Privacy Policy

This page explains how DetectorProof handles your data. We use “we” to refer to DetectorProof throughout. Questions? Email [email protected].

What data do you collect?

• Your account: your email and a scrambled (“hashed”) version of your password, so we never see it. If you sign in with Google or Apple, your name, email and picture instead.
• Your texts: what you humanize and the result, processed by our own model on our own hardware and never used for training. If you have an account, they're kept in your History until you remove them. Without an account, we don't store them.
• Apps you connect: say you link Claude or Cursor. We keep which app it is, when you allowed it and its sign-in tokens, until you disconnect it in Settings. Texts it sends end up in your History like any other, and the app gets the result under its own privacy policy.
• Our browser extension only sends us text you choose to humanize or check, and a random number for your browser so we can count a Free plan's words. Its typer sends nothing, and its sign-in and your settings stay on your computer.
• API keys. For each one we keep the name, the last four characters, and the dates it was made and last used, but not the key. We also keep your API credit: what you buy and what's left, and the word count of each request. The texts you send through the API are never stored.
• If you're an affiliate: where and how you told us you'd share your link (and how many visitors and customers it brought, as well as how much you made and were paid). If you arrived via another person's link, we track that so they can get their cut. They don't see your email.
• Two answers: what you do and where you heard about us.
• Your review, if you post one, with the name you pick.
• Your Support messages, images and our replies. Messages sent without an account come with your IP address and browser, plus your email if you choose to leave one. They're deleted a year after the last message.
• Sign-ins: the time, IP address and browser each time you sign in, kept for 90 days to protect your account. We also keep the time of your last visit.
• Your AI detector checks: the text, its score and its word count.
• To keep the free limits fair, we count words humanized and review votes using a scrambled (“hashed”) version of your IP address, plus a random number stored in your browser. We don't store the IP address itself. This data is only kept while the limit lasts.
• We count visits by where they came from. We don't store IP addresses or use cookies for this.

Why do you collect it?

So we can provide the service you signed up for. We need to be able to send emails like sign-in codes and password resets. It helps keep everything safe and stops abuse. And seeing where people come across our site is useful too. Providing the service you asked for is our main basis here, and our interest in keeping the service safe is a legitimate reason to process your data.

What do you store in my browser?

We use some data stored in your browser (cookies and local storage) for DetectorProof to work:

• A cookie that keeps you signed in
• Whether you have folded the dashboard sidebar
• The currency to show prices in
• Your Support chat, if you message us without an account
• Whose affiliate link you used, if you did, for 60 days
• Cloudflare's bot check, to keep malicious bots out of DetectorProof

And this information in local storage:

• Texts you've written that haven't been sent to DetectorProof
• Whether you've used your free humanize
• Your theme and accent colour
• Your editor settings, like text size and font
• When you can ask for another sign-in code
• A random number used to keep track of free usage and review votes (see above)

Our cookies don't follow you as you browse the web, and we don't serve you targeted ads.

Who can see my data?

A few other companies help run DetectorProof, and they only see your data where they need it to do that:

• Our hosting provider
• Stripe, our payments processor. We do not store card details ourselves. We store your DetectorProof plan, whether it's active, and an ID used to refer to your account at Stripe.
• Cloudflare, who provide our network, bot protection and storage
• Resend, who send DetectorProof emails
• Pangram and ZeroGPT, who check the texts you send to our AI detector
• ip-api.com, who let us look up an IP address when we check an account's sign-ins or a Support chat
• Google or Apple, if you sign in with them
• Tremendous, who pay our affiliates

Some are based outside the UK. All provide the safeguards UK data protection law requires. We will never sell your personal data. We also share your data if we are required to by law.

How long do you keep it?

While your account is open. You can delete your account from Settings, and we will then delete the data we store about you, your History, review, support messages and sign-in records, and end any active paid plan. Stripe keeps payment data for as long as tax law requires.

What are my rights?

You can access the data we hold about you, correct it, ask for it to be deleted, place restrictions on how we use it, object to us using it, or take a copy elsewhere. You can request this by emailing [email protected]. If you'd like to make a complaint about how we've used your personal data, you can complain to the Information Commissioner's Office (ico.org.uk).

This policy may change. We'll change the date at the top when it does, and let you know about big changes.