ClarityCheck AI Privacy Policy for EU/UK Users

ClarityCheck ("we," "us," "our," or the "Company") is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) for EU and UK users. This Privacy Policy describes how we collect, use, retain, store, and disclose personal data when you access or use the ClarityCheck.com website and all its subdomains (collectively, the "Site") and ClarityCheck AI, including AI detection, plagiarism checking, the Humanizer, and the Plagiarism Remover (the “Services”). This Privacy Policy also describes our practices regarding limited retention of the text you submit, the results generated from it, and certain logs (including the “Scan History” feature that allows you to re-open prior results).

We collect the following types of information:

a) User Information: Information you provide when you use our Site, including:

• Contact Data (email address)

• Payment Data (account or credit card number, processed by our payment providers)

• Confirmation that you are at least 18 years old

b) Submitted Text: Text you paste or upload to obtain AI detection, plagiarism checking, or rewriting (“Submitted Text”). Submitted Text may contain personal data about you or about other people, depending on the text you choose to submit. We process Submitted Text solely to provide the Services you request.

c) Results and Scan History: The scores, highlighted passages, matched sources, and rewritten text generated from your Submitted Text (“Results”), which we retain and associate with your account so you can re-open them without submitting the same text again (“Scan History”). Scan History is not publicly displayed, indexed, or searchable and is accessible only to the authenticated account that generated it.

d) Usage/Technical Data: We collect standard technical and usage data (e.g., device identifiers, browser type, IP address, timestamps, and log data) as necessary to operate, secure, and improve the Services. We do not use Submitted Text or Results for advertising targeting.

e) Derived and Additional Data: Information we generate or infer rather than collect directly, including:

• Inferences: Results describing your Submitted Text, such as the estimated likelihood that it was generated by an artificial intelligence system or its similarity to existing sources.

• Commercial information: your subscription plan, purchase history and transaction records.

• Approximate location derived from your IP address.

We may also collect and retain limited security, audit, and fraud-prevention logs relating to use of the Services (e.g., timestamps, IP address, device identifiers, and event logs), subject to retention limits.

We obtain the categories of information listed above from the following sources:

a) Directly from you as part of the registration and transaction process, and from the text you submit.

b) Automatically, through website usage details collected when you use the Site.

c) From the providers described in Section 2.4, which return Results generated from your Submitted Text.

a) If you choose to use ClarityCheck AI, you may submit text for the sole purpose of performing the requested AI detection, plagiarism check, or rewrite. Before submitting text, users must confirm that they are at least 18 years old. By submitting text, users represent that they wrote the text, own it, or otherwise have the legal right and necessary permissions to submit it for processing, and that it does not contain personal data of others that they have no right to process. To perform the requested service, ClarityCheck transmits the Submitted Text to the providers described in Section 2.4. Submitted Text is not used for advertising, promotional purposes, or AI model training unless you separately provide your express consent.

b) Before purchase, the Site may show a free preliminary analysis based solely on writing patterns in the Submitted Text. This analysis is performed by ClarityCheck and does not transmit the Submitted Text to the providers described in Section 2.4.

c) If you submit text written by another person, such as a student, employee, contractor, or client, you are responsible for having a lawful basis to do so and for providing any notice or obtaining any consent required by applicable law. Please do not submit special categories of personal data, government identifiers, or confidential information unless they form part of text you are entitled to check.

d) By proceeding with a submission, users also consent to the processing of the Submitted Text as described in this Privacy Policy and agree to the applicable Terms & Conditions.

We use third-party artificial intelligence providers to power the Services. When you use these features, your Submitted Text is sent to the relevant provider so Results can be generated:

• PlagiarismSearch (plagiarismsearch.com), operated by System Technology Online Spain SL and System Tech Online USA Inc., performs AI detection and plagiarism checking.

• OpenAI performs rewriting for the Humanizer and the Plagiarism Remover.

We do not use your personal data — including Submitted Text, Results, or rewritten text — to train, develop, or improve any artificial intelligence or large language model. We also do not permit our AI providers to do so. Under the terms on which we use these providers, your data is not used to train their models. PlagiarismSearch keeps the report generated for each check in our account until we delete it, and we delete it when you delete the scan or when it reaches the end of the retention period described in Section 6. OpenAI does not use data sent through its API to train its models and may retain inputs and outputs in abuse-monitoring logs for up to 30 days, unless longer retention is required by law, after which they are deleted.

