Privacy Policy
NEOAIRA (“we”) respects and protects your privacy. This Privacy Policy (the “Policy”) explains how we collect, use, store and share your personal information when you use MeaningGlide (the “Service”), and the rights you have under the law.
Please read this Policy before using the Service. By using the Service you confirm that you have read and agree to it. We may update this Policy from time to time and will notify you in advance of material changes on the website or in the extension.
1. Data Controller
The data controller of the Service is:
- Name: NEOAIRA (an individual / sole trader operating under the laws of the United States; no registered company address)
- Privacy contact email: support.neoaira@gmail.com
- Data Protection Officer (DPO): not appointed
2. Personal Information We Collect
2.1 Information you provide
- Account information: when you sign in with Google, we receive your account identifier, email, name and profile picture as returned by Google. The Service has no passwords and stores none.
- Settings: default target language, interface language, back-translation and analysis language, and theme.
- Payment information: the platform order ID, billing period and order status. We do not store full card numbers; card data is handled by the payment processor (see Section 5).
- Communications: the feedback you submit (category, text and, if you choose, a contact email) and emails you send to support.
- Text you submit: the text you send to the translate, refine, analyze and back-translate features, and the text of the post you are replying to as read by the extension. It is used only to produce results and is not stored (see Section 7).
2.2 Information we collect automatically
- Device and network: the IP address and browser details at sign-in, kept with the sign-in session for account security.
- Usage: the platform, operation type, settlement status and time of each request, plus credit balance and order records. These records do not contain your text.
- Log data: technical logs such as request ID, endpoint path, status code and duration. They do not include your text, credentials, email or IP address.
- Rate-limit data: to prevent abuse of feedback, we keep only a keyed hash of the source address, not the raw IP.
Optional information
- Third-party sign-in: when you sign in with Google, we obtain the basic profile information you authorize (account identifier, email, name, profile picture).
We do not collect your precise location, and we do not read X page content unless you trigger an action.
3. How We Use Your Personal Information
| Purpose | Legal basis |
|---|---|
| Providing and maintaining the Service (sign-in, producing translation and analysis results, managing credits) | Performance of a contract |
| Billing and payment processing | Performance of a contract |
| Customer support and handling feedback | Performance of a contract / legitimate interests |
| Service notices (billing, security, policy updates) | Legitimate interests |
| Security and fraud prevention (rate limiting, detecting repeated free-credit claims, troubleshooting) | Legitimate interests |
| Content-safety review (deciding whether submitted text can be processed) | Legitimate interests / legal obligation |
| Product improvement and analytics | Legitimate interests |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to an individual.
4. Cookies and Tracking Technologies
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Staying signed in and core functions (sign-in credentials kept in the extension) | No |
| Functional | Language preference and interface settings (website local storage, extension settings) | Yes |
| Analytics | Not used | — |
| Marketing | Not used | — |
We do not currently use third-party analytics tools, advertising cookies or third-party behavioral tracking. The website is hosted on Cloudflare, which processes basic access logs; see https://www.cloudflare.com/privacypolicy/. You can clear local storage in your browser; you will then need to sign in again.
5. Sharing and Disclosure of Personal Information
We do not sell your personal information, including any “sale” as defined by applicable law such as the CCPA. We share your information only in the following cases:
- Service providers: Google (sign-in; its Gemini models may also receive the text you submit as a model service); DeepSeek (receives the text you submit in order to generate results, i.e. the model service); Waffo (Waffo Pancake processes payments and subscriptions and runs content-safety review of submitted text); Cloudflare (hosts the website and server); Neon (hosts the database). They process data only to serve us and under their own terms and policies; we do not authorize them to use your content to train models.
- Payment card data is processed exclusively by our PCI-DSS-compliant payment processor (Waffo Pancake) and is not stored on our servers.
- Legal and regulatory requirements: in response to law, a court order or a lawful request from an authority.
- Business transactions: in a merger, acquisition or similar event, with advance notice and continued protection.
- With your consent: for other purposes, only with your explicit prior consent.
6. Data Security Measures
- Encryption in transit: HTTPS throughout.
- Storage security: the Service stores no passwords; access secrets are kept with secure secret management.
- Access control: least privilege; restricted database access; the server verifies the sign-in session on every request.
- Dependency security: we regularly check and update software dependencies for known vulnerabilities.
If a security incident affects your rights, we will notify you and the relevant regulators as required by law within 72 hours of discovery. Keep your account credentials safe and do not share them.
7. Retention of Personal Information
| Data type | Retention period | Handling at expiry |
|---|---|---|
| Submitted text, generated results, back-translations and analyses | Not stored | — |
| Account information (account, settings, credit and usage records) | While your account exists, until you ask us to delete it | We handle deletion requests manually and complete them within 30 days |
| Transaction records (orders and payments) | 2 years | Deleted or anonymized, unless the law requires longer retention |
| Support records (emails) | 90 days | Securely deleted |
| Sign-in sessions | Valid for 7 days | Expire |
| Feedback text and contact email | 30 days | Cleared at expiry |
| Operational logs | Kept by Cloudflare under its log rules; contain no text | — |
8. Your Data Rights
To exercise any of the rights below, email support.neoaira@gmail.com; we will respond within 30 calendar days. To protect your account we may first need to verify your identity.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal information |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of your data under certain conditions |
| Right to restrict processing | Pause processing in certain situations |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests or marketing |
| Right to withdraw consent | Withdraw authorization for processing based on consent |
We will not discriminate against you for exercising these rights. If you believe we have not handled your information properly, you have the right to complain to your local data-protection authority.
9. Marketing Communications and Unsubscribing
We do not currently send marketing messages. If we later send product and promotion notices, we will do so only with your consent, include an “unsubscribe” link in each email, and you can also email support.neoaira@gmail.com at any time to stop them. Unsubscribing does not affect necessary service notices such as billing and security alerts.
10. International Data Transfers
Our servers and partners are located in the United States and other countries and regions, so your data may be transferred to and processed outside your location; the model providers DeepSeek and Google may be located in other countries or regions. For cross-border transfers we protect data as follows:
- We choose only providers with reasonable safeguards.
- Where applicable law requires it, we rely on lawful transfer mechanisms such as standard contractual clauses.
11. Children’s Privacy
The Service is intended for users aged 16 and over. We do not knowingly collect information from anyone under that age. If you believe your child has given us information, contact us immediately and we will delete it promptly.
12. Third-Party Links and Services
The Service may contain links to third parties (such as X and payment pages) or integrate with third-party services. This Policy applies only to information we collect directly. We are not responsible for third parties’ data practices; please read their policies before use.
13. Changes to This Policy
For material changes we will notify you on the website or in the extension at least 14 days before they take effect, and update the “Last updated” date at the top of this page. Continued use after the effective date constitutes acceptance.
14. Contact Us
- Privacy contact email: support.neoaira@gmail.com
- Customer support email: support.neoaira@gmail.com
- Operator: NEOAIRA (an individual)
- Service hours: email is accepted at all times; we reply within 2 business days
NEOAIRA · https://meaningglide.com