Privacy Policy
Last Updated: April 27, 2026
This Privacy Policy describes how MDL Network LLC ("we", "us", or "our") collects, uses, and shares information when you use Warmpen (warmpen.com) and related services (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this Policy.
1. Information We Collect
1.1 Information You Provide
When you create an account, subscribe, or use the Service, we collect:
- Account information: Email address, password (stored as a hashed value), display name
- Payment information: Processed by Stripe; we do not store credit card details on our servers
- Content you submit: Text you paste into the humanizer tool for processing
- Communications: Support requests, feedback, and other communications you send us
1.2 Information Collected Automatically
When you use the Service, we automatically collect:
- Usage data: Number of humanization requests, word counts, features used, dates and times
- Device and connection data: IP address, browser type, operating system, device identifiers
- Cookies and similar technologies: Authentication cookies, anonymous session tracking, preference settings (see Section 8)
1.3 Information from Third Parties
If you sign in with Google OAuth, we receive your name and email address from Google as authorized by you.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process subscriptions and payments
- Communicate with you about your account and the Service
- Enforce usage limits and prevent abuse
- Detect, investigate, and prevent fraudulent or illegal activity
- Comply with legal obligations
- Aggregate or anonymize data for analytics and product improvement
We do not use your submitted text content to train AI models. Text submitted to the humanizer is processed by third-party AI providers and is not retained on our servers beyond what is necessary to deliver the result to you.
3. Legal Basis for Processing (EU/UK Users)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under the following legal bases:
- Performance of a contract: To provide the Service you have signed up for
- Legitimate interests: To improve the Service, prevent abuse, and operate our business
- Consent: Where required by law (such as for marketing communications)
- Legal obligation: Where required by applicable law
4. How We Share Your Information
We share information with the following categories of third parties to operate the Service:
| Provider | Purpose | Country |
|---|---|---|
| Supabase | Database and authentication | United States |
| Stripe | Payment processing and subscription management | United States |
| Vercel | Web hosting and content delivery | United States |
| Google (Gemini) | AI text processing (transient — not retained) | United States |
| Google (OAuth) | Sign-in (if you choose Google sign-in) | United States |
| Upstash | Rate limiting infrastructure | United States |
These providers process your information on our behalf and are bound by data processing agreements requiring appropriate safeguards.
We do not sell your personal information to third parties.
We may disclose your information if required by law, in response to valid legal processes, or to protect the rights, property, or safety of MDL Network LLC, our users, or others.
5. International Data Transfers
We are based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.
For users in the European Economic Area or the United Kingdom, transfers are made under appropriate safeguards (such as Standard Contractual Clauses) where required.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.
Submitted text content is processed transiently and is not retained on our servers after the humanization request completes.
You may request deletion of your account and associated data at any time by contacting us at the email below.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal information we hold about you
- Correct: Request correction of inaccurate or incomplete information
- Delete: Request deletion of your personal information
- Restrict: Request that we limit how we process your information
- Object: Object to certain processing activities
- Portability: Request a copy of your information in a structured, machine-readable format
- Withdraw consent: Where processing is based on consent
To exercise these rights, contact us at the email below. We will respond within the timeframe required by applicable law.
California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act, including:
- The right to know what personal information we collect, use, and share
- The right to delete personal information
- The right to opt out of the sale or sharing of personal information (we do not sell personal information)
- The right to non-discrimination for exercising your rights
8. Cookies and Tracking
We use cookies and similar technologies to operate the Service.
8.1 What Are Cookies?
Cookies are small text files that websites store on your device. They help us remember information about your visit, such as your login state and preferences. We also use related technologies including local storage and session storage; we refer to all of these as "cookies" in this Policy.
8.2 Strictly Necessary Cookies
These cookies are required for the Service to function. You cannot opt out of these without breaking the site.
| Cookie | Purpose | Duration |
|---|---|---|
| Authentication tokens | Keeps you signed in | Session / 7 days |
| CSRF tokens | Protects against cross-site request forgery | Session |
| warmpen_anon_used | Tracks anonymous demo usage to enforce 1-time gate | 10 days |
8.3 Functional Cookies
These remember your preferences:
- Pricing toggle preference (monthly/yearly)
- UI preferences (reading level, purpose, mode)
8.4 Third-Party Cookies
Some cookies are set by third-party services we use:
- Stripe: Sets cookies on checkout pages for payment processing and fraud prevention
- Google (OAuth): May set cookies if you sign in with Google
- Vercel: Our hosting provider may set cookies for performance and security
- Supabase: Sets cookies for authentication state
We do not allow advertising networks to track you across sites for marketing purposes.
8.5 Managing Cookies
Most browsers let you control cookies through settings. You can block all cookies (the site will not work), block third-party cookies only, delete existing cookies, or set them to expire when you close the browser.
Disabling strictly necessary cookies will prevent the Service from functioning.
9. Security
We implement reasonable technical and organizational measures to protect your information, including:
- Encryption in transit (HTTPS/TLS)
- Password hashing
- Access controls and authentication
- Row-level security on database access
- Regular security reviews
No system is 100% secure. We cannot guarantee absolute security but commit to notifying affected users of any data breach as required by applicable law.
10. Children's Privacy
The Service is not intended for users under 13 years of age (or 16 in the EU/UK). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the revised Policy.
12. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us at:
MDL Network LLC Email: support@warmpen.com Website: https://warmpen.com