This page explains what Humanish collects, why, and what we do (and don't do) with it, in plain language. If anything here is unclear, email us at [email protected].

Who we are

Autonova Solutions is operating Humanish out of Mumbai, India. You can reach us at [email protected].

What we collect

• Account info: your email address, used to log you in and contact you about your account.
• Your X data: your X handle and public posts and replies, fetched through a third-party X data API, so Humanish can find reply targets and learn your voice.
• Drafts: the replies and posts Humanish generates for you, and the state you move them through (approved, sent, discarded).
• Facts you enter: true things you add yourself on the About you page, so drafts never invent things about you.
• Voice feedback: when you mark a draft "Not me," we store that feedback and the rule it produces, to improve future drafts in your voice.
• Usage and cost logs: which runs and API calls happened and what they cost, so we can operate the service and control spend.
• Waitlist signups: if you join the waitlist, we store your email and which page you signed up from.
• The free "Is This AI?" checker: when you use /check, we do not store the text you paste. We store only the length, the score, the flags that fired, and a daily-salted hash of your IP address (never the raw IP), so we can enforce the daily usage limit and look at aggregate trends.
• Referrals: if you sign up through someone's link, we record who referred you and whether the referral earned a credit. To stop self-referrals and repeat trials we keep your X handle and a one-way hashed fingerprint of your payment card (never the card number itself, which we never see). The person who referred you sees only that a friend joined, not who you are.
• Buffer API key: if you connect Buffer, your API key is encrypted before it's stored and is only ever decrypted to make calls to Buffer on your behalf.

What we don't do

• We never ask for or store your X password.
• We don't read your X direct messages.
• We never post on your behalf. Every reply and post is copied and sent by you, by hand.
• We don't sell your data to anyone.
• We don't run ad trackers. There is no Google Analytics or Meta Pixel on Humanish. We use Cloudflare Web Analytics across the site, including the pages inside the app, to count visits. It records the page address, your country and browser type. It sets no cookies, does not follow you across sites, and is not linked to your account.

Who else sees your data (processors)

We use a small number of service providers to run Humanish. Each only sees what it needs to do its job:

• Anthropic: the text of your drafts and prompts is sent to Anthropic's Claude models to write and check drafts.
• TypeSafe: draft and candidate text is sent to TypeSafe (using its Jev models) to classify and filter content.
• getxapi: we use this provider to fetch public X data (posts, replies, profiles) on your behalf.
• Cloudflare: handles our DNS, the secure network tunnel in front of the app, and forwards email sent to our address.
• Resend: sends our emails to you (login links, account and billing notices, and emails you've opted into). It sees your email address and the message.
• Hetzner: hosts our servers, physically located in Finland, within the EU.
• Razorpay: will process payments once billing is live. Razorpay never shares your full card number with us.
• Buffer: only if you choose to connect it, to schedule your posts.

How long we keep things

• Drafts, facts, and usage logs are kept while your account is active.
• Waitlist emails are kept until launch or until you ask to be removed.
• Referral records (who referred whom, credit status, hashed card fingerprint) are kept while either account is active, and up to 12 months after, to handle refunds and prevent repeat trials.
• Backups are kept for 14 days on a rolling basis, then deleted.
• Checker data is aggregate only (score, flags, length, hashed IP). There's no raw text to delete because none is stored.

Your rights

You can ask us, at any time, by email to [email protected]:

• What data we hold about you (access).
• A copy of your data in a usable format (export).
• To delete your account and associated data (deletion), subject to what we must keep for legal, accounting, or fraud-prevention reasons.

If you're in India, these map to your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act). If you're in the EU/UK, these map to similar rights under GDPR. We'll respond to any request within a reasonable time, normally within 30 days.

Cookies

Humanish uses one session cookie to keep you logged in, and a CSRF token cookie to protect form submissions from cross-site attacks. If you arrive through a referral link, we also set a first-party cookie holding that link's code for 30 days, so the referral is counted if you sign up. If you arrive from another site or a tagged link, we also keep that source (the campaign tags or the site's name, nothing else) in a first-party cookie for 30 days, so we know which links bring people who sign up. We don't use cookies for advertising or cross-site tracking.

Security

Sessions use secure, signed cookies. Sensitive values like your Buffer API key are encrypted at rest. Backups are automated and kept for a limited window. No system is perfectly secure, but we build with this in mind at every layer.

Children

Humanish is not intended for anyone under 18. We don't knowingly collect data from minors.

Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where appropriate, let account holders know.

Contact

Questions about this policy or your data: [email protected].