GlossaryAI

Legal information

Privacy Policy

Effective September 6, 2026.

This Policy explains in plain language how GlossaryAI handles personal data.

1. Controller and contact

The controller is GlossaryAI, Brazilian company registration CNPJ 22.142.139/0001-02, in Porto Alegre, RS, Brazil. For privacy questions or requests, email contact@glossaryai.pro.

2. Data we handle

  • Account: email address and temporary authentication links.
  • Preparations: context you provide, file names and extracted text, selected languages, public URLs you provide, and generated results.
  • Use and security: IP address, essential session cookie, dates, usage limits and technical logs needed for security and diagnosis.
  • Subscription: customer, subscription and payment identifiers and status received from Stripe. We do not store full card numbers.

3. Why we use this data

We use data to create and retain your preparations, authenticate your account, process subscriptions, provide support, prevent abuse and fraud, fix problems and comply with legal duties. Applicable legal grounds include performing our contract, taking steps you request, complying with law, and legitimate interests in security and operation.

4. Artificial intelligence and service providers

We share only what is needed with providers supporting the service:

  • OpenAI: processes context, extracted text and public URLs you provide to generate the preparation. Requests disable response storage (store=False), but this does not mean absolute zero retention by the provider, which may process data for security under its policies.
  • Stripe: processes payments, subscriptions and the billing portal.
  • Resend: sends sign-in links by email.
  • Railway: hosts the application and its data.

We may also share data when required by law or necessary to protect rights and safety. We do not sell personal data or use it for behavioral advertising.

5. Public URLs and web search

Web search may be used only for the initial preparation and Find More when you deliberately enter a public URL in the context field. URLs found inside uploaded files do not enable search.

6. International transfers

Some providers may process data outside Brazil. In those cases, we use services subject to contractual commitments and safeguards appropriate to the processing and seek to follow applicable international data-transfer rules.

7. Retention and deletion

  • The original uploaded file is deleted after every extraction attempt, including failed attempts.
  • We retain extracted text, context and results for account preparations until the user deletes them.
  • Anonymous preparations are deleted after 30 days and may become inaccessible earlier if the browser session is lost.
  • Sign-in links expire after 15 minutes. Operational and usage-limit records are kept only as long as needed for their purpose.
  • Financial records may be kept for periods required by law. Backups, when present, may retain deleted data until they are replaced in the operational cycle.

8. Cookies and security

We use an essential cookie to maintain the session and authorize access. We currently use no advertising or analytics cookies. We apply technical safeguards to reduce unauthorized access, but no system is completely secure.

9. Your rights

Under Brazil's LGPD, you may request confirmation and access, correction, sharing information, portability where applicable, objection, anonymization, blocking or deletion in cases provided by law. We may request information to verify your identity. Requests are free and can be sent to contact@glossaryai.pro. You may also petition Brazil's National Data Protection Authority.

10. Changes

We may update this Policy to reflect changes to the service or the law. The date above identifies the current version, and we will communicate material changes when appropriate.