Privacy Policy

This Privacy Policy explains how Did AI Write It? (www.didaiwriteit.com) collects, uses, and shares information when you use our website and tools.

Questions or privacy requests: privacy@didaiwriteit.com. General support: support@didaiwriteit.com.

Depending on how you use the service, we may process:

• Account data. Email address and authentication credentials when you sign up. Passwords are handled by our auth provider and are not stored by us in plaintext.
• Content you submit. Text you paste or upload for AI detection, plagiarism checking, or fact-checking. If you are signed in and a check succeeds, we save that text and the result in your report history so you can reopen it later.
• Usage and billing. Plan tier, monthly credit usage, and Stripe customer or subscription identifiers when you subscribe.
• Technical data. For anonymous homepage scans, we store a hashed or raw IP address solely to enforce a daily rate limit. We also receive standard server logs (timestamps, routes, error codes) needed to run and secure the product.
• Device preferences. Theme choice (light, dark, or system) is stored in your browser via local storage. Text handed from the homepage into the signed-in app uses session storage on your device and is not sent to our servers until you run a check.

We use the information above to:

• Provide AI detection, plagiarism, and fact-checking results
• Create and manage accounts, quotas, and subscriptions
• Save and display your report history when you are signed in
• Prevent abuse (including rate-limiting anonymous scans)
• Respond to support requests and enforce our Terms
• Improve reliability and fix bugs

We do not sell your personal information. We do not use your submitted drafts to train our own AI models.

We rely on service providers to operate the product. Text you check is sent to the providers needed for that specific check:

• Supabase. Authentication, database, and related infrastructure for accounts, usage, and saved reports.
• Stripe. Payment processing when you subscribe or manage billing. Card details are handled by Stripe, not stored on our servers.
• Winston AI. Third-party AI detection, plagiarism, and fact-checking APIs. Submitted text is sent to Winston to produce the scores and reports we show you.
• OpenAI or Anthropic. Only if you use rewrite or humanize features when those are enabled. Submitted text is sent to the configured model provider for that request.
• Hosting and edge infrastructure. Our app is served through standard web hosting providers that may process IP addresses and request metadata to deliver pages securely.

These providers process data under their own terms and privacy policies, limited to what is needed to provide their services to us.

We use essential cookies to keep you signed in and to secure authenticated sessions (via our auth provider). These are required for the account features to work.

We also use local storage for your theme preference and session storage for a one-time handoff of text from the homepage into the app. Those are stored on your device, not as third-party tracking cookies.

We do not currently use advertising cookies, cross-site trackers, or third-party analytics pixels. If that changes, we will update this policy and, where required, ask for consent before setting non-essential cookies.

• Account and billing records are kept while your account is active and as needed for accounting, fraud prevention, and legal obligations after closure.
• Saved reports remain until you delete them or delete your account.
• Anonymous rate-limit records are kept only as long as needed to enforce the daily homepage scan limit.

You can:

• Access and update your account email through the signed-in app
• Delete individual reports from your report history
• Manage or cancel a paid subscription through the Stripe billing portal linked from Billing
• Request account deletion or a copy of your data by emailing privacy@didaiwriteit.com

Depending on where you live (for example under GDPR or CCPA/CPRA), you may have additional rights to access, correct, delete, or restrict processing of personal data, or to object to certain processing. We will respond to verified requests within the time required by applicable law.

We use industry-standard protections appropriate to a hosted web app: encrypted transport (HTTPS), access-controlled databases with row-level security for user-owned data, and service credentials kept on the server. No method of transmission or storage is perfectly secure. If you believe your account has been compromised, contact support@didaiwriteit.com right away.

The service is aimed at adults and professional users. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. The effective date at the top of the page will change when we do. Material changes will be highlighted on this page or, where appropriate, by email to your account address. Continued use after an update means you accept the revised policy.

Related documents: Terms of Use. Last updated July 30, 2026.