Privacy Policy

• Account data. Your email address, the timestamps of your sign ins, and your plan status. We use magic links, so we never ask for or store a password.
• Text you submit. The content you paste or upload for detection, rewriting, or grammar checking, plus the resulting scores, highlights, and rewritten versions.
• Usage data. Word counts, number of checks, feature usage, and quota consumption, which we need to enforce plan limits.
• Billing data. Subscription status, plan, renewal dates, invoices, and the last four digits and brand of your card. Full card details go straight to Stripe and never reach our servers.
• Technical data. IP address, browser and device type, referring page, and server logs. For anonymous checks we use a short lived identifier derived from your IP address and browser to apply the daily free limit.
• Analytics data. Page views, events, and campaign attribution collected through cookies as described in section 7.

Please do not submit special category data, such as health or biometric information, or anyone else's confidential material that you are not permitted to share.

• To deliver the Service (running detections, rewrites, grammar checks, showing your history). Legal basis: performance of a contract.
• To authenticate you and secure your account. Legal basis: performance of a contract and our legitimate interest in keeping accounts safe.
• To take payment and manage subscriptions. Legal basis: performance of a contract, and legal obligation for invoices and tax records.
• To prevent abuse and enforce fair usage limits. Legal basis: legitimate interest in protecting the Service and other users.
• To send service emails such as sign in links, receipts, renewal reminders, and material changes to our terms. Legal basis: performance of a contract.
• To measure traffic and advertising. Legal basis: your consent, given through the cookie banner and withdrawable at any time.
• To send marketing emails. Legal basis: your consent, with an unsubscribe link in every message.

We do not use the text you submit to train or fine tune AI models, ours or anyone else's. We do not sell it, rent it, publish it, or share it with other users. We do not read it except where we have to investigate a specific technical fault or a credible abuse report, and only to the extent needed. Our AI providers process your text under contracts that prohibit training on it.

We rely on the providers below to run the Service. Each processes data only on our instructions, under a data processing agreement.

Where a provider processes data outside the UK or the European Economic Area, the transfer is covered by the UK International Data Transfer Addendum or the European Commission Standard Contractual Clauses, together with the technical safeguards those instruments require. We will update this list before adding a new subprocessor that handles your text.

• Text submitted by an anonymous visitor is processed in memory and not stored in your history. Rate limit identifiers are kept for 24 hours.
• Text and reports saved to a registered account are kept until you delete them, or until 12 months after your account becomes inactive.
• Account data is kept while your account exists, then deleted within 30 days of closure.
• Billing and invoice records are kept for 6 years, because tax law requires it.
• Server and security logs are kept for up to 90 days.

If the UK GDPR or the EU GDPR applies to you, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, including your account and stored texts;
• restrict or object to processing based on legitimate interest;
• receive your data in a portable, machine readable format;
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• complain to a supervisory authority, such as the UK Information Commissioner's Office or your local EU authority.

You can delete your account and its stored text yourself from account settings. For anything else, email support@proofmytext.com. We respond within 30 days and we never charge for a first request.

Strictly necessary cookies keep you signed in, remember your consent choice, and protect against abuse. They cannot be switched off because the Service will not work without them.

Analytics and advertising cookies, set by Google Analytics 4 and the Meta Pixel, help us understand which pages and campaigns work. They load only after you accept them in the consent banner. Your choice is stored locally in your browser. You can withdraw it at any time by clearing this site's data in your browser, which brings the banner back, or by writing to us.

Traffic is encrypted in transit with TLS, and data at rest is encrypted by our hosting providers. Access to production systems is limited to the people who need it, protected by multi factor authentication, and logged. Passwordless sign in removes the risk of reused or leaked passwords. No system is perfectly secure, so if a breach affects your rights we will notify you and the relevant authority within the deadlines the law sets.

The Service is not intended for children under 16. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Detection scores are produced by statistical models. They are an estimate about a text, not a profile of you, they produce false positives, and they are not used by us to make any decision with a legal or similarly significant effect on you. What third parties do with a report you show them is outside our control, and our Terms of Use explain why a score should never be the only basis for a decision about a person.

We will post any update here and change the date at the top. If a change materially affects how we handle your data, we will notify registered users by email at least 14 days before it takes effect.

Unicore Digital Ltd, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom, company number [COMPANY NUMBER]. Privacy and data protection enquiries: support@proofmytext.com.