Legal
Privacy Policy
What personal data IsThisAI collects, why, who processes it and the rights you have.
Last updated Oct 27, 2026
1. Who we are
IsThisAI ("we", "us") runs the AI content detection service at isthisai.pro. The service is operated by Wang Xiaochun, an individual trader, High House, High Street, Sai Ying Pun, Hong Kong. For any privacy question or request, email support@isthisai.pro.
We are the controller of the personal data described here.
2. What we collect
- Account data: your email address and, if you sign in with Google, your name and profile picture from Google.
- Content you check: the text you paste or the image you upload, and the report we produce from it. Text sent to the free quick check is analysed on our own server and not stored.
- Credits and payments: your credit balance and history, plans and purchases. Card and PayPal details are handled by Stripe and PayPal; we never see your full card number.
- Security data: IP address, browser and device information, and the result of the Cloudflare Turnstile human check, used to keep sign-in and checks safe from abuse. For the free quick check we store a one-way hash of your IP address that changes every day, never the address itself, to apply the daily limit.
- Usage data, only with your consent: page views and interactions measured by Google Analytics 4, Microsoft Clarity and PVUV. Clarity masks text inputs and report content; PVUV receives page addresses on public pages only, without query strings.
We do not ask for and do not want sensitive personal data in the content you check. Please do not upload images or text containing other people's personal data unless you are allowed to.
3. Why we use it and our legal bases
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Create and run your account, run the checks you request, show your reports | Performance of a contract |
| Charge for plans and credit packs, keep tax and accounting records | Contract; legal obligation |
| Prevent fraud, abuse and duplicate free-credit claims | Legitimate interests |
| Run the free quick check and apply its daily limits | Legitimate interests |
| Send sign-in codes and service messages | Contract |
| Measure and improve the site | Consent (you can withdraw it at any time) |
We do not sell your personal data and do not use your content to train AI models.
4. Who processes your data
We share only what each provider needs:
- Winston AI — receives the text or image you submit, only to analyse it and return a score. [Provider retention period and training terms: being confirmed with the provider; this line will be updated before launch.]
- Vercel — hosts the website and runs the application.
- Hetzner — hosts our own detection server in Germany, which analyses free quick-check text in memory and does not store it.
- Neon — hosts our database (account, credits, reports), in the EU (Frankfurt).
- Cloudflare — stores uploaded images privately (R2) and runs the Turnstile human check.
- Resend — delivers sign-in codes and service emails.
- Stripe and PayPal — process payments and calculate taxes.
- Google — Google sign-in if you choose it; Google Analytics 4 only with your consent.
- Microsoft — Clarity session analytics only with your consent.
- PVUV — page view statistics only with your consent.
Some providers process data outside your country, including in the United States. Where required, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
5. How long we keep it
Original images are deleted after 7 days and submitted text after 30 days. Quick-check text is never stored; quick-check usage records (time, result, word count, and your account or the daily IP hash) are deleted after 30 days. Reports stay until you delete them or your account. Full details are in our Data Retention page.
6. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent. You can delete any report yourself and delete your account in Settings. To exercise any other right, email support@isthisai.pro; we answer within one month.
If you are in the EU or UK you may complain to your data protection authority. California residents have the right to know, delete and correct personal information and not to be discriminated against for using these rights; we do not sell or share personal information for cross-context behavioural advertising.
7. Cookies
Strictly necessary cookies keep you signed in and protect forms. Analytics cookies are used only after you accept them. See our Cookie Policy.
8. Children
IsThisAI is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
9. Security
Traffic is encrypted, uploads are stored privately, access to reports is limited to their owner, and payment webhooks are verified. No system is perfectly secure; if a breach affects you we will tell you as the law requires.
10. Changes
We will post any change to this policy here and update the date above. For material changes we will also tell signed-in users.