Privacy policy
Last updated 8 September 2026
Redaxa is operated by Aurelio Avila, an individual based in Italy ("we", "us"). This page explains what we collect, why, and how you can control it. If anything here is unclear, email aurelio_11@outlook.it.
The short version
The text you paste into the scanner is used only to compute the result you see. It is never written to a database, a log file, an analytics tool, or a backup. We collect account and billing details needed to run a subscription (email, optional first name and billing status), plus the anonymous website action totals described below. We do not use advertising trackers or sell this data. Older accounts may retain profile details supplied before this change.
What we collect
| Data | Why |
|---|---|
| Email and optional first name (older accounts may retain previously supplied profile information) | Create and secure your account (via Supabase Auth) |
| Prompt text you scan — which may contain personally identifiable information (names, email addresses, phone numbers, physical addresses), financial and payment information (card numbers, IBANs, crypto wallet addresses), and authentication information (passwords, API keys, tokens, private keys) | Sent over an encrypted connection to compute the scan result, then discarded — never stored, logged, or used for any other purpose |
| Subscription status, Stripe customer ID | Billing. We never see or store your card number — Stripe collects that directly |
| Local scan history (timestamps and counts by category) | Stored only in your own browser’s local storage to show “Recent checks.” Prompt text and detected values are not retained in this history. Older local text previews are removed when this version reads the history; account activity metadata is described separately below |
| Session tokens | Keep you signed in (httpOnly cookies on the web app; a locally-stored token on the desktop app) |
| Team invite tokens | If you're on a Business plan, link-based invites so you can add teammates. We don't collect a teammate's email before they join |
Sensitive data the scanner may process
Redaxa's whole purpose is to catch sensitive content before it leaves your browser, so the text you scan can legitimately contain any of the following:
- Personally identifiable information — names, email addresses, phone numbers, physical addresses.
- Financial and payment information — credit/debit card numbers, IBANs and bank account numbers, cryptocurrency wallet addresses.
- Authentication information — passwords, API keys, JWTs, private keys, security-question answers.
This content is processed only to detect and flag it to you. It is transmitted over an encrypted connection, used solely to compute the scan result shown in your browser, and is never written to a database, a log file, an analytics tool, or a backup — on the web app, the browser extension, or the desktop app.
Browser extension
The Redaxa browser extension reads the text box of the AI chat site you're on (ChatGPT, Claude, Gemini, Copilot, Perplexity) only when you click "Check", to send it for scanning as described above. It does not read any other page content, does not run on any other site, and does not track your browsing. Your sign-in tokens are stored in the extension's private local storage, inaccessible to the web pages it runs on.
What we don't do
- We don't run analytics, ad pixels, or third-party trackers on this site.
- We don't sell or rent your data to anyone.
- We don't use your prompt content to train any model or for any purpose beyond showing you the scan result.
Who we share data with
Only the infrastructure providers required to run the service, each acting as a processor on our behalf:
- Supabase — authentication and account database (EU region).
- Stripe — payment processing. Card details are collected and stored by Stripe directly; we never handle them.
- Vercel — application hosting.
We do not share your data with advertisers, data brokers, or any other third party.
How long we keep it
Account data is kept while your account is active. Prompt text is never stored in the first place — there's nothing to retain or delete. To delete your account and associated billing/account data, email aurelio_11@outlook.it; we'll confirm once it's done.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. Contact aurelio_11@outlook.it to exercise any of these. If you're in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.
Age
Redaxa is not directed at children. You must be at least 16 years old, or the age of digital consent in your country if higher, to create an account.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page and, where required, notify you by email.
Website measurement
We count website visits and predefined actions as daily totals. The measurement database stores only day, product, action and count: no prompt text, detected values, email addresses, account identifiers or IP addresses. Requests go to our Cloudflare service at redexa.getcertsprint.com. No tracking cookies or persistent visitor identifiers are set. Do Not Track and Global Privacy Control are respected. Counts are not unique users. Hosting providers process network information to deliver requests.