Privacy Policy

The text you paste or upload is processed entirely within your browser using JavaScript. It is never sent to our servers, never stored in a database, and never seen by us. This applies to:

• Text pasted directly into the editor
• Files uploaded or dragged into the tool (.txt, .docx, .pdf)
• The diff result itself

What AI Done includes optional AI actions in the editor (rephrase, simplify, free prompt). These features are disabled by default and require explicit configuration. When you use them, the text passage you have selected is transmitted to a third-party AI provider.

• BYOK mode (bring your own key): the selected text is sent directly from your browser to OpenAI or Anthropic. Your API key is stored only in sessionStorage — it disappears when the tab is closed and is never written to localStorage or transmitted to our servers.
• Only the selected passage is transmitted — never the entire document.
• Processing of that text by OpenAI or Anthropic is governed by their own privacy policies.

If you do not configure the AI features, no text is ever transmitted.

To protect the service against abuse, AI actions performed via our servers are limited to 10 requests per 24-hour period per IP address. This limit is enforced via Upstash Redis: your IP address is used as a counting key and is not associated with any other personal data. Counters expire automatically after 24 hours.

What AI Done does not use cookies for tracking or analytics. We use Vercel Analytics to collect anonymous, aggregated page view statistics (pages visited, country, device type). No personal data or document content is collected. Vercel Analytics does not use cookies and does not track individual users across sessions.

What AI Done is hosted on Vercel (edge network). Vercel may collect standard server access logs (IP address, user agent, request path, timestamp) for operational purposes. These logs are retained according to Vercel's own data retention policy and are not used by us for analytics or profiling.

If you are in the European Economic Area, you have the right to access, correct, or delete any personal data we hold about you. Because we collect almost no personal data, the only information that could be associated with you is standard server access logs retained by our hosting provider.

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the service after a policy update constitutes acceptance of the revised terms.