1. Controller
The controller responsible for data processing on TextGen is:
Luca Marino, 88074 Meckenbeuren, Germany
Email: support@text-ai-generator.com
2. Data we collect
2.1 When you visit the site
Our hosting provider (Vercel Inc., USA) automatically processes technical data your browser transmits: IP address, date and time of the request, request content, HTTP status, bytes transferred, referrer, browser type + version, operating system. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating the site).
2.2 When you sign up
If you create an account, we process your name and email address (via Google OAuth through NextAuth). Legal basis: Art. 6 (1) (b) GDPR (contract performance).
2.3 When you generate content
Your prompts, optional reference images, and the generated result are stored in our EU database (Supabase, EU-Frankfurt). Asset files live in AWS S3 (region eu-north-1, Stockholm). Prompts and reference images are forwarded to our model providers for inference:
- fal.ai Inc. (USA) — image, video, audio, and text generation.
- Cloudflare, Inc. (USA) — low-cost image generation (Workers AI).
Transfer to US providers is based on Standard Contractual Clauses (SCCs) per Art. 46 GDPR. Legal basis for processing: Art. 6 (1) (b) GDPR (contract performance).
2.4 When you pay
Payments are processed exclusively by Stripe Payments Europe Ltd.(Ireland). We receive only the confirmations necessary for billing (payment status, plan ID, Stripe customer reference). Credit card or bank details are handled solely by Stripe.
3. Cookies
We use the following technically required cookies only:
next-auth.session-token— session cookie for signed-in users.aigen_locale— stores your language preference (en/de).aigen_ref— referral code captured from shared links (30 days).anon_credits— counts remaining free generations for signed-out visitors (30 days).
Legal basis for these strictly necessary cookies is Art. 6 (1) (f) GDPR and § 25 (2) (2) TDDDG. No consent is required.
4. Analytics (Umami)
We use Umami (open-source analytics) self-hosted on our own EU infrastructure. Umami sets no cookies and stores no personal data. IPs are only hashed for same-day session attribution and then discarded. No profiles, no third-party sharing. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in privacy-friendly analytics).
5. Retention
- Account data: until revocation or account deletion.
- Generated content: until deletion by the user or account deletion.
- Billing-relevant data (Stripe): 10 years per § 147 AO (German fiscal code).
- Server logs (Vercel): 30 days.
6. Your rights
Under GDPR you have the right to:
- Access to your stored data (Art. 15)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object (Art. 21)
- Lodge a complaint with a supervisory authority (Art. 77)
Please direct requests to support@text-ai-generator.com. The competent supervisory authority for our seat is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Germany.
7. Changes
We may revise this Privacy Policy to reflect changed law or new features. The current version is always available on this page.