delete my ai data.com
Free Scan

Privacy Policy

Last updated: September 22, 2026

Summary of Key Points

This summary provides key points from our Privacy Policy, but you can find more details about any of these topics by clicking the link following each key point or by using our table of contents below.

What information do we collect? We collect the name (and optionally city and/or employer) you give us to run a Scan (Free Limited Scan, Full Scan, or Monitoring), your email address, and payment information handled entirely by Stripe. See Section 1.

Do we process any sensitive personal information? We do not intentionally collect sensitive personal information (such as health, biometric, or genetic data). See Section 1.

Do we share your identity information with third parties? Yes. Running a Scan means sending the identity information you provide to third-party AI model providers to query them. This is not incidental; it is the entire function of the product. See Section 5.

What are your rights? Depending on where you are located, you may have rights to access, correct, or delete your personal information, and to opt out of marketing communications at any time. See Section 11.

How do you exercise your rights? The easiest way is by submitting a request through our Contact page, and we will respond as required by applicable law.

Table of Contents

  1. What Information Do We Collect?
  2. How Do We Process Your Information?
  3. What Legal Bases Do We Rely On?
  4. When and With Whom Do We Share Your Information?
  5. Third-Party AI Model Providers: the Core of the Service
  6. Cookies and Other Tracking Technologies
  7. International Transfers
  8. How Long Do We Keep Your Information?
  9. How Do We Keep Your Information Safe?
  10. Do We Collect Information From Minors?
  11. Your Privacy Rights
  12. Controls for Do-Not-Track and Global Privacy Control
  13. State Privacy Rights
  14. Changes to This Policy
  15. Contact

1. What Information Do We Collect?

Information you provide to us.

  1. 1.1Identity information: name, and optionally city and employer, submitted to run a Scan. Monitoring subscribers may add further disambiguating context (e.g. additional past cities).
  2. 1.2Contact information: your email address, used to send Scan results, manage your account, and, where you have not opted out, send product/marketing communications.
  3. 1.3Payment information: handled entirely by our payment processor, Stripe. We do not store your full card number.
  4. 1.4We do not intentionally collect or process sensitive personal information, such as health data, biometric data, genetic data, or information revealing racial or ethnic origin, religious beliefs, or sexual orientation. A Scan’s content is generated by third-party AI models, not solicited by us; if a Scan or action plan happens to contain a statement that resembles a sensitive category, we do not treat that as sensitive personal information we collected about you, and you may request deletion of that Scan or report at any time (see Section 11).

Information we collect automatically.

  1. 1.5Scan and report data: the exact prompts sent to AI models and the exact responses received, plus the classification assigned to each response. This is the core content of your report.
  2. 1.6Log and usage data: a session identifier and basic event data (e.g. which page you viewed, which offer you started checkout on), plus standard technical data such as IP address, browser type, and timestamps.

2. How Do We Process Your Information?

We process your information for a variety of reasons, including:

  1. 2.1To run Scans and generate your report and, where included with your plan, your action plan.
  2. 2.2To process payments and manage your subscription, via Stripe.
  3. 2.3To send you your results, account-related emails, and, unless you opt out, marketing communications.
  4. 2.4To operate and improve the Service, including measuring which offers and pages perform well.
  5. 2.5To detect and prevent abuse of the Free Limited Scan (e.g. automated/excessive requests).
  6. 2.6To comply with our legal obligations.

3. What Legal Bases Do We Rely On?

If you are located in the European Economic Area, the United Kingdom, or Switzerland, applicable law requires that we identify the legal basis on which we process your information:

  1. 3.1Consent, where you have given us permission, such as for marketing communications you can withdraw at any time.
  2. 3.2Performance of a contract, where processing is necessary to provide you the Service you purchased.
  3. 3.3Legitimate interests, such as fraud prevention, security, and improving the Service, where those interests are not outweighed by your rights.
  4. 3.4Legal obligations, where we must process information to comply with the law.

4. When and With Whom Do We Share Your Information?

We may share your information with the following categories of service providers, each acting under its own privacy policy:

  1. 4.1Stripe -- payment processing.
  2. 4.2Third-party AI model providers, directly or through an aggregation service (OpenRouter) -- see Section 5.
  3. 4.3CRM/marketing infrastructure -- customer and subscription lifecycle data is synced to our CRM to manage your account and send account-related communications.
  4. 4.4Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
  5. 4.5Legal requirements: where required by law, court order, or government request.

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising as of the date of this policy; if that changes, we will update this section and Section 6.

5. Third-Party AI Model Providers: the Core of the Service

  1. 5.1Running a Scan sends your submitted identity information (name, city, employer) as a prompt to third-party AI models. Our current active roster spans OpenAI, Google, NVIDIA, InclusionAI, Anthropic, Meta, Mistral, xAI, DeepSeek, Qwen; this list changes as we add or retire models, so it always reflects who we query as of the date you run a Scan, not a fixed list. We query Anthropic’s models directly; every other lab on the roster is queried through a third-party aggregation service, OpenRouter. This is not incidental: it is the entire function of the product.
  2. 5.2For queries routed through OpenRouter: OpenRouter’s own privacy policy states that it does not use submitted inputs or outputs to train its models and does not persist a request’s content beyond what is needed to route it, unless prompt logging is separately enabled on the account -- it is not enabled on ours. However, once OpenRouter forwards a query to the specific model provider you are matched with, that provider’s own data practices apply, and some model providers do use submitted content to train or improve their own models. The retention and training treatment of any given query is effectively the combination of OpenRouter’s policy and that specific provider’s policy, which we do not control. OpenRouter publishes and maintains a per-provider breakdown of these practices; see openrouter.ai/privacy and openrouter.ai/docs/guides/privacy/provider-logging. For queries we send directly to Anthropic, Anthropic’s own privacy policy governs; see anthropic.com/legal/privacy.
  3. 5.3The responses these models return, including any information they state about you, whether accurate or not, are stored by us as part of your Scan report. See Section 8, Retention.
  4. 5.4We do not store the content of any conversation you have directly with a third-party AI provider outside the Service; this section covers only the queries the Service itself sends on your behalf.

