Sign up

Privacy Policy

Last updated: October 2026

1. Introduction

Is It AI? ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI detection service.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (stored securely using industry-standard hashing)
  • Account preferences and settings

2.2 Usage Data

We automatically collect certain information when you use our services:

  • Detection history and results (scores, labels, timestamps)
  • API usage statistics
  • Browser type and version
  • Device information
  • IP address
  • Pages visited and features used
  • The country you signed up from (derived from your IP address)
  • With your analytics consent, how you first found us: the first page you visited, the website that referred you, and any campaign tags in that link (for example utm_source)

2.3 Images and videos you check

When you submit images or videos for analysis:

  • Images are processed for AI detection analysis
  • Detection results (scores, labels, metadata) are retained in your history
  • Images may be stored anonymously to improve our detection models
  • If you turn on Save images in Settings, the images you check are kept with your history, linked to your account, so you can see them again. You can turn this off, or delete any check, at any time. Images kept to improve our detection models are not linked to your account.
  • If Save images is off, we keep a temporary copy of each image you check while you're using the check, so explanations and Investigate online can use it without you uploading it again. It isn't linked to your history. We delete it when you leave the page, or after 30 minutes without use if your browser doesn't tell us you've left (removed within about 10 minutes after that).
  • When you check a video, we send it to our detection service, which passes it to the provider that analyzes it. The video file is deleted from our servers once the check is done (usually within minutes; at most about 30 minutes while it waits in line). An upload that never starts, for example because you did not have enough credits, is deleted within an hour. While a check runs, we take small pictures of the frames it checks, and of one frame per second in between. We keep these for up to 2 hours so the result can show them and an explanation can use them. If Save video frames is on in Settings (the default, unless you had turned Save images off), the pictures of the checked frames are kept with that check in your history, linked to your account and visible only to you, until you delete the check or the frames. With it off, for all checks or for one, only the times and scores are kept. Like images, videos you check, and pictures of their frames, may be used anonymously, not linked to your account, to improve detection models, by us or by the detection provider that analyzes them.
  • Face swap check: if you turn it on, the faces in your image or video are analyzed to estimate whether one was swapped or faked. We do not identify anyone or keep face data apart from the result.
  • Links: when you paste a link, our servers open that page or file to fetch the image or video. The site you linked can see a request from our servers, not from you.
  • Content Credentials: if an image carries a signed label (C2PA), we read it and keep the signer, the tool named in it and its source type with the check.
  • AI assistants: if you connect Is It AI? to an AI assistant with your API key, the files or links the assistant sends are handled like any other check. What you share with the assistant is also covered by that assistant's own terms.
  • Investigate online (a paid feature) is off until you turn it on in the detector. While it is on, the image from each check you run, and text derived from it (such as words read from the image or a short description of it), is sent to third-party service providers we use to find where the image appears online and whether it has been fact checked. We may use more than one provider for this. The results (matching page URLs, labels, extracted text and links to published fact checks) are stored with that detection in your history until you delete it; with it off, nothing from your checks is sent to these providers for this feature
  • When you ask for an explanation of a check (a paid feature), or share a detection publicly, its image (for a video, the pictures of its frames) and the results we gathered for it are sent to third-party service providers we use to write the explanation, which also provides the title, description and tags of the public page. We may use more than one provider for this. The explanation is stored with that detection in your history until you delete it

3. How We Use Your Information

We use the collected information for:

  • Providing and maintaining our AI detection services
  • Processing your detection requests
  • Managing your account and subscription
  • Sending service-related communications (verification emails, password resets)
  • Improving our detection models and service quality
  • Analyzing usage patterns to enhance user experience
  • Preventing fraud and ensuring security
  • Complying with legal obligations

4. Data Retention

We retain your data as follows:

  • Account data: Retained while your account is active and for a reasonable period afterward
  • History of your checks: Kept until you delete it or close your account
  • Usage logs: Retained for up to 90 days

You may request deletion of your account and all associated data, including any stored images, at any time by contacting support.

5. Data Security

We implement appropriate security measures to protect your information:

  • HTTPS encryption for all data transmission
  • Secure password hashing using bcrypt
  • Regular security audits and updates
  • Access controls and authentication for internal systems
  • Database encryption at rest

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal information. We may share your data with:

  • Service providers: Third parties who assist in operating our services (payment processing, email delivery, the AI detection provider that analyzes each image and video you check, and providers of image search, fact checking and AI analysis for Investigate online when you turn it on, and for explanations of your checks when you ask for one or share a check publicly)
  • Legal requirements: When required by law, court order, or government request
  • Business transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected].

8. Cookies and Tracking

We use cookies and similar technologies to operate our service, analyze usage, and support marketing efforts. All non-essential tracking requires your explicit consent before activation.

8.1 Essential Cookies

These cookies are necessary for the site to function and cannot be disabled:

  • Session management and authentication
  • CSRF protection and security tokens
  • Cookie consent preference storage
  • Remembering your settings

8.2 Analytics

With your consent, we use analytics tools to understand how visitors interact with our service and improve the user experience:

  • Google Tag Manager (GTM): A tag management system that coordinates the loading of analytics and marketing scripts. GTM itself does not collect personal data but manages the tools listed below.
  • Google Analytics 4 (GA4): Collects anonymized usage data including pages visited, time spent, device and browser information, geographic location (country/region level), and referral sources. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
  • Microsoft Clarity: Records anonymized session replays and generates heatmaps to help us understand how users navigate our pages. Clarity masks sensitive input fields and does not collect passwords or personal data entered in forms.
  • PostHog: Product analytics that records the pages you visit and the features you use, so we can understand which parts of the service work and where people get stuck. When you sign in, PostHog links your earlier activity in the same browser to your account, which is identified by your email address and account ID. We also record in PostHog and with our payment processor how you first found us (see Usage Data above) so we can measure which channels lead to paid plans. PostHog does not receive your images, passwords or card details.

8.3 Marketing

With your consent, we use marketing tools to measure the effectiveness of our advertising campaigns:

  • Meta Pixel (Facebook): Tracks conversions from Meta advertising platforms (Facebook, Instagram). This pixel may collect data such as pages visited, actions taken (e.g., sign-ups, purchases), and device information. This data is used to optimize ad delivery and build audience segments. You can manage your Meta ad preferences at Facebook Ad Preferences.

8.4 Cookie Preferences

When you first visit our site, you will see a consent banner allowing you to accept or decline non-essential cookies. You can change your preference at any time by clicking the "Cookie Preferences" link in the footer of any page. Logged-in users can manage their analytics preference in Settings > Privacy.

We implement Google Consent Mode v2, which ensures that Google services respect your consent choice. When consent is not granted, Google tags operate in a limited, cookieless mode.

9. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Your continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: