Privacy Policy

1. Introduction & Scope

Welcome to HumanizeBox (“HumanizeBox”, “we”, “us”, or “our”). We provide a sophisticated suite of multi-modal artificial intelligence humanization, evasion benchmarking, and AI detection technologies designed for writers, software engineers, content creators, educators, and enterprise application developers. Our platform encompasses tools including the AI Text Humanizer, AI Humanizer Detector, AI Code Humanizer, AI Image Humanizer, and programmatic access through the AI Humanizer API.

This comprehensive Privacy Policy document outlines our policies, technical architectures, and administrative procedures regarding the collection, transmission, processing, disclosure, and safeguarding of information when you navigate or engage with our services, domain (including subdomains), browser extensions, and API endpoints.

At HumanizeBox, data protection is treated not as a secondary legal obligation, but as an architectural cornerstone. By interacting with any part of our platform, you acknowledge the terms established in this Privacy Policy. If you do not consent to these practices, your sole remedy is to cease using our web interfaces, developer toolkits, and programmatic services.

2. Zero Data Retention Policy for User Inputs

The most sacred promise we extend to our community is our Zero Data Retention Architecture for all user-submitted payloads. Unlike conventional SaaS providers that store, archive, or monetize customer submissions, HumanizeBox operates on an uncompromising in-memory, volatile-only processing lifecycle.

To provide absolute technical transparency, our processing pipeline enforces the following immutable constraints:

• Ephemeral Execution: When a user clicks “Humanize” or initiates an API call, the payload is ingested over an encrypted connection, decrypted inside an isolated in-memory worker sandbox, processed via our proprietary linguistic re-patterning engine, and immediately streamed back to the client interface.
• Instant Memory Overwrite: Upon completion of the HTTP response or WebSocket connection lifecycle, memory pointers allocated to your session are scrubbed and reclaimed by system garbage collection cycles. Zero residual artifacts remain on our clusters.
• No Artificial Intelligence Model Training: We explicitly warrant that no user submission is ever fed into algorithmic training datasets. Your proprietary software code, creative writing, research papers, and corporate communications remain 100% confidential and owned solely by you.
• Zero Commercial Data Brokering: We will never sell, lease, license, rent, or transfer your input data to third-party marketing brokers, surveillance syndicates, or ad networks under any commercial circumstance.

3. Information We Collect

Given our privacy-first philosophy, HumanizeBox purposefully minimizes data acquisition to the bare technological minimum required to operate a resilient, globally distributed internet utility.

A. What We DO NOT Collect

Under general usage of our web-based tools, you are not mandated to provide personally identifiable information (PII) such as your legal name, physical address, national identity numbers, biometric data, religious beliefs, or medical history. We do not maintain unauthenticated keystroke monitoring or background screen telemetry.

B. Automatically Collected Technical Diagnostics (Web Server Log Files)

Consistent with standard website operating procedures worldwide, HumanizeBox collects certain technical diagnostic data stored in standard web server log files. This routine telemetry helps us maintain infrastructure stability, thwart malicious automated attacks, and diagnose localized network latencies:

• Internet Protocol (IP) Addresses: Truncated or anonymized at edge ingress nodes to obscure geographical specificity, utilized for localized rate-limiting, prevention of malicious DDoS (Distributed Denial of Service) incursions, and automated bot mitigation.
• Browser User-Agent & Environment: Information concerning the user’s web browser engine (e.g., Chrome, Safari, Firefox), device classification (desktop, mobile, tablet), and operating system (e.g., macOS, Windows, Linux, Android, iOS) used to render responsive viewport layouts properly.
• Time Stamps & Referring URLs: Precise dates and universal coordinated time (UTC) timestamps of page requests, referring exit pages, and HTTP response codes (e.g., 200 OK, 404 Not Found, 503 Maintenance).
• Network Performance Telemetry: Connection round-trip times (RTT), bandwidth payloads, and edge CDN cache hits/misses, all strictly stored in aggregated formats detached from personal user identities.

4. Cookies & Third-Party Advertising (Google AdSense)

To maintain our powerful computing infrastructure and provide our state-of-the-art AI Humanizer tools at zero or subsidized cost to students, creators, and developers worldwide, HumanizeBox partners with trusted third-party advertising vendors, prominently including Google AdSense.

A. Understanding Cookies & Web Beacons

A cookie is a small alphanumeric text file placed on your device by a web server. Web beacons (also known as clear GIFs or pixel tags) are minuscule graphic tokens embedded into web pages that assist in recording anonymous browsing sessions. Third-party advertising networks use these technologies to gauge advertisement impressions, optimize campaign effectiveness, and deliver personalized commercial messages aligned with your inferred interests.

