CleverFiles Inc. – Privacy Policy

Version 2.0 · Effective September 15, 2026

This Privacy Policy explains what personal information CleverFiles, Inc. collects when you use our online text tools, why we use it, who we share it with, how long we keep it, and what rights you have. It applies to our website and to the four tools listed in Section 2.

Please read it together with our Terms of Service. If anything here is unclear, or if you want to exercise any of your rights, write to us using the contact details in Section 1.

Table of Contents

Who we are and how to contact us
Who can use the service, and what this policy covers
What information we collect
Why we use your information, and our legal basis
How we handle the text you submit
Who we share information with, and international transfers
Marketing email
How long we keep information
Cookies
Security
Automated processing and the Clever AI Detector
Your rights under the GDPR and UK GDPR
Your rights under US state privacy laws
Changes to this Privacy Policy

1. Who we are and how to contact us

CleverFiles, Inc. (“CleverFiles”, “we”, “us”) is the controller of the personal information described in this Privacy Policy.

CleverFiles, Inc.
122 Delaware St #E-2, New Castle, DE 19720, USA
Email: support@cleverhumanizer.ai

Use that address for any question about this Privacy Policy, and for any request relating to your personal information, including the rights described in Sections 12 and 13.

2. Who can use the service, and what this policy covers

This Privacy Policy covers our website and the following tools (together, the “Service”):

Clever AI Humanizer — a tool that rewrites text you submit to improve its tone, clarity, readability, rhythm and voice;
Clever AI Detector — a tool that produces a statistical estimate of the likelihood that a text was generated by an AI system;
Clever AI Paraphraser — a tool that restates text you submit in different words while seeking to preserve its meaning;
Grammar Checker — a tool that identifies and proposes corrections to spelling, grammar, punctuation and usage in text you submit.

The Service is for adults. You must be at least 18 years old to create an account or use the tools. We do not knowingly collect personal information from anyone under 18, and if we learn that we have, we delete it.

The Service is not designed for special categories of personal data (for example health, biometric, political or religious information) or for other confidential material. Please do not submit text containing information of that kind.

3. What information we collect

Account information. When you register we collect your email address and store your password in hashed form — we do not keep your password itself. We also record whether you have opted in to marketing email, and the fact that you accepted the Terms of Service.

Text you submit, and the output. The text you enter into a tool and the result the tool returns.

Technical and usage information. Collected automatically when you use the Service: your IP address, browser and device type, the identification string your browser sends (the User-Agent), the date and time of requests, which pages and tools you used, error and diagnostic logs, and a set of technical characteristics of your browser and device (a “browser fingerprint”), which we use only to detect abuse and to apply rate limits.

Using the tools without an account. You can use the tools as a guest, without registering. When you do, we store the first 100 characters of the text you submit, together with the technical information described above. We keep that record for two days, and use it only to give support and to find and fix faults. We do not store the rest of your text, and we do not store the result.

Messages you send us. If you contact us by email, we keep your message and our reply.

Payment information. The tools are currently free. When paid plans launch, payments will be handled by a third-party payment processor. We will receive limited transaction information, such as the amount, date and status of a payment and the billing contact details. Full payment card details will be handled by the payment processor and will not be stored by us.

4. Why we use your information, and our legal basis

The table below sets out what we use personal information for and, for users in the European Economic Area, the legal basis under Article 6(1) of the General Data Protection Regulation (“GDPR”). The purposes are the same for all users; the legal-basis column matters only where the GDPR applies.

Purpose	Legal basis
Creating and running your account and allowing you to sign in	Performance of a contract with you — Art. 6(1)(b)
Running the tools on the text you submit and returning the result to you	Performance of a contract with you — Art. 6(1)(b)
Sending service and account email (registration confirmation, security notices, changes to our documents, replies to your messages)	Performance of a contract with you — Art. 6(1)(b)
Taking payment and billing you, once paid plans launch	Performance of a contract with you — Art. 6(1)(b)
Keeping the Service secure, and detecting and preventing abuse, fraud and misuse	Our legitimate interests in protecting the Service and its users — Art. 6(1)(f)
Debugging and fixing errors, quality checks, automated evaluation, and improving the Service (see Section 5)	Our legitimate interests in operating and improving a working service — Art. 6(1)(f)
Understanding how the site is used, through analytics cookies (see Section 9)	Your consent — Art. 6(1)(a). In the EEA, the EU and the UK we ask for it before any analytics cookie is set, and you can withdraw it at any time
Sending marketing email	Your consent — Art. 6(1)(a). You give it by a separate opt-in and can withdraw it at any time (see Section 7)
Keeping records we are required by law to keep, and responding to lawful requests from authorities	Compliance with a legal obligation — Art. 6(1)(c)

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights. You can object to that processing at any time (see Section 12).

5. How we handle the text you submit

To produce a result, the text you submit is sent to external AI and large language model (LLM) API providers, which process it on our behalf and return the output. This is how the tools work; it happens every time you use one.

We do not use your content to train AI models. Neither the text you submit nor the output is used to train or fine-tune any model, by us or by our providers.

