Privacy policy

What we store

We store the following while your account is active:

• Account details: your email address, sign-in method (password or email link), plan and billing status, and the date and version of the terms you accepted.
• Job text: the text you submit, the intermediate drafts, the output and the detector results, kept for the retention period below.
• Job history: titles, short previews, scores, word counts, settings and version numbers, kept for the history period below.
• Writing samples you save as style profiles, until you delete the profile or your account.
• Usage and billing records: the word ledger, invoices and payment events.
• Security records: session metadata and an audit log of sensitive actions. IP addresses in these records are stored as keyed hashes.

Who we share data with

We share data only with the providers below. The first three process your text to perform the Service, and none of them may use the text you submit to the Service to train models on our behalf. The free AI content detector is described separately below. The last one measures our advertising and never receives your text. We do not sell your text or your account data for money. The advertising measurement described in the last item is the only sharing for advertising.

• Cloudflare: hosting, storage, databases, bot protection (Turnstile), logs, email delivery and the text embeddings used for the meaning check.
• undetectable.ai: the humanizer pass, the detector estimate (including the free AI content detector, where it handles the text you paste under its own policy, for a period we do not control), and style replication for writing samples you register.
• Stripe: payments and invoices. We never see or store your full card number.
• Meta Platforms (Meta Pixel and Conversions API): advertising measurement only, not part of the Service. We send page views of our marketing pages and a few app pages (login, sign up, forgot password, plans and the editor), and these actions: signing up, starting the free trial, starting checkout, paying, subscribing and sending the contact form. Everything we send comes with your IP address, browser details and Meta's cookie ids. The actions also carry a hashed email address, and a hashed account id when they belong to your account. Checkout, paying and subscribing also carry the plan and the amount. We never send your text or job content. This happens only where you allow it or the law does not require us to ask, and never when Global Privacy Control is on.

The free AI content detector

The free AI content detector on our marketing site needs no account. This is what happens to what you paste into it:

• Your text is sent to our detection provider, undetectable.ai, to produce a score. We do not store it. The provider handles submitted text under its own policy, so do not paste anything confidential.
• The score is shown to you and is not saved. Nothing we keep links a network address to what you pasted, because we keep neither the text nor the score.
• To enforce the daily word limit we keep a keyed hash of your network address (the IPv4 address, or for IPv6 the first 64 bits and the first 48 bits) with the date and the number of words checked, for up to 3 days. The hash cannot be turned back into the address. We also keep a record of each check with its word count and whether it finished, with no address, text or score.
• Cloudflare Turnstile receives the check token and your address to confirm you are a person before each check.
• Your browser keeps a count of the free words it has used today (the date and a number, never text) in its own storage, so the page can explain the limit. It is not sent to us.
• Meta receives page views of the page like any other marketing page, where you allow it (see Cookies). It never receives what you paste or the result.

How long we keep it

Job text is deleted when its retention period ends. History rows are deleted when their history period ends. Both depend on your plan:

• Free: job text for 7 days. You can shorten it to 0 days. History rows (scores, word counts, versions) for 7 days.
• Basic: job text for 30 days. You can shorten it to 7 or 0 days. History rows (scores, word counts, versions) for 90 days.
• Standard: job text for 30 days. You can shorten it to 7 or 0 days. History rows (scores, word counts, versions) for 365 days.
• Premium: job text for 30 days. You can shorten it to 7 or 0 days. History rows (scores, word counts, versions) for 365 days.
• Free AI content detector (no account): the text is not stored and the score is not kept. We keep a keyed hash of your network address with a word count, and a record of each check with no address, text or score, for up to 3 days.

Deleting your data

You can delete a finished job at any time, and you can delete your account from Settings. Account deletion completes after a 7-day grace period during which you can restore the account. After that, your text, samples and history are deleted. Full database backups keep deleted rows for up to 90 days before they expire. Billing records that tax and accounting law requires us to keep are retained under a pseudonymous account id.

Getting a copy of your data

Email [email protected] from your account address to ask for a copy of your data. We confirm it is you with a sign-in link to that address and send the export within one month.

Age

TurnItHuman is for people aged 13 and over, or the age of digital consent in your country if that is higher. We do not knowingly collect data from anyone younger; if you believe we have, email us and we will delete it.

Cookies

We use three kinds of cookies. The sign-in cookie keeps you logged in. The ad choice cookie remembers whether you allowed ad measurement. Meta's two cookies exist only when ad measurement is on.

In the EU, the EEA, the United Kingdom, Gibraltar and Switzerland we ask first, and nothing from Meta loads until you press Allow. Elsewhere ad measurement is on until you turn it off. If your browser sends Global Privacy Control, ad measurement is off everywhere and we do not show a banner.

To change your choice at any time, use the Ad preferences link in the footer of any page, or the ad preferences row in Settings when you are signed in. Declining removes Meta's cookies from your browser. You can also manage the ads you see in your own Meta ad settings.

• Sign-in cookie: keeps you logged in. It is needed for the Service and is not used for advertising.
• th_ads: stores your ad measurement choice (allowed or declined) for 180 days, so we respect it on your next visit.
• _fbp and _fbc: set by the Meta Pixel only when ad measurement is allowed. They link a visit to an ad click so Meta can count it.

Contact

Privacy questions and requests: [email protected].