Privacy Policy
Effective 2026 · Proofline (Nevada, USA) · Contact: trigeochiral@gmail.com
The short version
We do not sell your data, we do not use advertising or tracking cookies, and by default we do not keep the text you scan. What we store is the minimum needed to run your account and the service.
What we collect
- Account details — your name and email, when you sign up or subscribe.
- Authentication — a one-way hash of your API key (never the key itself) and your monthly usage count.
- Operational metadata — the country/region of a request (from Cloudflare, no lookup), a hashed IP used only for rate-limiting, and a SHA-256 of scanned text so a result can be matched to its input without keeping the input.
- Payment records — your Stripe customer identifier and subscription status. Card details are handled entirely by Stripe and never reach our servers.
- Email delivery events — whether verification and account emails were delivered.
The text you scan
- By default we do not store it. Scanned text is measured and discarded; only its SHA-256 hash and the score are retained against your account.
- Your own history is opt-in. If saved history is enabled for your account, the text is stored encrypted and is yours to review or delete. We do not read it or use it to train anything — there is no model to train.
- Business/API accounts that configure a webhook receive their own submissions at their own endpoint; that is their data by design.
- Nothing is ever sent to a third-party or generative AI model. Detection is arithmetic performed on our own infrastructure.
Who processes data for us
- Cloudflare — hosting, the account database, and request geography/security.
- Stripe — payment processing (their privacy policy).
- SendGrid / Resend — transactional email (verification, account notices).
Your rights
You can request access to, correction of, or deletion of your account data at any time by emailing trigeochiral@gmail.com. Closing your account removes your stored account data and any saved scan history.
Institutional deployments
On-premise and VPC deployments are a separate configuration that can keep all submitted text inside the institution's own environment. FERPA, GDPR, or other compliance status is reviewed with the institution and counsel; this page is not a certification.
Changes
We will update the effective date above when this policy changes. Continued use after a change means you accept the updated policy.