Privacy Policy

This Privacy Policy explains how Did AI Write It (www.didaiwriteit.com) collects, uses, and shares information when you use our website and tools.

Questions or privacy requests: privacy@didaiwriteit.com. General support: support@didaiwriteit.com.

Depending on how you use the service, we may process:

• Account data. Email address and authentication credentials when you sign up. Passwords are handled by our auth provider and are not stored by us in plaintext. We also store your optional preference for product-update emails.
• Content you submit. Text you paste or upload for AI detection, plagiarism checking, or fact-checking. If you are signed in and a check succeeds, we save that text and the result in your report history so you can reopen it later.
• Usage and billing. Plan tier, monthly credit usage, and Stripe customer or subscription identifiers when you subscribe.
• Technical data. For anonymous homepage scans, we store a hashed or raw IP address solely to enforce a daily rate limit. We also receive standard server logs (timestamps, routes, error codes) needed to run and secure the product.
• Device preferences. Theme choice (light, dark, or system) is stored in your browser via local storage. Text handed from the homepage into the signed-in app uses session storage on your device and is not sent to our servers until you run a check.

We use the information above to:

• Provide AI detection, plagiarism, and fact-checking results
• Create and manage accounts, quotas, and subscriptions
• Save and display your report history when you are signed in
• Prevent abuse (including rate-limiting anonymous scans)
• Respond to support requests and enforce our Terms
• Improve reliability and fix bugs
• Understand which features and pages people actually use, in aggregate, so we know what to build and fix next
• Send product updates, feature announcements, and tips only if you opt in during signup or later in Billing. You can turn this off anytime. Account, security, and billing emails are transactional and may still be sent when needed to operate your account.

We do not sell your personal information. We do not use your submitted drafts to train our own AI models.

We rely on service providers to operate the product. Text you check is sent to the providers needed for that specific check:

• Supabase. Authentication, database, and related infrastructure for accounts, usage, and saved reports.
• Stripe. Payment processing when you subscribe or manage billing. Card details are handled by Stripe, not stored on our servers.
• Email delivery. Transactional mail (for example signup confirmation) and, if you opt in, product-update emails are sent through our email provider.
• Detection infrastructure. AI detection, plagiarism, and fact-checking systems that process submitted text to produce the scores and reports we show you.
• OpenAI.Only if you use the rewrite (“Fix flagged lines”) feature. Submitted text is sent to OpenAI for that request.
• Hosting and edge infrastructure. Our app is served through standard web hosting providers that may process IP addresses and request metadata to deliver pages securely.
• Product analytics. PostHog receives page views, feature-usage events (for example running a check or starting a subscription), error reports, and technical context such as browser, device type, referring page, and approximate location derived from your IP address. Once you sign in, these events are associated with your account so we can see how real usage flows through the product. We do not send the text you submit for checking to PostHog.
• Aggregate traffic measurement. Vercel Analytics records page views and performance metrics in aggregate, without cookies and without identifying individual visitors.

These providers process data under their own terms and privacy policies, limited to what is needed to provide their services to us.

We use essential cookies to keep you signed in and to secure authenticated sessions (via our auth provider). These are required for the account features to work.

We also use local storage for your theme preference and session storage for a one-time handoff of text from the homepage into the app. Those are stored on your device, not as third-party tracking cookies.

We use product analytics (PostHog) to understand how the product is used and to catch errors. It stores a first-party identifier in your browser, in a cookie and in local storage, so repeat visits can be recognized as the same session and visitor. This is analytics, not advertising.

We do not use advertising cookies or cross-site tracking, and we do not sell or share this data with advertising networks. If that changes, we will update this policy and, where required, ask for consent before setting non-essential cookies.

• Account and billing records are kept while your account is active and as needed for accounting, fraud prevention, and legal obligations after closure.
• Saved reports remain until you delete them or delete your account.
• Anonymous rate-limit records are kept only as long as needed to enforce the daily homepage scan limit.

You can:

• Access and update your account email through the signed-in app
• Opt in or out of product-update emails on the Billing page (or by using the unsubscribe link in those emails once we send them)
• Delete individual reports from your report history
• Manage or cancel a paid subscription through the Stripe billing portal linked from Billing
• Request account deletion or a copy of your data by emailing privacy@didaiwriteit.com

Depending on where you live (for example under GDPR or CCPA/CPRA), you may have additional rights to access, correct, delete, or restrict processing of personal data, or to object to certain processing. We will respond to verified requests within the time required by applicable law.

We use industry-standard protections appropriate to a hosted web app: encrypted transport (HTTPS), access-controlled databases with row-level security for user-owned data, and service credentials kept on the server. No method of transmission or storage is perfectly secure. If you believe your account has been compromised, contact support@didaiwriteit.com right away.

The service is aimed at adults and professional users. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. The effective date at the top of the page will change when we do. Material changes will be highlighted on this page or, where appropriate, by email to your account address. Continued use after an update means you accept the revised policy.

Related documents: Terms of Use. Last updated August 5, 2026.