Privacy Policy | ClearTextAI

1. Information We Collect

When you use ClearTextAI, we collect: Account information (name and email via Clerk — we do not store passwords); Scan data (text submitted for analysis, detection results, word/sentence count, confidence level, content type); Usage data (scan count, subscription status, last sign-in); and Session data (a browser session identifier with no personally identifiable information).

2. How We Use Your Information

We use your information strictly to provide AI text detection analysis, maintain your account and subscription, enforce usage limits and prevent abuse, and respond to support requests. We do NOT use your submitted text to train or improve AI models, sell or share with third parties for advertising, build user profiles for targeted advertising, or for any purpose other than providing detection results.

3. Data Storage and Security

Your data is stored on secure, managed cloud infrastructure. We implement HTTPS encryption for all data in transit, session cookies set with httpOnly and secure flags, database access restricted to authenticated application servers only, and regular security audits and vulnerability assessments.

4. Data Retention and Auto-Purge Policy

Free users: Scan data is automatically and permanently purged after 90 days from submission. Pro users: Scan data is retained for up to 90 days unless a longer period is configured in account settings (maximum 365 days). Anonymous scans: Purged after 90 days. Account deletion: All associated data is permanently deleted within 48 hours. After the retention period expires, submitted text and detection results are permanently removed and cannot be recovered. You may request immediate deletion at any time through account settings or by contacting us.

5. Third-Party Services

Clerk: For user authentication — we do not store passwords; Clerk's privacy policy governs their handling of authentication data. Google Gemini API: To analyze submitted text for AI detection patterns. Text is sent to the model API for processing and is not retained by the model provider beyond the request lifecycle, per their data processing terms. We do not sell, rent, or share your personal information or submitted text with any third parties for advertising, marketing, or any unrelated purpose.

6. Your Rights

You have the right to: Access — view all data we hold about you through your scan history and account settings; Delete — request immediate deletion of your account and all associated data at any time; Portability — request a copy of your data in a standard, machine-readable format; Correction — update your account information through your profile settings; Opt-out — opt out of any non-essential data processing by contacting us. To exercise any of these rights, use the "Delete My Account" option in account settings, or contact us at support@cleartextai.org. We will respond within 30 days.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights: Right to Know (request disclosure of categories and specific pieces of personal information collected); Right to Delete (request deletion subject to certain exceptions); Right to Opt-Out of Sale (we do not sell your personal information or share it for cross-context behavioral advertising); Right to Non-Discrimination (we will not discriminate against you for exercising your privacy rights).

8. Children's Privacy (COPPA Compliance)

ClearTextAI is not directed at children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent or authorized consent from a school acting in loco parentis. For schools and educators using the service with students under 13: you represent that you have obtained all necessary parental consents or are providing consent on behalf of parents solely for educational purposes as permitted under COPPA, and that school consent is limited to educational purposes only. If you believe a child under 13 has provided personal information without appropriate consent, contact us immediately and we will delete it within 48 hours.

9. Educational Privacy (FERPA Compliance)

For educational institutions subject to FERPA: ClearTextAI acts as a "school official" with a legitimate educational interest only when a formal Data Processing Agreement (DPA) has been executed. Contact support@cleartextai.org to request a DPA. Without a DPA, educators must ensure submitted text is fully de-identified prior to submission. Under a DPA, we process student data solely for AI detection analysis — not for model training, advertising, or any secondary purpose. We do not re-disclose student education records to third parties except as required by law. Upon DPA termination, all student data is permanently deleted within 30 days with written certification provided. In the event of a data breach affecting student records, we will notify the institution within 48 hours.

10. Cookies and Tracking

We use essential cookies (session identifiers required for authentication and free trial tracking — these cannot be disabled) and preference cookies (theme preferences stored locally in your browser). We do not use advertising cookies, analytics trackers, or third-party tracking pixels. We do not engage in cross-site tracking or behavioral advertising.

11. International Data Transfers

Your data may be processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

12. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users via email within 72 hours of discovery. We will also notify relevant regulatory authorities as required by applicable law.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date and, for material changes, by sending an email notification at least 30 days before the changes take effect.

14. Contact

For privacy-related questions, data rights requests, or to request a Data Processing Agreement, contact us at support@cleartextai.org.