1. Introduction
Proofly ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI toolkit platform at prooflyai.app. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
2. Information We Collect
Account Information
When you register for an account, we collect your email address and a hashed password. If you sign in through Google or GitHub OAuth, we receive your name, email address, and profile image from those providers. We do not store your third-party passwords.
Content You Submit
When you use our tools (AI detection, plagiarism checking, grammar checking, humanizing, paraphrasing, summarizing, file conversion, file extraction, or chatbot), we process the text or files you upload. Uploaded content is processed in real time and is not permanently stored unless you are a registered user with detection or chat history enabled.
Usage Data
We automatically collect information about your use of the service, including IP address, word counts processed, tool actions performed, browser type, and timestamps. This data is used for rate limiting, usage tracking, and service improvement.
Contact Information
If you contact us through our contact form, we collect your name, email address, phone number (optional), and message content, including any file attachments you provide.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our services
- Process your requests and deliver AI-powered results
- Manage your account and enforce usage limits
- Send transactional emails (account verification, password resets)
- Respond to your inquiries and support requests
- Monitor and prevent abuse, fraud, and unauthorized access
- Improve and optimize our service and user experience
- Comply with legal obligations
4. Data We Do NOT Use
We do not use your uploaded documents, text submissions, or chat conversations to train our AI models. Your content is processed solely to deliver the requested service and is not shared with third parties for their own purposes.
5. Data Retention
We retain different types of data for different periods:
- Detection and plagiarism history: Retained for up to 180 days, then automatically deleted. Only a short preview (up to 300 characters) is stored, not the full document.
- Chat conversations and messages: Retained for up to 90 days, then automatically deleted.
- Contact form attachments: Retained for up to 30 days, then automatically deleted.
- Usage logs: Retained for service operation and automatically cleaned up periodically.
- Account data: Retained as long as your account is active. You may request account deletion at any time.
6. Data Sharing and Third Parties
We share your data only in the following circumstances:
- AI model providers: Text you submit is sent to third-party AI services (such as Google Gemini and OpenRouter) for processing. These providers process data according to their own privacy policies and do not retain your submissions beyond the processing session.
- Infrastructure providers: We use cloud hosting and database services (such as Vercel and Supabase) to operate the platform. These providers act as data processors under our instructions.
- Legal requirements: We may disclose your information if required by law, court order, or governmental request.
We do not sell your personal information to third parties.
7. Data Security
We implement appropriate technical and organizational security measures to protect your data, including:
- HTTPS encryption for all data in transit
- Bcrypt hashing for passwords and verification codes
- Content Security Policy (CSP) and security headers
- Rate limiting to prevent abuse
- SSRF protection on server-side requests
- File validation with magic-byte verification
- Secure session management with JWT tokens
While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Guest Users
You can use certain Proofly tools without creating an account. Guest usage is tracked by IP address for rate limiting and usage enforcement purposes. Guest data is not linked to any personal identity and is subject to the same security measures as registered user data.
9. Cookies and Local Storage
We use essential cookies and browser local storage for session management, authentication state, and user preferences (such as theme settings and report download counts). We do not use tracking cookies or third-party advertising cookies.
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate personal data
- Deletion: Request deletion of your personal data and account
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing of your personal data
- Restriction: Request restriction of processing of your personal data
To exercise any of these rights, please contact us through our contact page.
11. Children's Privacy
Proofly is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete such information promptly.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction. By using the service, you consent to such transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
14. Contact Us
If you have any questions about this Privacy Policy, please contact us at our contact page or email us at proofly@prooflyai.app.