Privacy Policy

Last updated: July 2026

What we collect

For anonymous users (Free tier): We process your text on the server to generate the rewrite and AI score. We do not log the text content. We use Cloudflare's edge network, which records IP addresses and request metadata for abuse prevention and rate limiting, but we do not associate these with the text content you submitted.

For signed-in users (Google OAuth): We store your Google profile (name, email, profile picture) so we can display your account state across visits. If you subscribe, we store your subscription status and payment provider's subscription ID (Creem or PayPal) so the app knows you're a Pro/Academic user.

What we don't do

Cookies and session

Signed-in users receive an HTTP-only session cookie that expires after 30 days. We also use Cloudflare Web Analytics to collect anonymous usage data (page views, referrer, device type, geographic region) at the edge — no client-side cookies are set by this analytics tool. We do not use third-party tracking cookies or analytics that follow you across sites. See our Cookie Policy for full details.

Payment data

We use Creem and PayPal to process payments. We never see or store your credit card number, CVV, or bank account. We only receive a subscription ID from the payment processor to track whether your account is active.

Data deletion

You can request deletion of your account at any time by emailing privacy@bypassai.online. We'll delete your profile and subscription records within 7 days.

Analytics

We use Cloudflare Web Analytics, a privacy-first analytics service that collects anonymized page view counts and session duration data via a lightweight JavaScript beacon (beacon.min.js). No cookies are set by Cloudflare Web Analytics and no personal data is collected. The data is processed on Cloudflare's edge network and is governed by Cloudflare's Privacy Policy. You can opt out by blocking https://static.cloudflareinsights.com/beacon.min.jsin your browser or ad blocker.

AI Detector

The free AI score check uses a public RoBERTa-based AI text detector model hosted on Hugging Face (Hello-SimpleAI/chatgpt-detector-roberta). When you run an AI score check, the input text is sent to Hugging Face's inference API for processing. We do not send your text to GPTZero, Originality.ai, or any proprietary detector. The model's use is governed by Hugging Face's Terms.

Third-party services

Your California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights regarding your personal information:

To exercise your CCPA rights, email privacy@bypassai.online with "CCPA Request" in the subject line. We will verify your identity and respond within 45 days.

Contact

Questions? Email privacy@bypassai.online.