Privacy Policy

Last updated: June 25, 2026

This Privacy Policy describes how Pyxl ("we", "us") collects, uses, discloses, and protects information when you use IHate.ai at https://ihate.ai, sign in with OAuth, subscribe on the website, or connect the IHate.ai app through ChatGPT and other clients that support the Model Context Protocol (MCP). Third-party products you use to reach us (for example OpenAI's ChatGPT or a sign-in provider such as Google) have their own privacy notices for those products—this Policy covers our practices for IHate.ai only. Commercial terms are in our Terms of Service.

This Policy is governed by the laws of the United States. By using our services, you consent to the data practices described here.

1. Information We Collect

  • Account and authentication: When you register or sign in on the website or via OAuth for ChatGPT / MCP, we process identifiers such as your email address, display name, profile image URL, and internal account id. We do not store your password in plain text; authentication may be handled by our identity provider.
  • Content you submit: Text you paste for humanization or formatting, generated humanized output, formatted markdown, rhythm settings, and documents you explicitly save in My Documents. Auto-saved session history may also be stored for your convenience.
  • Billing and subscriptions (website): Payment details are processed by Stripe. We receive subscription status, plan identifiers, and usage balances needed to operate the service—not your full card number.
  • Usage data: Word counts, feature usage, plan limits, and technical logs needed to enforce quotas, secure the service, and fix errors. We avoid logging full request bodies or secrets where feasible.
  • Cookies and similar technologies: On the website we use cookies or local storage for sessions and preferences. Where enabled, we use PostHog for product analytics; PostHog may process limited technical and usage data under their documentation.

2. How We Use Your Information

  • To provide, maintain, and improve IHate.ai (humanize, format, exports, saved documents, MCP tools, and widgets).
  • To run AI-assisted processing of the text you submit, including through subprocessors we use for models and infrastructure.
  • To enforce usage limits and manage subscriptions on the website.
  • To communicate important account or service notices.
  • To protect security, prevent abuse, and comply with law.

3. ChatGPT, OAuth, MCP, and Widgets

When you connect IHate.ai inside ChatGPT or another MCP client, you authorize access through OAuth (scopes such as humanize:read, humanize:write, and user:read). We process each tool call to fulfill your request and return structured results to the host application.

  • Host environment: The client that runs the conversation (for example OpenAI's ChatGPT) receives tool inputs and outputs as part of your session. Their privacy policy and terms also apply to how they handle that data.
  • Typical tool response data: We aim to return only what is needed for the feature—for example a limited account summary (plan, monthly word usage, links to the website), humanized text and diff metadata, and recent session ids/titles. We do not intentionally expose full payment card numbers, password secrets, or unrelated profile fields in MCP tool responses.
  • Widgets: Some tools load UI from our domains inside the host environment to display the humanizer. Those views follow this Policy.
  • What we do not do via MCP: Our tools do not post to social networks, send email or SMS, or publish to third-party websites on your behalf. Data flows to the host application (for example ChatGPT) and to our own storage and APIs to operate the feature you requested.
  • ChatGPT app vs website: The ChatGPT app provides humanization through the widget after OAuth sign-in. Document formatting, file uploads, and paid exports are website features; they are not required to use the free ChatGPT integration.

4. Text Processing & Third Parties

We do not sell your personal information. We may share information with service providers that process data on our behalf, including:

  • Supabase — database, authentication, and session storage.
  • Stripe — payments on the website.
  • AI model providers (via OpenRouter) — to humanize and format text you submit.
  • PostHog — product analytics when enabled.
  • Cloud infrastructure — hosting and delivery of the website and MCP endpoints.

These providers process data only as needed to deliver the service. We may also disclose information if required by law or to protect rights and safety.

5. Data Retention

Auto-saved session history may be pruned over time. Documents you explicitly save in My Documents are retained until you delete them or close your account. Account information is kept for the duration of your active account and for a reasonable period after deletion where required for backups, billing, or legal obligations.

6. Your Rights and Controls

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to restrict or object to certain processing. You can delete saved documents from My Documents and delete your account from the Account page on the website. For assistance or portability requests, contact us at support@pyxl.ai. For data processed via ChatGPT, you may also use host controls and contact us for requests we can fulfill on our systems.

If you are in the EEA, UK, or Switzerland, you may lodge a complaint with your local data protection authority. We comply with applicable GDPR, UK GDPR, and CCPA requirements where they apply. Nothing in this Policy limits rights that cannot be waived under applicable law.

7. International Users

Our services are operated from the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States and in other countries where our subprocessors operate. Where GDPR applies, we rely on appropriate safeguards for international transfers permitted by law.

8. Children's Privacy

Our services are not directed at children under 13 (or the age required by your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected such information, contact us at support@pyxl.ai and we will take appropriate steps.

9. Security

We use industry-standard measures to protect your data, including access controls that scope saved documents and sessions to your authenticated account. No method of transmission or storage is fully secure.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, additional notice (for example by email or in-product notice). Your continued use after the effective date constitutes acknowledgment of the updated Policy, except where prohibited by law.

11. Contact

Questions about this Policy? Contact Pyxl at support@pyxl.ai.