Privacy Policy
& AI Data Ethics
Effective Date: February 10, 2026
Our commitment to Zero-Log processing and Intellectual Property protection.
Executive Summary
Zero Retention: We do not store the text you scan.
No Training: Your data is never used to train our AI models.
Ephemeral Processing: Analysis happens in volatile RAM only.
GDPR Compliant: We adhere to strict EU data protection standards.
1. The Zero-Log Guarantee
CrossPlag operates on a strict “ephemeral processing” architecture. When you submit text for analysis via our web interface or API:
- The text is transmitted via TLS 1.3 encryption to our secure inference servers.
- The text is loaded into volatile Random Access Memory (RAM) for analysis.
- The AI detection algorithms run the heuristic check.
- The probability score is returned to your browser.
- Immediate Deletion: The text is permanently wiped from RAM. It is never written to a hard drive, database, or long-term storage medium.
2. No AI Training Policy
A common concern with AI tools is that user data feeds the “machine.” CrossPlag explicitly rejects this practice.
We do NOT use user submissions to train, fine-tune, or improve our detection models. Our models are trained exclusively on:
- Publicly available academic datasets (e.g., ArXiv).
- Internally generated synthetic text (Self-generated GPT-4o samples).
- Licensed corpora where explicit consent has been granted.
3. Third-Party Disclosures
We do not share, sell, rent, or trade your personal information or submission content with any third parties, including LLM providers (OpenAI, Anthropic, Google).
Exception: If you purchase a premium institutional license, payment processing is handled by Stripe, subject to their privacy policy. No submission text is ever sent to payment processors.
4. GDPR & CCPA Rights
Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the “Right to be Forgotten.”
However, because CrossPlag implements Privacy by Design through our Zero-Log policy, we hold no data to delete. If you request a data subject access request (DSAR), our response will confirm that no records of your submissions exist.