We may use your content for testing. By testing we mean three things, and only these three:

debugging and fixing errors;
quality checks, in which our staff read samples of submitted text and the output produced from it;
automated evaluation.

We want to be plain about the second one: a member of our staff may read text you have submitted and the output produced from it. Access is limited to staff who need it for the purposes above, and they are bound by confidentiality obligations. If there is text you would not want another person to read, please do not submit it.

Text you submitted before 15 September 2026. We do not use text submitted before that date for any of the three purposes above. We use it only to produce the result you asked for, and we delete it on the schedule in Section 8.

Submitted text and output are kept for 30 days — see Section 8.

6. Who we share information with, and international transfers

We disclose personal information to the following categories of recipient, and only in order to develop, test and operate the Service:

AI/LLM API providers — the text you submit is sent to them for processing;
cloud hosting and infrastructure providers — they store and run the Service;
our email delivery provider — it sends service and, where you have opted in, marketing email;
our analytics provider — it receives technical and usage information so that we can understand how the site is used (see Section 9);
our payment processor — once paid plans launch, it processes payments.

These recipients act on our instructions under written contracts and may not use your personal information for their own purposes.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We may also disclose personal information where we are required to do so by law or by a valid legal request, where it is necessary to establish, exercise or defend legal claims, and to a purchaser or successor if our business or its assets are sold or transferred, in which case your personal information remains subject to the commitments made in this Privacy Policy.

International transfers. We host the Service in both the United States and the European Union, and our providers may process personal information in either. Personal information therefore leaves the European Economic Area and the United Kingdom. Where it does, we rely on the Standard Contractual Clauses adopted by the European Commission and, for transfers from the United Kingdom, on the UK Addendum to those clauses issued by the Information Commissioner. You can ask us for a copy using the contact details in Section 1.

7. Marketing email

We send marketing email — news about the Service, new features and offers — only to users who have asked for it.

At registration there is a separate checkbox for marketing email. It is not ticked by default, and leaving it unticked does not prevent you from registering or using the Service. We send marketing email only if you tick it.

You can withdraw your consent at any time, by using the unsubscribe link in any marketing email or by writing to us at the address in Section 1. Withdrawing consent does not affect the lawfulness of what we sent before.

Service and account email — registration and payment confirmations, security notices, and notices about changes to our documents — is not marketing. We send it for as long as you have an account, whether or not you opted in to marketing.

8. How long we keep information

Text you submit and the output: deleted 30 days after submission, or when your account is deleted, whichever happens first. You can also delete it yourself at any time in your account settings, either single entries or your whole history.
Account information: kept for as long as your account exists, and deleted when your account is deleted.
Guest records: the first 100 characters of text submitted without an account, and the technical information collected with it: kept for two days.
Technical and usage information: kept only for as long as we need it for security and debugging.
Messages you send us: kept for as long as we need them to deal with your query and any follow-up.
Records we are required by law to keep, such as payment and tax records once paid plans launch: kept for the period the applicable law requires.

If you do not accept the Terms of Service. You cannot log in to the Service unless you accept the Terms of Service. If you refuse them, your account is locked, and you may ask us to send a copy of your personal information to your registered email address. Your account and the information in it are deleted automatically 30 days after your refusal. If you have asked us for a copy, we will not delete the account until we have sent it.

After deletion, copies may remain for a short time in routine backups before those backups are overwritten.

Exception. We may keep submitted text, results and account records for longer than the periods above where we reasonably need to do so to investigate a suspected breach of our Terms of Service, to comply with a legal obligation, or to establish, exercise or defend legal claims. We use anything kept for that reason only for those purposes.

9. Cookies

We use two kinds of cookies.

Strictly necessary cookies — for example to keep you signed in, to keep your session secure, and to remember choices you make on the site. Cookies of this kind do not require your consent.
Analytics cookies — set by an analytics provider so that we can understand how the site is used, for example which pages and tools are visited and where errors occur. We use this only to operate and improve the Service.

If you are in the European Economic Area, the European Union or the United Kingdom, we ask for your consent before any analytics cookie is set, and you can withdraw that consent at any time through the cookie settings on the site. Withdrawing consent does not affect the lawfulness of what we did before.

Other technologies. We also read a set of technical characteristics of your browser and device, described in Section 3 as a browser fingerprint. It is not a cookie, but it works in a similar way. We use it only to detect abuse of the free tools and to apply rate limits. We do not use it for analytics or advertising, and we do not use it to build a profile of you. Because it is used only to keep the Service secure and available, we treat it in the same way as the strictly necessary cookies above. You can object to it under Section 12.

We do not use cookies for advertising, and we do not allow third parties to use cookies on our site to track you across other websites.

You can set your browser to block or delete cookies, but parts of the Service will not work if you block the strictly necessary ones.

10. Security

We take reasonable technical and organisational measures to protect personal information.

