top of page

Authentyk Privacy Policy

Effective Date:  8 August 2026       Last Update:  8 August 2026

Who we are

Authentyk Inc ("Authentyk", "we", "us") provides AI-content trust-scoring tools — the Authentyk Scan web app and the Authentyk Scan Chrome extension — that estimate whether text, images, or video are AI-generated, and let you save and share a verification "Seal". Contact: info@authentyk.ai. Authentyk Inc., 1309 Coffeen Ave., Sheridan, WY, US, 82801.

What we collect

  • Account information — your email address, and any name you provide, when you create an account or sign in (via password or magic link).

  • Content you submit for scanning — the text, files, images, or video you choose to scan. In the browser extension this includes page text or a selected image/region only when you actively run a scan — the extension does not read or transmit page content in the background.

  • Scan and usage data — records of the scans you run, results, credit balances, purchases, and referrals, so we can provide the service and your account history.

  • Payment information — processed by our payment provider (Stripe). We do not store your full card details; we retain only limited billing metadata (e.g. plan, transaction records).

  • Technical data — IP address, device/browser information, authentication cookies/session tokens, and error diagnostics used to operate and secure the service.

How we use it

  • To run scans and return AI-likelihood results, provenance, and integrity checks.

  • To manage your account, credits, subscriptions, purchases, and referrals.

  • To secure the service, prevent abuse, and diagnose errors.

  • We do not use your submitted content to train our models.

Who we share it with

We share data only with service providers that help us operate, under contract. To return a DeepScan result, the content you scan may be sent to independent AI-detection providers for analysis:
 

  • AI detection (DeepScan): Originality.ai, GPTZero, Hive, Sightengine. Google (Gemini) is used separately to generate the plain-language explanation that accompanies a DeepScan result (it is the result explainer, not a detector).

  • AI detection (QuickScan): runs on Authentyk's own model and is not sent to any third party. 

  • Infrastructure: Hosting: Vercel, Database: Supabase, File storage: AWS S3, Email: Resend, [Error monitoring: Sentry, Payments: Stripe.


We do not sell your personal information, and we do not show third-party ads.

Data retention

We keep account and scan data for as long as your account is active, and delete or anonymize it within 30 days of account deletion, except where we must retain records for legal, tax, or fraud-prevention reasons. Uploaded files are automatically deleted within 7 days of processing.

Your rights

You can access, export, or delete your data from Settings → Privacy / Danger zone in the app, or by emailing info@authentyk.ai. Depending on whare region or country you  live (e.g. EEA/UK/California), you may have additional rights to access, correct, delete, or restrict processing; contact us to exercise them.

We use encryption in transit, access controls, and secret management to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you of material breaches as required by law.

Security

Authentyk is not intended for children under 16, and we do not knowingly collect their data.

Children

International transfers

We may process data in the United States, UK or the EU. Where required, we rely on appropriate safeguards for cross-border transfers.

Changes

We may update this policy; we'll post the new version here and update the "Last updated" date. Material changes will be communicated [e.g. by email or in-app notice].

Contact

Questions or requests: info@authentyk.ai.

bottom of page