Privacy & Security Policy - Textalyz

Effective Date: June 4, 2024Last Updated: June 4, 2025

1. Overview

Textalyz is an AI-powered tool available as both a Chrome Extension and a Slack App. We are committed to protecting your privacy and handling your data responsibly.

Google Chrome Web Store User Data Policy
Slack Marketplace Security Guidelines

We collect only the data we need to provide our core features — and nothing more.

2. What We Collect & Why

Authentication Tokens

Used to identify users, authenticate access to their Textalyz workspace, and track subscriptions or usage.

Stored securely (locally via Chrome, or server-side via encrypted storage).

Tab Metadata (Chrome Extension only)

We use tabs and activeTab permissions to detect which tab is active and enable or disable the extension contextually.

This metadata is used transiently during your session and is not stored.

Slash Command Input (Slack only)

When you use the /send command in Slack, we process the message in real-time to provide grammar correction, rephrasing, formatting, or translation suggestions.

We do not store the message text or responses unless you explicitly save it to your Textalyz workspace.

🚫 We Do NOT Collect:

Your browsing history
AI-generated messages, summaries, or rewrites
Slack message history, channels, files, or conversations
Any personal or sensitive data, unless explicitly submitted by the user
Any text on websites, unless you manually select and invoke the extension

3. Chrome Extension Permissions

To provide core features, the Chrome Extension uses the following permissions:

Permission	Purpose
storage	Store the auth token securely on your device
tabs, activeTab	Enable the extension contextually based on active websites
host_permissions (https:///, http:///)	Allow Textalyz to run on any website where you might write content

These permissions do not allow access to your browsing history or personal activity.

4. Slack App Integration

Only access data submitted by the user through the /send command
Do not access messages, channels, files, or history outside of the command context
Auth tokens are encrypted and stored securely
No user content is stored unless explicitly saved to your Textalyz workspace
Users can revoke access at any time through Slack settings

All data is processed in real-time and discarded unless needed for essential workspace features (like usage tracking or subscriptions).

5. Third-Party Services

We use Paddle for payment processing on paid plans. Billing data is handled securely via Paddle and not stored on our servers. (Paddle's Privacy Policy)

We do not currently use analytics or monitoring tools like Google Analytics or Sentry.

If future third-party services (e.g., error monitoring or usage analytics) are added, this policy will be updated accordingly.

6. Data Security

All interactions with Textalyz (Chrome or Slack) are encrypted via HTTPS
Tokens are encrypted both in transit and at rest
No personal user content or text is stored without user consent
Workspace-level data (e.g., plan status, usage limits) is kept minimal and secured

7. Your Rights & Controls

Revoke Chrome Extension permissions via chrome://extensions
Revoke Slack access via Slack's "Apps" tab
Request deletion of your account, token, or workspace data at any time by emailing us at dev@studiodevhub.com

8. Changes to This Policy

We may update this policy as our platform evolves. Any significant changes will be communicated via product updates or email (if you've registered).

📬 Need Help or Have Questions?

Email us anytime at dev@studiodevhub.com

We're happy to explain how we protect your data.