6. Cookies and Other Tracking Technologies

  1. 6.1Necessary cookies: a session cookie that connects your activity across the free-Scan/checkout flow, and an authentication cookie that keeps you signed in to your dashboard using your magic link rather than a stored password.
  2. 6.2Advertising attribution: a first-party cookie that records a standard ad-click identifier (in Meta’s own format) when you arrive from a Meta/Facebook ad, so we can measure which ads lead to a Scan. We also record UTM parameters (source, medium, campaign, content, term) present in the URL when you arrive, for the same measurement purpose. As of the date of this policy, we do not run a live third-party advertising pixel or script on the Service; this infrastructure exists to support that in the future. If we add one, we will not load it on any page that displays your Scan or report content, including your dashboard, report, or action-plan pages -- it will be limited to marketing and checkout pages. If we add one, we will update this section first.
  3. 6.3You can set your browser to refuse cookies; doing so may prevent parts of the Service, such as staying signed in, from working correctly.

7. International Transfers

  1. 7.1The Service is offered to customers both inside and outside the United States. Our servers, and the servers of the service providers listed in Section 4, are located in the United States, so your information will be transferred to, stored, and processed in the United States regardless of where you access the Service from.
  2. 7.2If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, or a successor transfer mechanism recognized under applicable law, as the basis for that transfer. A copy is available on request through our Contact page.

8. How Long Do We Keep Your Information?

  1. 8.1We retain your Scan and report data for as long as your account is active, so you can refer back to past results, plus 30 days after account closure for legitimate business or legal purposes, after which it is deleted or anonymized.
  2. 8.2When we have no ongoing legitimate business need to process your information, we will either delete or anonymize it, or, if that is not possible, securely isolate it from further processing until deletion is possible.

9. How Do We Keep Your Information Safe?

  1. 9.1Account access is via a one-time magic link sent to your email rather than a stored password. We do not store payment card details ourselves. See our Trust & Security page for more detail.
  2. 9.2No electronic transmission over the internet or method of electronic storage can be guaranteed to be completely secure. We cannot promise that unauthorized third parties will never be able to defeat our security measures. In the event of a security breach affecting your personal information, we will notify you and any required regulator in accordance with applicable law.

10. Do We Collect Information From Minors?

  1. 10.1The Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect or solicit information from anyone under 18.
  2. 10.2If we learn that we have collected personal information from someone under 18, we will deactivate the account and delete that information. If you believe we might have information from or about anyone under 18, contact us through our Contact page.

11. Your Privacy Rights

  1. 11.1Depending on where you are located, you may have the right to request access to, correction of, or deletion of your personal information (including a specific Scan or report, per Section 1), to restrict or object to certain processing, to request a portable copy of your information, and, where processing is based on consent, to withdraw that consent at any time.
  2. 11.2You may exercise any of these rights, and opt out of marketing communications at any time, by writing to us through our Contact page. We will respond within the time required by applicable law.
  3. 11.3If you are located in the EEA, the UK, or Switzerland and believe we have not addressed your concern, you have the right to complain to your local data protection authority.

12. Controls for Do-Not-Track and Global Privacy Control

  1. 12.1Most browsers, and some mobile operating systems, include a Do-Not-Track (“DNT”) feature. No uniform technical standard for recognizing DNT signals has been adopted, so we do not currently respond to DNT signals. If a standard is adopted in the future, we will update this policy.
  2. 12.2We do honor the Global Privacy Control (“GPC”) signal, where sent by your browser, as a valid request to opt out of the sale or sharing of personal information under the CCPA/CPRA and similar state laws, to the extent we engage in that activity.

13. State Privacy Rights

  1. 13.1California. California residents have rights under the CCPA/CPRA, including the right to know what personal information we have collected about you, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to not be discriminated against for exercising these rights. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined by California law.
  2. 13.2Other states. A majority of US states, including Colorado, Connecticut, and Virginia, have now enacted a comprehensive consumer privacy law. If you are a resident of a state with such a law in effect, you generally have the right to access, correct, delete, and obtain a portable copy of your personal data, and to appeal a denial of a rights request. We will respond to a request under any such law within 45 days of receipt, extendable once by an additional 45 days where reasonably necessary; if we deny a request and your state’s law provides an appeal right, we will respond to that appeal within the time required by that law (generally 45 to 60 days).
  3. 13.3To exercise any state privacy right, contact us through our Contact page. We may need to verify your identity before completing your request.

14. Changes to This Policy

  1. 14.1We may update this Privacy Policy from time to time. Material changes will be reflected by an updated date on this page, and, where required by law, we will notify you directly.

15. Contact

Questions about this Privacy Policy, or requests under it, can be sent to our Contact page.