B. Cookie Classification Table

C. Opt-Out Instructions & Consumer Ad Controls

We firmly champion consumer autonomy over personal data. You have the unconditional right to opt out of personalized digital advertising at any time through multiple certified mechanisms:

• Google Ads Personalization Opt-Out: You may manage or opt out of personalized advertisements served by Google by visiting the official Google Ads Settings interface at https://adssettings.google.com.
• Digital Advertising Alliance (DAA) Consumer Choice: To opt out of third-party vendor interest-based advertising across hundreds of participating networks, navigate to the DAA Consumer Choice portal at https://www.aboutads.info/choices/.
• Network Advertising Initiative (NAI) Opt-Out: You can also utilize the NAI centralized opt-out tool available at https://optout.networkadvertising.org/.
• European Interactive Digital Advertising Alliance (EDAA): Visitors located within the European Economic Area may exercise targeted advertising preferences via https://www.youronlinechoices.eu/.
• Browser-Level Cookie Management: Every modern web browser (Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge, and Brave) grants you the capability to block third-party cookies, clear existing cookies, or browse in private/incognito mode. Please review your browser’s “Privacy & Security” preferences panel to tailor these settings to your preference.

5. Analytics & Performance Tracking

To maintain the lightning-fast transformation speed and multi-regional availability of HumanizeBox, we utilize privacy-centric, cookieless, and aggregated telemetry frameworks.

These utilities compute statistical indicators including average page render duration, CDN cache hit percentages, aggregate daily visitor counts, and regional bandwidth distribution. Crucially, analytical events are entirely detached from user-submitted text and code: we never correlate diagnostic traffic metrics with the substance, length, or topic of the content you submit for humanization or detection.

IP addresses routed through our analytics pipelines are cryptographically hashed or masked with a one-way salt prior to persistent aggregation, preventing individual user re-identification.

6. GDPR & CCPA Privacy Rights

Regardless of your geographical residence, HumanizeBox respects fundamental privacy rights enacted under the European Union General Data Protection Regulation (GDPR), the United Kingdom Data Protection Act, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

A. European Union / United Kingdom GDPR Rights

If you reside within the European Economic Area (EEA), the United Kingdom, or Switzerland, your statutory rights under Chapter III of the GDPR include:

• Right of Access (Article 15 GDPR): The right to obtain confirmation as to whether personal data concerning you is being processed, and to request a machine-readable copy of any such records.
• Right to Rectification (Article 16 GDPR): The right to demand correction of inaccurate or incomplete personal records held by us.
• Right to Erasure (“Right to be Forgotten” - Article 17 GDPR): The right to request the permanent deletion of personal records where retention is no longer legally justified. (Note: Because HumanizeBox maintains zero input retention, user submissions are already destroyed immediately).
• Right to Restriction of Processing (Article 18 GDPR): The right to restrict the scope of data processing under contested accuracy or contested legal basis conditions.
• Right to Data Portability (Article 20 GDPR): The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21 GDPR): The right to object at any time to processing based on legitimate interests or direct marketing profiling.
• Right to Lodge a Complaint: You possess the unencumbered right to lodge a formal complaint with your local European Data Protection Supervisory Authority.

B. California Consumer Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 (Cal. Civ. Code § 1798.100 et seq.) and the CPRA grant you specific statutory protections:

• Notice at Collection: We disclose that over the preceding 12 months, HumanizeBox has collected only general internet or electronic network activity identifiers (such as anonymized IP fragments and standard server request headers) strictly for diagnostic, security, and advertising cookie deployment.
• Do Not Sell or Share Personal Information: We affirmatively state that HumanizeBox does not sell personal information to data brokers or commercial resellers. We do not participate in the monetary exchange of consumer personal data.
• Right to Know & Delete: You have the right to request disclosure of the specific pieces of personal information collected about you, as well as the deletion of that information.
• Right to Non-Discrimination: HumanizeBox will never deny you service, charge differential pricing, or deliver degraded feature quality because you exercised any privacy rights under California law.
• California “Shine the Light” Law: Under California Civil Code Section 1798.83, California residents may request once per year information regarding our disclosures (if any) of personal information to third parties for direct marketing. HumanizeBox does not make such disclosures.

7. Children's Privacy Information (COPPA)

Safeguarding the privacy of young children is of paramount ethical and legal concern. HumanizeBox rigorously adheres to the United States Children’s Online Privacy Protection Act (COPPA), as well as corresponding global standards under Article 8 of the GDPR.

We do not knowingly solicit, request, or collect personally identifiable information from children under 13 years of age. In the event that our compliance team becomes aware that personal data from an underage user has inadvertently reached our web servers without verified parental consent, we will promptly execute immediate administrative deletion protocols to permanently expunge such records from all active logs and caching layers.

Parents, legal guardians, or educators who suspect that a minor under 13 has provided personal information to HumanizeBox are urged to contact us immediately at support@humanizebox.com with the subject header “COPPA Child Record Invalidation”.

8. Contact Information & Data Protection Officer

HumanizeBox maintains a designated Data Protection Office and Security Operations Team dedicated to resolving privacy inquiries, responding to GDPR/CCPA verifications, and addressing technical disclosures.

If you have any questions, comments, opt-out requests, or legal formal inquiries regarding this Privacy Policy, please reach out directly to our privacy desk:

• Official Privacy Inquiries: support@humanizebox.com
• Data Protection Officer (DPO): Attn: Legal & Privacy Compliance Division, HumanizeBox
• Mailing Directive: HumanizeBox Global Operations, Digital Compliance Center
• Response Service Level Agreement (SLA): We formally acknowledge all privacy and regulatory inquiries within 48 business hours, and provide complete, verified resolutions within statutory timeframes (30 calendar days for GDPR and CCPA requests).