Encryption in transit and at rest — we use industry-standard encryption to protect personal information while it travels between your browser and the Service (for example TLS) and, where applicable, to protect stored data at rest.
Access control and authentication — access to personal information is limited to staff and providers who need it, and is controlled by authentication measures such as passwords, multi-factor authentication and role-based access permissions. Passwords are stored only in hashed form.
Monitoring, audits and incident response — we monitor our systems for vulnerabilities and use safeguards to detect and respond to suspicious activity. We may also carry out periodic audits and reviews of our security practices.
Staff training and confidentiality — our employees and contractors who may have access to personal information are under strict confidentiality obligations and receive training on data protection and security.

If a data breach happens. We will take appropriate steps to mitigate harm and, where required by law, notify affected users and the relevant authorities.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Automated processing and the Clever AI Detector

The Clever AI Detector produces an automated statistical estimate of the likelihood that a text was generated by an AI system. The estimate is a probability, not a finding of fact, and it can be wrong.

That estimate does not by itself produce legal effects concerning you or similarly significantly affect you, and we do not use it to make decisions about you, your account or your access to the Service. If you use a result to make a decision about someone else, that decision is yours, not ours.

We do not carry out profiling for advertising purposes.

12. Your rights under the GDPR and UK GDPR

If you are in the European Economic Area, the GDPR gives you the following rights in relation to your personal information. If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 give you the same rights, and references in this Section to the GDPR should be read as including the UK GDPR.

Access — to be told whether we process your personal information and to receive a copy of it;
Rectification — to have inaccurate information corrected and incomplete information completed;
Erasure — to have your personal information deleted, where one of the grounds in Article 17 applies;
Restriction — to have our processing restricted, where one of the grounds in Article 18 applies;
Portability — to receive the personal information you gave us in a structured, commonly used, machine-readable format, and to have it sent to another controller where that is technically feasible;
Objection — to object to processing based on our legitimate interests, on grounds relating to your particular situation. You may object to processing for direct marketing at any time, and we will stop;
Withdrawal of consent — to withdraw consent at any time where we rely on it, without affecting the lawfulness of processing before the withdrawal;
Complaint — to lodge a complaint with the supervisory authority in the EU Member State where you live, work, or where you believe an infringement occurred; if you are in the United Kingdom, with the Information Commissioner's Office (ICO), ico.org.uk.

How to exercise these rights. Write to us at the address in Section 1 and tell us what you want to do. We may ask you for information to confirm that the account is yours. We will respond within one month; if a request is complex we may extend that by up to two further months and will tell you if we do. There is no charge, unless a request is manifestly unfounded or excessive.

You can also delete your account at any time, which deletes your account information and any submitted text still held (see Section 8).

13. Your rights under US state privacy laws

If you live in California or in another US state with a comprehensive consumer privacy law in force, you have the following rights in relation to your personal information. Sections 3, 4 and 6 describe the categories of personal information we collect, where it comes from, why we use it, and the categories of recipient we disclose it to.

To know and access — to confirm whether we process your personal information, to learn what we collect and disclose, and to obtain a copy of it, including in a portable format;
To delete — to ask us to delete the personal information we hold about you;
To correct — to ask us to correct inaccurate personal information;
To opt out of the sale or sharing of personal information, of targeted advertising, and of profiling with legal or similarly significant effects — we do none of these things, so there is nothing to opt out of. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use automated processing to make decisions about you (see Section 11). Because we do not sell or share, we do not act on browser opt-out preference signals or Do Not Track signals;
To limit the use of sensitive personal information — we do not ask for sensitive personal information and do not use or disclose any for purposes beyond those permitted by law;
Not to be discriminated against — we will not deny you the Service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.

California “Shine the Light”. Section 1798.83 of the California Civil Code lets California residents ask us once a year for a list of the personal information we disclosed to third parties for those third parties’ own direct marketing purposes during the previous calendar year, and for the identity of those third parties. We do not disclose personal information to third parties for their own direct marketing purposes. To make a request, write to us at the address in Section 1.

How to submit a request. Write to us at the address in Section 1. We may ask for information to verify that the account is yours, and we will not use that information for anything else. An authorised agent may submit a request on your behalf where state law allows; we may ask for proof of their authority. We will respond within the time your state's law allows. If we decline your request, you may ask us to reconsider by replying to our response, and we will tell you the outcome.

14. Changes to this Privacy Policy

We may change this Privacy Policy. When we do, we will publish the new version with a new version number and effective date. If the changes are material, we will notify you by email or by a notice on the website at least 15 days before they take effect. Where we rely on your consent for something, we will ask for it again rather than assume it.

This version applies from its effective date onward. It governs information we collect on or after 15 September 2026. Information we collected before that date is handled under the policy that was in force when we collected it, until that information is deleted. Where this Policy gives you more rights or more protection than the earlier policy, the more protective rule applies to you straight away.

Your continued use of the Service after the effective date means the updated Privacy Policy applies to you.

Copyright © 2026 CleverFiles Inc. All rights reserved.
CleverFiles™, Clever AI Humanizer, Clever AI Detector, Clever AI Paraphraser and Grammar Checker, and all related product and service names, are trademarks of CleverFiles, Inc. All other marks are the property of their respective owners.