Your Submitted Text is not added to any database that other users' text is compared against, and PlagiarismSearch does not make it available as a plagiarism source to its other customers.

Any AI or machine learning technology used within our Services is limited to performing the specific detection, matching, or rewriting function you requested.

a) User Account Information: We process account and billing/transaction information as necessary to perform our contract with you (i.e., to provide the Services you request) and to comply with applicable legal obligations (e.g., accounting and fraud prevention). Where required, we may also rely on consent for specific optional processing activities.

b) Submitted Text and Results: We process Submitted Text, Results, and rewritten text as necessary to perform our contract with you, by providing the AI detection, plagiarism check, or rewrite you request when you submit text.

c) Scan History: We store Results in your Scan History as necessary to perform our contract with you and based on our legitimate interest in providing an improved user experience (allowing you to re-open a previous result without submitting the same text again). This storage is purpose-limited and time-limited as described below.

d) Cookies/Similar Technologies: Where required by law, we rely on your consent for non-essential cookies and similar technologies.

e) Email Open and Click Tracking: We use tracking pixels and tracked links in our emails to measure engagement. For recipients in jurisdictions that require prior consent for such tracking — including France (in line with CNIL guidance) and Italy — we rely on your consent, and we do not track your email opens or clicks unless you have opted in. For recipients elsewhere, we rely on our legitimate interest in measuring and improving our communications. You may grant or withdraw consent at any time (see the "Email Communications and Tracking" section).

We use the collected information to:

a) Provide the Services you request, including Results and rewritten text.

b) Provide, support, personalize, and develop our Site, products, and services.

c) Create, maintain, customize, and secure your account with us.

d) Process your requests, purchases, transactions, and payments and prevent transactional fraud.

e) Help maintain the safety, security, and integrity of our Site, products and services, databases and other technology assets, and business.

f) Respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

g) Evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

h) Carry out our obligations and enforce our rights arising from any contracts entered into between you and us.

i) Conduct testing, research, analysis, and product development, excluding the training of artificial intelligence models on Submitted Text.

We may disclose personal data to service providers that host, store, or help deliver the Services (including storage of Scan History for your account), process payments, provide analytics, provide customer support tools, and perform security/fraud monitoring, and to the artificial intelligence providers described in Section 2.4, in each case as necessary to provide the Services and subject to contractual restrictions and applicable law. We do not sell your Submitted Text, and we do not share Submitted Text or Results for advertising purposes.

Technologies used. We use tracking pixels (also called web beacons) and unique tracked links in the emails we send you (such as newsletters and product updates) to understand engagement with our communications. This is provided through our email service provider, Customer.io, acting as our processor.

Data collected. Where tracking is active, we may record whether and when you opened an email, your approximate location (derived from your IP address), and which links you clicked.

Consent and your choices. Where prior consent is required — including recipients in France and Italy — email open and click tracking is off by default and is enabled only if you opt in. You can grant or withdraw your consent at any time using the "Manage Tracking Preferences" link in the footer of our emails; your choice applies to future emails. You can also limit open tracking by disabling automatic image loading in your email client (note this does not prevent link-click tracking). Managing tracking preferences does not unsubscribe you from our emails.

Legal basis. Consent for recipients where required, and legitimate interest for other recipients (see Section 3).

We store personal data only in the following limited ways and for no longer than necessary for the purposes described in this Privacy Policy:

a) Account Information: We retain account information for as long as your account is active and as needed thereafter for legitimate business purposes and legal compliance. You may request deletion of your account via our Help Center.

b) Submitted Text, Results, and Scan History: We retain Submitted Text, Results, and rewritten text in your Scan History for up to one hundred twenty (120) days and then delete them from our active systems within a commercially reasonable timeframe, subject to limited exceptions for security, fraud prevention, backups, and legal compliance. When a scan is deleted, whether by you or at the end of this period, we also delete the corresponding report held by PlagiarismSearch.

c) Rewriting Provider Logs: Text sent to OpenAI to produce rewritten text may be retained by OpenAI in abuse-monitoring logs for up to 30 days, unless longer retention is required by law, and is then deleted.

d) User Controls: You may delete any scan, together with its Submitted Text, Results, and rewritten text, at any time from your Scan History. Deleted scans are removed from your account immediately and deleted from our active systems within a commercially reasonable timeframe, subject to limited exceptions for security, fraud prevention, backups, legal compliance, and other applicable legal obligations.

e) Access Controls: Scan History is accessible only to the account that generated it and is not shared with other users.

f) Security Logs: We may retain certain technical, security, and audit logs for limited periods as necessary to operate, secure, and protect the Services.

