Privacy Policy

Last updated 2 August 2026

ScanForAI is built privacy-first. The short version: anonymous scans are never stored, and if you have an account you stay in control of everything we keep.

ScanForAI is operated by Zoniax OÜ, a private limited company registered in Estonia (registry code 16853667), which is the data controller for the information described here.

What we collect

  • Text you scan. For an anonymous scan, your text is processed only to produce the score and is never stored or logged — with one explicit exception: if you use the “Was this result right?” feedback and tick “share this text”, that text is kept to improve detection. Untick it (the default) and only the score metadata is recorded. If you are signed in, we store the text and result so you can see your history — unless you turn that off for a scan. Saved history entries also record light request context — your country (from the network, no IP is stored) and browser type — shown alongside each scan in your history.
  • Account details. If you create an account, we store your email address and a securely hashed password (or, for Google sign-in, a Google account identifier — never your Google password).
  • Affiliate applications. If you put your name forward for the affiliate programme, we store the name and email address you submit, and nothing else — no payment details are collected at that stage. It is used only to contact you about the programme, is never used for marketing anything else, and is deleted on request or when the programme closes to you. The form is handled by FormBlade (see Service providers).
  • Technical data. We briefly process your IP address to enforce rate limits and block automated abuse. It is used transiently and not built into a profile of you.

How we use it

  • To run the scan and return your result.
  • To keep your scan history and account settings (signed-in users only).
  • To send account emails — verifying your address and resetting your password.
  • To protect the service from abuse and to keep it running reliably.

We do not sell your data, and we do not use your scanned text to train models.

Service providers

We share the minimum necessary with a few trusted providers:

  • Cloudflare — hosting, content delivery, and bot protection (the Turnstile check on the scanner).
  • Brevo — sending account emails (verification, password reset). Your email address is shared only to deliver those messages.
  • Google — only if you choose "Continue with Google", to verify your identity.
  • FormBlade — form handling for the contact form and the affiliate application. It receives what you type into those forms and nothing else.
  • Payment partner — payment processing for paid plans. The partner named at checkout receives your email address, country and payment details, and, where it acts as merchant of record, issues your receipt and holds the purchase record; we receive confirmation of the purchase and the email address on the account, never your card number. The partners we use are Paddle, Stripe and PayPal; the checkout page names the one handling your purchase.

Cookies & local storage

We keep this light: your light/dark theme choice is stored in your browser, and a short-lived cookie is used during Google sign-in for security. We use Google Analytics to count page views and feature usage (scans run, cleanups run — never the text you scan, which is not sent to any analytics service); it sets its own cookies. We do not use advertising cookies, and we never sell or share usage data.

Retention & your control

  • Anonymous scan text is discarded immediately after scoring.
  • Signed-in scans stay until you delete them. You can delete any individual scan at any time.
  • Deleting your account erases everything associated with it — history, keys, and profile.

Security

Traffic is encrypted in transit (HTTPS), passwords are hashed, and access to stored data is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

Your rights

You can access, correct, export, or delete your data. Most of it is self-service in your account; for anything else, contact us.

Changes

We may update this policy; we'll revise the date above and, for material changes, notify account holders.

Contact

Questions about privacy? Contact us.

AI detection is not 100% accurate. Every result is an estimate from writing patterns and can be wrong both ways. Never use it as the sole basis for a decision about a person, and never to accuse.