Privacy Policy
Last updated: July 2026
What we collect
For anonymous users (Free tier): We process your text on the server to generate the rewrite and AI score. We do not log the text content. We use Cloudflare's edge network, which records IP addresses and request metadata for abuse prevention and rate limiting, but we do not associate these with the text content you submitted.
For signed-in users (Google OAuth): We store your Google profile (name, email, profile picture) so we can display your account state across visits. If you subscribe, we store your subscription status and payment provider's subscription ID (Creem or PayPal) so the app knows you're a Pro/Academic user.
What we don't do
- We don't train any AI model on your text.
- We don't sell or share your text or profile data with third parties.
- We don't read your text after the rewrite request completes.
Cookies and session
Signed-in users receive an HTTP-only session cookie that expires after 30 days. We also use Cloudflare Web Analytics to collect anonymous usage data (page views, referrer, device type, geographic region) at the edge — no client-side cookies are set by this analytics tool. We do not use third-party tracking cookies or analytics that follow you across sites. See our Cookie Policy for full details.
Payment data
We use Creem and PayPal to process payments. We never see or store your credit card number, CVV, or bank account. We only receive a subscription ID from the payment processor to track whether your account is active.
Data deletion
You can request deletion of your account at any time by emailing privacy@bypassai.online. We'll delete your profile and subscription records within 7 days.
Analytics
We use Cloudflare Web Analytics, a privacy-first analytics service that collects anonymized page view counts and session duration data via a lightweight JavaScript beacon (beacon.min.js). No cookies are set by Cloudflare Web Analytics and no personal data is collected. The data is processed on Cloudflare's edge network and is governed by Cloudflare's Privacy Policy. You can opt out by blocking https://static.cloudflareinsights.com/beacon.min.jsin your browser or ad blocker.
AI Detector
The free AI score check uses a public RoBERTa-based AI text detector model hosted on Hugging Face (Hello-SimpleAI/chatgpt-detector-roberta). When you run an AI score check, the input text is sent to Hugging Face's inference API for processing. We do not send your text to GPTZero, Originality.ai, or any proprietary detector. The model's use is governed by Hugging Face's Terms.
Third-party services
- Google OAuth — for sign-in. Governed by Google's Privacy Policy.
- Creem — for payment processing. Governed by Creem's Privacy Policy.
- PayPal — for payment processing. Governed by PayPal's Privacy Policy.
- Cloudflare — for hosting, edge networking, and Cloudflare Web Analytics (anonymous usage data). Governed by Cloudflare's Privacy Policy.
- Hugging Face — for AI text detection model inference (RoBERTa). Governed by Hugging Face's Terms.
Your California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights regarding your personal information:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions.
- Right to Opt Out: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information. If this policy changes, you will be notified and given the opportunity to opt out.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your CCPA rights, email privacy@bypassai.online with "CCPA Request" in the subject line. We will verify your identity and respond within 45 days.
Contact
Questions? Email privacy@bypassai.online.