ClarityCheck respects your rights under the UK GDPR and EU GDPR, including the right to request erasure of your personal data. Submitted Text and Results are not publicly displayed, indexed, or searchable.

How to exercise your Right to Erasure:

a) Delete Scans Yourself: You may delete any scan, with its Submitted Text, Results, and rewritten text, at any time from your Scan History.

b) Submit a Request: To delete your account and associated personal data, use the Delete Account page linked in our Help Centre, or email our Privacy Officer directly with a "Right to Erasure Request."

c) Verification: We may ask you to provide reasonable identification to verify that the request relates to you.

d) Processing: Upon receiving a valid request and where required by applicable law, we will delete or anonymize your personal data, including your Submitted Text, Results, and Scan History, and delete the corresponding reports held by our providers, subject to limited exceptions where we are required by law to retain certain information.

e) Text Submitted by Other Users: If your personal data is contained in Submitted Text or Results generated by another user, we will take reasonable technical steps to delete or anonymize your specific data from our active systems.

We only collect and process data that is necessary for providing our Services. This includes your email address, the text you choose to submit, and your payment details, which are processed by PCI DSS compliant payment providers. Please do not submit special categories of personal data, government identifiers, or confidential information unless they form part of text you are entitled to check.

As an EU or UK user, you have the following rights:

a) The right to access your personal data

b) The right to rectify inaccurate personal data

c) The right to erase your personal data, including your Submitted Text, Results, and Scan History

d) The right to restrict processing of your personal data

e) The right to data portability

f) The right to object to processing of your personal data

g) Rights related to automated decision-making and profiling

To exercise these rights, please contact us using the information provided in the "Contact Information" section below.

We store our data in the United States. Submitted Text may also be processed by PlagiarismSearch in the United States and Europe, and by OpenAI in the United States. The EU-U.S. Data Privacy Framework provides safeguards for transferring personal data from the EU to the US. We use standard contractual clauses for international data transfers.

We do not use automated decision-making that produces legal or similarly significant effects on you. Results are generated automatically about the text you submit and are probabilistic estimates; they are not decisions about you.

We may use profiling based on the Cookie Policy and the consent you have given to us.

If we introduce automated decision-making that produces legal or similarly significant effects in the future, we will provide you with information about the logic involved and the significance and consequences of such processing.

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include, where appropriate, access controls, encryption, authentication mechanisms, monitoring, and other security measures appropriate to the nature of the information we process. We do not store your passwords and use magic links to authenticate your account. Payment information is processed and stored by PCI DSS compliant payment providers using appropriate security safeguards. While we strive to protect personal information, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure, and we cannot guarantee absolute security.

ClarityCheck maintains administrative, technical, and organizational procedures designed to identify, investigate, contain, and respond to security incidents involving personal information. Where we determine that a security incident requires notification under applicable law, we will notify affected individuals, supervisory authorities, regulators, and other relevant parties in the manner and within the timeframes required by applicable law. Not every security incident requires notification, and the form, timing, and recipients of any notification will depend on the nature of the incident and applicable legal requirements.

Based on our Terms & Conditions, ClarityCheck AI is offered only to users who are at least 18 years old, and we do not knowingly collect personal data from anyone under 18. If we become aware that a person under 18 has provided us with personal data, we will delete it, unless we have a legal obligation to keep it, and terminate the account if applicable.

You can contact our Data Protection Officer at dpo@claritycheck.com.

For more information, please refer to our separate Cookie Policy, which can be found in the footer of this website. We do not share your Submitted Text or Results for advertising purposes.

ClarityCheck may amend this Privacy Policy from time to time. We will notify you of significant changes by posting a prominent notice on our website or sending you an email notification.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us via our Help Center (see link in the footer) or our Privacy Officer at:

Email: privacy@claritycheck.com

Mailing address: 2093 Philadelphia Pike #7776, Claymont, DE 19703, USA

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.