Эта страница правил публикуется только на английском и упрощённом китайском. Язык интерфейса не меняет её смысл, и машинный перевод мы не публикуем.

Privacy Policy

Effective: 30 September 2026 · Last updated: 5 October 2026

This policy explains how AiUsedMyWork (aiusedmywork.org) collects, uses, stores and protects personal information, and the choices and rights you have. It describes what the platform actually does.

1. Who runs this site

• Platform: AiUsedMyWork
• Operator: AiUsedMyWork.org
• Contact: contact@aiusedmywork.org

Write to that address for privacy requests, corrections, reports or anything else about this site.

2. What we collect

2.1 Signing in.

• With email: your email address and a one-time code we send to it.
• With Google (“Continue with Google”): Google tells us your email address, that Google has verified it, and a unique identifier for your Google account. We ask Google only for your email address, not your name, photo, contacts, Drive or anything else, and we never see your Google password. Google’s sign-in token is used once to confirm the sign-in and is not kept.

2.2 Joining an Action. Your name, country, region and the kinds of work you make, and optionally a phone number and mailing address; together with your verified email address and the company Actions you joined.

2.3 Your record. After joining, a step-by-step form asks about your situation. Every question can be skipped. If you answer, we keep:

• one work: its title, roughly when it was published or made, where it can be found, a public link, and an ISBN, DOI or other number;
• your answers about it — whether you created it, whether anyone created it with you, whether you transferred the copyright, whether a publisher, employer or other company is involved (yes, no or not sure) — and, in the United States, whether it is registered with the Copyright Office and the registration number;
• the AI company and product, what happened (for example an AI output or a dataset match), roughly when, the name of a dataset or crawler, and a description in your own words;
• which materials you tell us you have saved yourself (for example a screenshot, the prompt, the AI response, a link, your original work);
• a file fingerprint, if you create one: a SHA-256 value and the file’s size, with the time we received them. The fingerprint is calculated by your own browser. The file itself, and its name, are never sent to us.

This is your own account of what happened. We record it as you gave it; we do not check it, we do not decide who owns a copyright, and we do not assess whether you have a legal claim.

2.4 Community. Posts and replies you publish, your random public nickname, and reports you send about posts.

2.5 Lawyer applications (lawyers only). Firm name, work email, firm website (optional), licensing jurisdiction, licence or registration number, your message and the Actions you are interested in. No identity documents are asked for.

2.6 Contributions. If you contribute through the Support page, Whop takes the payment on its own checkout page. We receive a payment record (a reference, the amount, the currency, the status and, if any, the Action it was for), not your card details. We do not send Whop your name or email address; Whop collects what it needs to take the payment under its own privacy policy.

2.7 Email. Your email choices for each Action, and delivery records (for example an address that bounced) so we stop sending to addresses that cannot receive mail.

2.8 Technical records. The cookies listed in section 7. For rate limiting we store a keyed hash of your IP address, email address or account identifier, never the value itself, and these records expire automatically. Our hosting and reverse proxy may record standard request information (such as IP address, time, requested page and browser type) for security and troubleshooting; these logs are kept only for a short period.

2.9 Analytics. Every page except the admin area, the pages where you join an Action and fill in your record, your account and notification pages and the unsubscribe page loads Google Analytics and Google Tag Manager, which tell Google about each page you view: the page, the time, how you arrived, and your browser, device, language and approximate location (which Google works out from your IP address). What else happens depends on your answer to the banner, which is passed to Google through its consent mode:

• If you accept, Google Analytics sets cookies holding a random identifier, so your visits can be linked across pages and over time.
• If you decline, or have not answered, no analytics cookies are set and nothing is read from your device for analytics. Google still receives a cookieless signal for each page, without a lasting identifier, which it uses to estimate total traffic.

We use this to count visits and see which pages are useful. We do not send Google your name, email address, account or registration details. Advertising signals stay off whatever you choose: ad storage, ad user data and ad personalisation are always “denied”.

What we do not collect

• We do not accept works, screenshots, contracts, logs or evidence files. There is no upload feature. You keep your originals; a file fingerprint is calculated on your device (2.3).
• We do not access your cloud storage and we do not open the links you enter. They are stored as text only.
• We do not ask what compensation you expect or whether you want a lawyer to contact you. We give no rating, score or opinion on your situation.
• We use no advertising or cross-site tracking scripts. Analytics cookies are set only if you accept them (2.9).

3. How we use your information

• Sign-in and security: to sign you in, keep your session secure, apply rate limits and prevent abuse.
• Counting each account once: your verified email address means one account counts once in each Action it joins, and makes duplicate and automated sign-ups harder. A verified email address is not an identity check.
• Public totals only: we show the total number of members of each company’s Action. We never show counts by country, language, work type, product or any other group, whether on a page or in hidden fields, APIs or page metadata.
• Updates you signed up for: to email you updates about the Actions you joined, as explained when you joined, and the service emails you need (sign-in codes, confirmations, account and security notices). Every update email has an unsubscribe link.
• Your record: to keep the record you gave us, show it to you and let you add to it or change it; and to be able to contact you about it if something relevant happens, such as a related lawsuit, settlement, compensation programme or other important development. That is why we ask, optionally, for a phone number and mailing address.
• Community: to show your posts under your nickname and to handle reports.
• Lawyer applications: to check practising details against public licensing records before a badge is shown.
• Understanding visits: to count visits and see which pages help people (2.9); if you accepted analytics cookies, also to recognise return visits.

