Privacy Policy
This policy explains what data ProofAI collects, why, who processes it, how long we keep it and your rights. In short: your content is not saved, but it is sent to AI model providers to analyse it, and we keep a record of each check.
1. Introduction
ProofAI (proofai.in, the browser extension and the API) is operated by 4Born Solutions, 303, White House, RTO Circle, opp. R.T.O. Office, Shastrinagar, Bhavnagar, Gujarat 364003, India. 4Born Solutions decides how and why your personal data is processed (the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023). This policy explains how we collect, use, share and protect your information.
By using ProofAI you consent to the processing described here. You can withdraw consent at any time (section 9).
2. What Happens to Your Content
Your text and files are used only to produce your result and are not saved by ProofAI. To analyse them we send them to AI model providers listed in this policy (section 8). We keep a record of each check (date, type and score, not your content); signed-in users see it in their history.
Text you paste
Used only to produce your result. Not saved by ProofAI. Sent to AI model providers (section 8) to analyse it.
Files you upload
Processed in memory or temporary files and deleted after analysis. The extracted text is sent to AI model providers to analyse it.
Images
Used only to produce your result and deleted after analysis. Sent to AI model providers (section 8) to analyse them.
Readability Rewriter
Your text and the rewritten result are not saved by ProofAI. The text is sent to AI model providers to rewrite it.
What we do keep is a record of each check: your account or visitor ID, the date and time, the type of check (text, document, image or rewrite), the result (probabilities and verdict) and where it came from (website, dashboard, extension or API) — never the content itself. ProofAI does not use your content to train its own models. AI model providers process content under their own terms; some may keep it for a limited time for abuse monitoring, as described in their policies.
3. Information We Collect
We collect only the information needed to run the service.
A. Account Information
B. Billing Information
Payments are processed by Cashfree. We never see or store full card details.
C. Check Records and Usage Data
Check records never contain the text, file or image you checked.
D. Visitors Without an Account
To apply the free daily limit (10 checks a day) we keep a visitor record with a random visitor ID stored in a cookie, your IP address, a hashed device fingerprint (a one-way hash of your browser user agent, language and IP address) and your daily usage count.
E. Messages and Feedback
Messages you send us (contact form, email) and reports from the “Think this is wrong?” button. Those reports hold the verdict, score, type of check, a length range and your optional note — not the checked content.
4. Why We Use Your Data (Purposes)
We process personal data only for these purposes, on the basis of your consent when you use ProofAI or create an account, or where the law otherwise allows (for example, to meet legal obligations):
We do not sell your personal data or share it with advertisers.
6. Data Security
We use reasonable technical and organisational measures to protect your information. See our Security page for details. ProofAI does not hold SOC 2 or ISO 27001 certification.
HTTPS Encryption
Traffic is encrypted in transit with HTTPS/TLS via Cloudflare.
API Protection
API keys are stored only as hashes and can be restricted to your domain.
Limited Access
Servers are operated by 4Born Solutions; access is limited to staff who need it.
Hashed Passwords
Passwords are never stored in plain text.
If a personal data breach affects you, we will notify affected users and the Data Protection Board of India as required by law.
7. How Long We Keep Data
| Data | How long |
|---|---|
| Text, files and images you check | Not saved by ProofAI. Uploaded files are deleted after analysis. AI model providers handle content under their own terms. |
| Check records (date, type, score, verdict, source) | Kept while your account exists, so you can see your history. Visitor check records are kept until deleted on request. |
| Visitor records (visitor ID, IP address, hashed fingerprint, daily count) | Kept until deleted on request. We do not yet delete them automatically. |
| Account information | Kept while your account exists; deleted on request. |
| Payment and invoice records | Kept for as long as Indian tax and accounting law requires. |
| Result feedback (“Think this is wrong?”) | Kept until deleted on request; contains no checked content. |
| Support messages | Kept as long as needed to handle your request, then deleted on request. |
To delete your account, check records or visitor record, email [email protected] with the subject “Privacy request”.
