage patterns, preventing abuse
- Consent: Where required by law for non-essential cookies or analytics, obtained before processing
Your Rights
Depending on your location and applicable law, you may have the right to:
- Access, correct, or delete your personal information
- Object to or restrict certain processing
- Receive a copy of your personal information in a portable format
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise these rights, contact us at the email address below.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy:
- Account information: Retained for as long as your account is active
- API usage logs: Retained for 90 days
- Analytics data: Retained per PostHog's data retention settings
- Payment records: Retained as required by financial regulations
You may request deletion of your account and associated data at any time.
International Transfers
All data is processed and stored in the United States. If you access the Site from outside the US, your information will be transferred to and processed in the US. Where required by law, we ensure appropriate safeguards are in place for such transfers.
Children's Privacy
The Site is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take reasonable steps to delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "last updated" date. Your continued use of the Site after changes constitutes acceptance.
Contact
For privacy-related questions or to exercise your rights, contact: privacy@texxr.com