Skip to content
Centixio

Privacy Policy

Last updated September 27, 2026

The short version

  • We never use your text to train AI models, and we don't sell your data.
  • Scans made without an account are analyzed and discarded — the text is not stored.
  • If you're signed in, scans are saved to your private history (you can turn this off or delete scans any time).
  • Scans and reports are never public.

1. What we collect

  • Text you submit for analysis, and files you upload (from which we extract text).
  • Account data: email, name, and profile picture if you sign in with Google.
  • Billing data: handled by Stripe. We store your Stripe customer ID and subscription status, never card numbers.
  • Usage data: word counts, scan counts and product events (e.g. “scan completed”) used for limits and improving the product.
  • Abuse-prevention signals: a random anonymous identifier in an HttpOnly cookie and a one-way hash of your IP address, used only to enforce free-usage limits.

2. How your text is processed

To analyze text, we send it over an encrypted connection to our AI-detection provider, which returns likelihood scores. On paid plans, a language model may receive a short excerpt plus the scores to write a plain-language explanation. Our providers process text only to deliver the service and are not permitted to use it to train their models under our agreements with them.

Anonymous scans are not written to our database. Uploaded files are processed in memory to extract text and are not retained.

3. Scan history

When you are signed in and history is enabled, we store the analyzed text and results so you can reopen reports. Only you can access them. You can disable history in Settings, delete individual scans, or delete all scans at once. Deleting your account removes all of your scans.

4. Cookies

We use essential cookies for authentication and for the anonymous usage limit. We measure aggregate page views with Vercel Web Analytics, which does not use cookies. We use the Google tag for Google Ads to measure the performance of our ads (for example, whether a visit from an ad led to a sign-up); it may set cookies. If enabled, Google Analytics also sets cookies to measure aggregate traffic. None of these services ever receives the text you analyze.

5. Sub-processors

  • Supabase — authentication and database hosting
  • Vercel — application hosting and cookieless web analytics
  • Stripe — payments
  • Resend — transactional email
  • Our AI-detection provider and, on paid plans, our language-model provider — text analysis
  • Google Ads — advertising measurement (Google tag)
  • Google Analytics (if enabled) — aggregate website analytics

6. Retention

Account data is kept while your account is active. Scan history is kept until you delete it or your account. Anonymous rate-limit records are deleted automatically after 48 hours.

7. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Email support@centixio.com and we will respond within 30 days.

8. Security

Data is encrypted in transit (TLS) and at rest. Database access is restricted with row-level security so each account can only read its own records. API keys are stored only as one-way hashes.

9. Changes

We'll post updates here and notify account holders of material changes by email.

Questions? Contact Centixio at support@centixio.com.