We do not use your personal information for advertising, we do not sell it, and we do not put private registration details into AI tools.

4. Who can see what

• Private by default: your name, email, phone, address, registration description and everything in your record (2.3). Only you, and a platform administrator where there is a specific reason, can see them. They are never shown to other members and never given to a lawyer without your clear permission.
• Public: your random nickname and what you choose to post. A nickname is a pseudonym, not anonymity: what you write in a post can still identify you.
• Lawyers: no access to the member database and no way to export a list. Joining an Action does not hand your details to any firm. If a firm later wants to take a matter forward, the platform sends an invitation and you decide whether to register with them yourself.
• No sale or hand-over: we do not sell, rent or hand over members’ identities, email addresses or lists to lawyers, AI companies, advertisers or anyone else.
• Service providers: Amazon Web Services (hosting, database, backup storage and email delivery); Google (sign-in, only if you sign in with Google; Google Analytics and Google Tag Manager, as described in 2.9); Whop (only if you contribute). They process data only to provide those services.
• Legal obligations: we disclose information only where a valid legal obligation requires it, limited to what is required, and where the law allows we tell the people affected.

5. Where data is stored, security and international transfers

• Data is processed and stored in Singapore (AWS ap-southeast-1). If you use the platform from another country, your information is transferred to Singapore.
• Google processes the analytics data described in 2.9 on its own servers, which may be outside your country, including in the United States.
• Connections use HTTPS (TLS). Access to personal data is limited to the people who need it. Session tokens and rate-limit keys are stored as digests, and backups are encrypted.
• No system is perfectly secure. If a breach affects your personal information, we will act to contain it and notify you and the authorities where the law requires.

6. How long we keep it

• Unfinished sign-in codes and drafts are cleared within 24 hours.
• Your account, registration and record are kept until you delete your account, ask for deletion, or the need that justified keeping them ends. Leaving an Action ends your membership and removes you from its count; what you registered for it stays private in your account, so it is there if you join again, and is deleted with your account.
• Deletion requests are handled within 30 days. Encrypted backups rotate on a 30-day cycle, and deletions and unsubscribes are re-applied after any restore.
• Payment records hold no name or email address and are kept as long as accounting needs.
• Analytics data is kept by Google for the retention period set in our Google Analytics property. Your analytics choice is remembered for 6 months, then you are asked again.

These are the retention rules this platform actually applies. They are not a statement of any jurisdiction’s statutory periods.

7. Cookies

We use cookies the site needs to work, cookies that remember a choice you made, and — only if you accept — analytics cookies:

• a sign-in session cookie (up to 14 days; removed when you sign out);
• a security token that protects forms (12 hours);
• a short-lived cookie while you sign in with Google (10 minutes);
• your language choice (1 year; only set when you choose a language);
• your analytics choice (awm_consent, 6 months; set when you accept or decline);
• only if you accept analytics: Google Analytics cookies (_ga and _ga_…, up to 2 years), set by Google Analytics on this site.

There are no advertising cookies. You can change your analytics choice at any time with “Cookie settings” at the bottom of the page; declining removes the Google Analytics cookies from this site, and cookieless signals continue as described in 2.9.

8. Your rights and choices

Depending on where you live, data-protection laws such as the EU or UK GDPR or the California CCPA may give you rights over your personal information. We offer the following to everyone, wherever you live:

• Access: your account page shows the details we hold about you, including your record. For a copy, email contact@aiusedmywork.org.
• Correction: change your personal details and your record from your account page.
• Leave: leave any Action at any time. You stop being counted and that Action’s email stops.
• Email: turn updates off for each Action on your account page, or use the unsubscribe link in any update email. Sign-in codes you ask for are still sent.
• Deletion: delete your account from your account page. This removes your name, country, region, phone, mailing address, registration descriptions and records, ends every membership (so you leave every count) and stops all email. We keep only a keyed digest of the deleted address, not the address, so a restored backup can have the deletion re-applied. Posts you published stay under your random nickname unless you remove them first.
• Analytics: accept or decline in the banner, and change your mind at any time with “Cookie settings” at the bottom of the page.
• Objection and complaints: write to us if you object to any use of your information. You can also complain to the data protection authority where you live.

Before acting on a request sent by email, we may ask you to confirm that you control the account’s email address. We do not sell or share personal information for cross-context behavioural advertising.

9. Children

The platform is meant for creators aged 16 and over. If you believe a child under 16 has registered, contact us and we will delete the account.

10. Changes and contact

We may update this policy as the platform changes. The current version is always on this page with its effective date. For any question about privacy or your data, email contact@aiusedmywork.org.