Privacy Policy

Effective October 7, 2026 · Version 2026-10-07.1

Who is responsible

Endo Powersports LLC operates the hosted GPT Cloak service. Contact sales@endopowersports.com for privacy questions, requests or rights complaints. This policy covers our hosted service, rather than another operator's installation or an external website you choose to visit. If you contact us, we process your message and contact information to respond and address the issue. Avoid sending unnecessary sensitive information.

Text processing and service providers

Checking or humanizing sends your text, selected options and protected keywords to the GPT Cloak server. The public hosted service runs on Fly.io and uses Anthropic's Claude API for rewriting, meaning checks and the model's AI-writing estimate. The server processes inputs, generated results and reports in memory; the application does not save their contents in a server database or intentionally include them in application logs. This does not mean that service providers have no access to, or retention of, your data.

Anthropic receives the content needed for those requests. Its published API policy generally provides for deletion of inputs and outputs within 30 days, with exceptions including safety enforcement, legal requirements and separately agreed retention. GPT Cloak has not established a zero-data-retention agreement. Read Anthropic's retention policy and privacy policy before submitting sensitive material.

The operator can enable external detector APIs. When enabled, checking can send text to those providers; the Setup page shows which are configured and result reports show which checks ran. No external detector API is configured for the public service as of this policy date. Turnitin is not integrated. For a separately operated local installation, Ollama requests go to that installation's configured model server; they stay on your machine only if you also run that server locally.

The free Scribbr option copies a selected section to your clipboard and opens its website. GPT Cloak does not send text there automatically, receive its results, or count its manual check toward the verification badge. Pasting into Scribbr submits text to Scribbr under its own policies.

Browser storage and your controls

Your draft is saved automatically in this browser by default. Turn off “Keep my draft in this browser” in the editor's Options to remove the saved draft and stop draft saving. Completed checks and edits can store your input, output, options and reports in browser history, which holds up to 200 entries. Preferences are also stored locally. These records are not synchronized to an account or server history database.

Delete individual runs or clear all history on the History page. Clear this site's browser data to remove its history, draft and preferences together. Turning off draft saving does not delete existing history. Exports create files you control; deleting browser history does not delete exported files or copies processed by a provider. Rechecking or rewriting a restored entry sends its text through the service again. Anyone with access to your browser profile may be able to read saved text.

The editor also stores the agreement version and acknowledgement timestamp in your browser and includes that acknowledgement in check/rewrite requests. It is not an account or verified identity/age record. Uncheck the agreement to remove the saved acknowledgement and stop further submissions. Stored history and preferences otherwise persist until deleted, evicted by your browser, or replaced under the history cap.

Technical information, logs and spending records

Hosting and networking providers process technical information such as your IP address and request metadata to deliver and protect the service. GPT Cloak uses the trusted hosting-provided IP address for in-memory rate protection over a ten-minute request window. Entries are removed on expiry cleanup, replacement or server restart; the window is not a promise that every entry is erased exactly ten minutes later. Application failure logs contain an operation name, request identifier and error type, rather than submitted text or provider response bodies. Provider infrastructure may have its own operational logs and retention. See Fly.io's privacy statement.

A persistent monthly AI-spending ledger stores month and cost counters to enforce the service budget. It does not contain submitted text, your browser history, or a per-user spending profile.

Advertising, cookies and data sales

GPT Cloak currently has no user accounts, advertising, analytics trackers or application-set tracking cookies. It uses browser local storage for the features described above. The operator does not sell submitted text or use it for targeted advertising. Sharing necessary content with AI providers to fulfill your request is different from selling data; that provider processing is described above.

Before submitting text

Only submit material you are authorized to process through the listed providers. Avoid passwords, financial account details, private health records and confidential or sensitive personal information. Transport uses HTTPS, but no system can promise absolute security. Browser deletion does not recall requests already sent to a provider. Also review the Terms of Use.

Privacy requests and applicable rights

Email sales@endopowersports.com with the action requested and enough detail to identify the issue. We may need reasonable identity verification when responding about personal information. Depending on the applicable law and circumstances, you may have rights of access, correction, deletion, portability, restriction, objection or appeal, or the right to complain to a relevant privacy regulator. We handle requests and any applicable appeals within the periods required by law. Contact us at the same address to appeal a response where that right applies. Browser-local history is not synchronized to a server copy we can retrieve; use the History page or browser site-data controls for it.

Information may need to be preserved or disclosed to meet lawful requirements, protect security or address a legitimate rights complaint. This does not authorize selling submitted writing or unrelated advertising. Provider infrastructure logs and support correspondence have separate retention from writing processed in memory. Correspondence is retained while addressing the matter and as necessary for applicable legal obligations.

International processing and children

The application server currently runs in the United States. Providers may process information in additional locations according to their terms; your local laws may differ. We do not promise processing exclusively in your country. The hosted editing service is intended for adults aged 18 or older and is not marketed to children. Contact us if you believe a child submitted personal information so we can assess appropriate action.

Changes to this policy

We publish dated versions and surface material changes to users. New providers, accounts, analytics, advertising or paid features require updated disclosures and any permissions required by law before those changes are introduced. Editing this policy alone does not authorize materially different use of previously collected information.