[Privacy Policy heading]

[1. Introduction & Data Controller]

[Who is the data controller — company name, address, contact]

[Scope of this policy — what data, what services]

[2. Data We Collect]

[Account data — email, name]

[Usage data — submitted text, correction results]

[Payment data — handled by Stripe, not stored by us]

[Technical data — IP, browser, device info]

[3. AI & API Data Processing]

[Text submitted is processed via Google Gemini API]

[Confirmation: data is NOT used to train AI models]

[Data retention at API provider level — link to Google's policy]

[4. Legal Basis for Processing (GDPR Art. 6)]

[Contract performance — providing the service]

[Legitimate interest — security, fraud prevention]

[Consent — cookies, marketing]

[Legal obligation — tax, accounting records]

[5. Cookies & Tracking]

[Types of cookies — essential, analytics, preferences]

[How to manage / opt out of cookies]

[Third-party cookies — analytics provider placeholder]

[6. Data Sharing & Third Parties]

[Stripe — payment processing]

[Google — AI API processing]

[Hosting provider — infrastructure]

[No sale of personal data]

[7. Your Rights (GDPR)]

[Right of access — request a copy of your data]

[Right to rectification — correct inaccurate data]

[Right to erasure — "right to be forgotten"]

[Right to restriction / objection]

[Right to data portability]

[Right to lodge a complaint with supervisory authority (UODO)]

[8. Data Retention]

[How long data is kept — active accounts vs. deleted accounts]

[Submitted text retention policy]

[9. Contact & Data Protection Officer]

[Privacy contact email placeholder]

[DPO details if applicable]