Privacy policy

Last updated: October 20, 2026

This policy describes how TEXTIAA ("Textiaa", "we") collects, uses, and protects your personal data when you use our services on https://textiaa.com.

Website publisher

Company name : CORTEX
SIRET : 99907426300016
Registered office address : 2 allée du Panorama, 91200 Athis-mons, France
Email : [email protected]

1. Data collection points

Account : first name, last name, email, password (hashed), language.
Billing : address, country, VAT, payment references (via provider).
Provided content : uploaded documents, form fields, histories, generation prompts (text and images).
Chat with PDF : uploaded PDF files, extracted and indexed text, questions, answers, highlighted passages and folders.
Academic projects : topic, context, outline, written chapters, references and added source documents.
Scientific figures : descriptions you enter, data supplied for a chart, generated figures, boards you compose, images uploaded in the editor and credits used.
Technical data : logs, IP addresses, device/browser identifiers, cookies.
Support : messages, attachments.

2. Use of information

Provide services (analysis, generation, history, quotas, anti-abuse).
Create and manage your account, billing, and fraud prevention.
Customer support and product improvement (aggregated statistics).
Legal and accounting obligations.

3. Sharing / Processors

We share data only with necessary service providers:

Payments: Stripe (secure payments)
Analytics: Audience measurement tools (aggregated and anonymized statistics)
Hosting: European cloud infrastructure, Secure data storage
Emails / Notifications: SendGrid, Twilio (transactional and informational emails)
Security and technical tools: Google reCAPTCHA (protects forms against bots), Google (sign-in with a Google account), Sentry (technical error monitoring), PayPal (affiliate commission payouts)

4. Legal basis (GDPR)

Performance of a contract (Art. 6-1-b GDPR) — service delivery.
Legitimate interest (6-1-f) — security, anti-abuse, improvements.
Legal obligation (6-1-c) — accounting, taxation, legal requests.
Consent (6-1-a) — non-essential cookies, marketing communications.

5. Third-party services & AI

Some processing relies on third-party APIs (including AI providers). We strictly limit transmitted data, encrypt channels, and do not allow re-training of models on your content without your explicit consent.

Primary AI provider: OpenAI (OpenAI, LLC, United States) — used for text generation, processing, and image generation. Transmitted data is subject to applicable GDPR standard contractual clauses.

OpenAI also processes the text of PDFs uploaded to Chat with PDF (indexing and answers) and academic agent projects (outline, chapters, style).

Other services: Anthropic (United States) for text humanization; DeepL (Germany) for translation and the dictionary; SerpApi (United States) for the web and Google Scholar searches used by plagiarism detection and source search; Crossref for bibliographic references. Only what is needed is sent to them: the text to process, the selected passage or the research topic.

Scientific figures: the text of your description and the data you enter are sent to OpenAI to generate diagrams, charts and illustrations and, for some drawings, to Anthropic (United States). For a molecule, only the substance name is sent to PubChem (public database, United States). Images you upload in the editor are not sent to these providers.

6. Security

Encryption in transit (TLS) and at rest according to our providers.
Access controls, logging, encrypted backups.

7. Retention periods

Account data: 3 years after last activity or deletion.
Billing data: 10 years (legal obligations).
Chat with PDF: on the free plan, the PDF and its index are deleted automatically 7 days after upload; on paid plans, they are kept while the account is active. Since a document cannot be deleted from the interface, you can request its erasure at [email protected].
Academic projects: kept until you delete them from your space or on request.
Scientific figures: figures, boards and uploaded images are kept until you delete them from your workspace or on request.

8. Your rights (EU/GDPR)

Access, rectification, erasure, restriction, portability, objection.
Exercise: [email protected]
Complaint: CNIL (France).

9. Cookies

Essential cookies (session, security) and, with your consent, audience measurement. A preference management panel is available on the site. You may modify or withdraw your consent at any time via this panel or your browser settings.

10. Minors

The service is not intended for users under 16 years old.

11. International transfers

When data leaves the EEA, we apply safeguards (standard contractual clauses / equivalents) and contractual controls.

12. Policy updates

We may update this page. The update date appears at the top.

13. Affiliate program

If you participate in the affiliate program, we process certain data in order to track referrals and calculate commissions.

Processed data: affiliate ID, referral link, events related to generated registrations and subscriptions (registered/subscribed status), commission amounts.
Purposes: attribution of referrals, fraud prevention, commission calculation, payment management, and reporting in your dashboard.
Legal basis: performance of a contract and legitimate interest (tracking, anti-abuse security).
Retention: affiliate data is retained for as long as necessary to manage the program and meet applicable legal/accounting obligations.

15. Browser extension

The Textiaa browser extension (Chrome, Firefox, Edge) collects and processes the following data during use:

Provided content: text selected by the user on web pages, only upon explicit user action, for AI processing (rewriting, correction, translation, summarization, etc.).
Authentication: session tokens stored locally (browser storage) to maintain connection to your Textiaa account — never shared with third parties.
Preferences: user settings (language, theme, shortcuts) stored locally on the device.
The extension does not collect browsing history, does not read pages without explicit user action, and performs no advertising tracking.
Data transmitted to the Textiaa API (textiaa.com) is subject to this privacy policy.