What AI Done

Privacy Policy

Last updated: April 17, 2026

What AI Done is designed around one core principle: your documents stay on your device. This page explains what data is and isn't collected when you use the service.

What we do not collect

The text you paste or upload is processed entirely within your browser using JavaScript. It is never sent to our servers, never stored in a database, and never seen by us. This applies to:

  • Text pasted directly into the editor
  • Files uploaded or dragged into the tool (.txt, .docx, .pdf)
  • The diff result itself

AI analysis (optional feature)

When you click Analyze with AI, a compact representation of the diff is sent to our server and forwarded to the Anthropic API (Claude). This representation contains:

  • Snippets of added and deleted text, formatted as [[ADD: …]] / [[DEL: …]]
  • Basic statistics (number of additions, deletions, moved paragraphs)

Your full original document is never transmitted. We do not log the diff content on our servers. Anthropic's data handling is governed by their own privacy policy.

AI analysis is rate-limited to 3 free uses per day per IP address. Your IP address is stored temporarily in Upstash Redis (a cloud key-value store) solely to enforce this limit. It is not linked to your identity or shared with third parties.

Cookies and tracking

What AI Done does not use cookies for tracking or analytics. If you use the AI analysis feature, a server-side counter is associated with your IP address in Redis with a 24-hour expiration.

If advertising (Google AdSense) is enabled on the site, AdSense may set cookies for ad personalization. A consent banner will be displayed before AdSense is loaded, in compliance with GDPR and ePrivacy regulations. You can decline ad personalization without affecting access to the tool.

Infrastructure

What AI Done is hosted on Vercel (edge network). Vercel may collect standard server access logs (IP address, user agent, request path, timestamp) for operational purposes. These logs are retained according to Vercel's own data retention policy and are not used by us for analytics or profiling.

Your rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, or delete any personal data we hold about you. Because we collect almost no personal data, the only information that could be associated with you is your IP address in the Redis rate-limit store (TTL: 24 hours).

For any privacy questions or requests, contact us at: privacy@whataidone.com

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the service after a policy update constitutes acceptance of the revised terms.