8. Who Processes Your Data
These providers process data on our behalf. AI model providers receive the content you check so they can analyse it; which one handles a given check depends on the type of content and availability. Some are located outside India, so your data may be processed outside India.
| Provider | Purpose | Data sent | Location |
|---|---|---|---|
| Cloudflare | Network security, HTTPS and content delivery in front of our servers | All traffic to proofai.in, including content you submit, in transit | Global network; may be outside India |
| 4Born Solutions servers | Hosting the website, API, database and detection engine | Account data, check records, visitor records; content only while it is analysed | Servers operated by 4Born Solutions |
| Groq | AI model inference for text analysis and the Readability Rewriter | Text you check or rewrite | May be outside India |
| Cerebras | AI model inference for text analysis and the Readability Rewriter (backup) | Text you check or rewrite | May be outside India |
| Google (Gemini API) | AI model inference for text and image analysis (backup) | Text and images you check | May be outside India |
| Hugging Face (Inference API) | AI image and deepfake detection models | Images you check | May be outside India |
| OmniRoute gateway (operated by 4Born, omniroute.synoventum.us.cc) | Routes AI model requests to the model providers below | Text and images you check | Operated by 4Born; forwards to providers that may be outside India |
| GitHub Models / OpenAI GPT-4o (via OmniRoute) | AI model inference for text analysis | Text you check | May be outside India |
| Anthropic Claude (via OmniRoute) | AI model inference for image analysis | Images you check | May be outside India |
| Cashfree Payments | Payment processing | Name, email, phone, order amount; card/UPI details go directly to Cashfree | India |
| Google Analytics | Aggregate website statistics | Pages visited, device and browser data, approximate location, cookie IDs, what you click and which tool you use (tool name, result range, file type; never the text or file you check); if you are signed in, your internal account ID and plan (never your email) | May be outside India |
| Google (Sign in with Google, Gmail SMTP) | Optional sign-in; sending service emails | Name and email address; email messages we send you | May be outside India |
| Calendly | Booking demo calls (only if you choose to book) | Name, email and details you enter | May be outside India |
We will update this list when we add or change a provider that receives your content.
9. Your Rights and Withdrawing Consent
Under India’s Digital Personal Data Protection Act, 2023 you can:
How to use these rights: email [email protected] with the subject “Privacy request”. We may ask you to confirm your identity.
How to withdraw consent: stop using ProofAI and email us to delete your account and records. Withdrawing consent does not affect processing that already happened, and we may keep data the law requires us to keep (such as payment records). Without the data needed to run a check, we cannot provide the service.
10. Children's Privacy
ProofAI services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.
11. Grievance Officer and Complaints
Grievance Officer, 4Born Solutions
Email: [email protected] (subject “Grievance”)
Phone: +91 90231 53878
Address: 303, White House, RTO Circle, opp. R.T.O. Office, Shastrinagar, Bhavnagar, Gujarat 364003, India
We acknowledge complaints within 24 hours and resolve them within 15 days (Information Technology Rules, 2021), and in any case within the period required by the Digital Personal Data Protection Rules.
If you are not satisfied with our response, you may appeal to the Grievance Appellate Committee (for complaints under the IT Rules) or complain to the Data Protection Board of India (for personal data complaints under the DPDP Act), as applicable.
12. Governing Law
This policy is governed by the laws of India. The courts at Ahmedabad, Gujarat have exclusive jurisdiction.
13. Policy Updates
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date, and we will notify signed-in users by email of significant changes.
Changes
- 16 October 2026Corrected the description of what we store: we keep a record of each check (not your content) and send content to AI model providers to analyse it. Added the list of providers, retention periods, your rights under the DPDP Act, the Grievance Officer and governing law.
- March 2024Previous version.
14. Contact Us
Privacy requests (subject “Privacy request”)
[email protected]
4Born Solutions · [email protected] · +91 90231 53878
15. Browser Extension
The ProofAI browser extension follows the same rules as the website:
- Only on your action. The extension reads the text of a page or your selection only when you click to analyse it. It never monitors your browsing in the background and never collects your browsing history.
- What is sent. The selected text is sent over HTTPS to the ProofAI API (
api.proofai.in) solely to return a detection result. As on the website, the text is not saved by ProofAI, it is sent to the AI model providers in section 8 to analyse it, and a record of the check (not the text) is kept. - Minimal permissions. It requests only
storage(to keep you signed in),activeTabandscripting(to read the page you choose). It contains no API keys and loads no remote code. - Never sold. Extension data is used only to provide the detection feature — never sold, never used for advertising, and never transferred except to deliver this service.
Your Privacy Matters
Questions about how we handle your data? Email [email protected] with the subject “Privacy request”.