Privacy Policy

What we collect

• Text you scan. For an anonymous scan, your text is processed only to produce the score and is never stored or logged — with one explicit exception: if you use the “Was this result right?” feedback and tick “share this text”, that text is kept to improve detection. Untick it (the default) and only the score metadata is recorded. If you are signed in, we store the text and result so you can see your history — unless you turn that off for a scan. Saved history entries also record light request context — your country (from the network, no IP is stored) and browser type — shown alongside each scan in your history.
• Account details. If you create an account, we store your email address and a securely hashed password (or, if you sign in with Google, Microsoft, LinkedIn or Discord, your email address and an account identifier from that service — never your password for it).
• Partner programme. If you join the partner programme, we keep the record needed to run it: the links you create, how many clicks and sign-ups they brought, the payments made by subscriptions that started through them, and what you have earned and been paid. To pay you we store the payout details you give us: a PayPal or Wise email, or a bank account name and IBAN. You can remove them in your account.
• Arriving through a partner’s link. If you come to ScanForAI through a partner’s link, we count the click and keep that link’s name in a cookie for 60 days, and on your account and subscription if you create them, so the partner can be credited. The partner sees counts and amounts, never your name, your email or what you scan.
• Using it from an AI assistant. If you connect ScanForAI to an AI assistant (MCP), we note the assistant’s name with each call, next to your API key and with the scan in your history, so you can see which tool made it.

How we use it

• To run the scan and return your result.
• To keep your scan history and account settings (signed-in users only).
• To send account emails — verifying your address and resetting your password.
• To run the partner programme: count referrals, work out commission and pay partners.
• To protect the service from abuse and to keep it running reliably.

We do not sell your data, and we do not use your scanned text to train models.

Service providers

We share the minimum necessary with a few trusted providers:

• Cloudflare — hosting, content delivery, and bot protection (the Turnstile check on the scanner).
• Brevo — sending account emails (verification, password reset). Your email address is shared only to deliver those messages.
• Google, Microsoft, LinkedIn and Discord — only if you choose to sign in with that service, to verify your identity. We send it nothing about you; it returns your name, your email address and an account identifier, never your password. Only the service you pick is involved.
• FormBlade — form handling for the contact form. It receives what you type into that form and nothing else.
• Payment partner — payment processing for paid plans. The partner named at checkout receives your email address, country and payment details, and, as the seller of record, issues your receipt and holds the purchase record; we receive confirmation of the purchase and the email address on the account, never your card number. The partner we use is Paddle; the checkout page names it. If you are in the partner programme, PayPal also receives your payout email and the amount, to send your payout.

Cookies & local storage

We keep this light: your light/dark theme choice is stored in your browser, and a short-lived cookie is used while you sign in with Google, Microsoft, LinkedIn or Discord, for security. If you arrive through a partner’s link, a cookie keeps that link’s name for 60 days (see What we collect). We use Google Analytics to count page views and feature usage (scans run, cleanups run — never the text you scan, which is not sent to any analytics service); it sets its own cookies. We do not use advertising cookies, and we never sell or share usage data.

Retention & your control

• Anonymous scan text is discarded immediately after scoring.
• Signed-in scans stay until you delete them. You can delete any individual scan at any time.
• Deleting your account erases everything associated with it — history, keys, and profile. The one exception is payment and payout records, which accounting law requires us to keep for seven years.

Security

Traffic is encrypted in transit (HTTPS), passwords are hashed, and access to stored data is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

Delete your account and data

To delete your account, sign in, open Settings and choose Danger zone. Deleting your account erases your history, keys and profile, including the sign-in details from Google, Microsoft, LinkedIn or Discord. If you cannot sign in, write to us through the contact page from the email address on the account and we will delete it for you.

Your rights

You can access, correct, export, or delete your data. Most of it is self-service in your account; for anything else, contact us.

Changes

We may update this policy; we’ll revise the date above and, for material changes, notify account holders.

Contact

Questions about privacy? Contact us.