Privacy Policy

This policy explains what ToxicRadar collects and how we use it. By using the Service you consent to the practices described here. We aim to collect as little as possible.

Your chat — analyzed once, never stored. When you upload a WhatsApp export, we strip out media (photos, videos, voice notes and other audio) and process only the text. That text is held in memory just long enough to generate your report and is sent to our AI provider for that single analysis. We do not store your raw chat file or your messages — only the report it produces.

Your report — not your conversation. We store the generated report so you can revisit and share it from your unique link. We do not store the underlying conversation.

Your email. We store your email only to deliver and give you account-free access to your report, and — if you opt in — to send you occasional marketing. You can unsubscribe at any time.

Abuse prevention — no raw IP addresses.We never store your raw IP address. To rate-limit free usage and prevent abuse, we keep only a salted, one-way cryptographic hash of it, which cannot be turned back into your address. Our hosting and bot-protection providers may process your IP transiently for security, but we don’t retain it.

We keep analytics private. We record anonymous, aggregated usage events on our own servers to understand how the Service is used — with no analytics cookies and no third-party trackers (no Google Analytics, no ad pixels). We use only a small amount of functional browser storage, for example to remember your language and to show you your report.

To generate and deliver your report, to let you access it via your unique link, to contact you about your report, to operate and improve the Service, and to comply with the law.

We rely on trusted processors to run the Service, including Google (Gemini AI) to analyze chat text, Supabase to store reports and emails, Cloudflare (Turnstile) for bot protection, and Vercel for hosting. Your data is processed by these providers under their own terms and security practices. We do not sell your personal information.

Generated reports and emails are retained until you ask us to delete them or until they are no longer needed for the purposes above. You may request deletion at any time.

Depending on where you live, you may have rights to access, correct, or delete your data and to opt out of marketing emails. To exercise any right, email us at contact@denku.io.

We use reasonable technical measures to protect your data, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to children. We do not knowingly collect data from anyone under 18.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Questions or requests? Email contact@denku.io.