Privacy Policy | LeakFix

The short version

The free Leak Score needs only a page URL. No email, account, login or card.
We send the page's content to xAI, a US company, to generate scores and packs.
Scores and packs are stored on our server and open through private links.
We don't use cookies, analytics or ad trackers, and we don't sell personal information.

1.Who we are

LeakFix is operated by Phantom AI. In this policy, “LeakFix”, “we” and “us” mean that operator.

You can reach us about privacy at [email protected].

2.What we collect

LeakFix is a tool for businesses. Most of what it handles is business information about a public web page. Some of it can still identify a person, for example a sole trader's name on their own site, so we treat it with care.

The page you submit: The URL, plus the optional product name, price, audience and ad copy you choose to add. For a pack, also any optional product, checkout or competitor page URLs you add.
The page's content: We fetch the public page at that URL and extract its visible text and structure. We first try a standard request. If the page needs JavaScript to show its content, we load it in a headless browser.
Brand kits and workspaces: If you create a brand kit, we store the claims, banned words, voice notes and sample passages you enter. If you create a workspace, we store its name, the client names you add, and the links you save to it.
Your IP address: Used only to apply the free tool's hourly limit. It is held in server memory and not written to our stored files.
Results: Leak Scores, LeakFix Packs, rescores, score histories (including a short fingerprint of the page's headings, buttons and prices, used to spot changes) and order records that our service generates.
Technical logs: Server logs record the scored page's domain, timings, model usage (such as token counts) and error messages. They don't include your IP address or the text of the page. A hosting provider may also keep standard access logs, which usually include IP addresses.
Payment details: Paid checkout is not open yet. When it opens, payment will be taken by our payment provider. We will receive a payment reference and the details needed to fulfil your order. We will never collect or store card numbers on LeakFix.

3.What we don't collect

The free Leak Score does not ask for an email address, name, account, login or payment card. We don't build profiles of visitors, and we don't buy data about you from anyone else.

Please don't put personal or confidential information in the optional fields, brand kits or workspaces. They are meant for product and brand details, not customer data.

4.How we use information

To generate the Leak Score, LeakFix Pack or rescore you asked for.
To deliver your results through a private link, and to let you open them again.
To apply rate limits and keep the free tool available and affordable.
To show a recent score again when the same page is scored within six hours, instead of running it twice.
To fix problems, prevent abuse and improve the quality of the service.
To handle orders, re-runs and refunds once paid checkout is open.
To meet our legal obligations.

We don't use your information for advertising, and we don't send marketing email.

6.Where information is processed

xAI is based in the United States, so page content and optional fields are processed there. Our hosting and payment providers may also store or process data in other countries, including the United States.

By using LeakFix you understand that your information may be handled outside the country you live in. We choose established providers and send them only what the service needs.

7.Storage and retention

Leak Scores, LeakFix Packs, rescores and order records are stored as files on our server. They stay there while the service needs them, so your links keep working. We don't currently delete them on a fixed schedule.

Brand kits, workspaces and score histories are stored the same way, and only open through their own private links. A pack stores a copy of the brand kit rules it used, so editing a kit later doesn't change a delivered pack.

Recent scores are also kept in memory for up to six hours so a repeat request can be answered quickly. This applies only to scores run with a URL alone. Scores that include optional details, ad copy or a brand kit are not reused. Score histories are never shared between people: a history only contains scores run by whoever holds its link. Because results for a plain URL are reused, someone else who scores the same public page within six hours may see the same result.

The IP addresses used for rate limits are held in memory only and are cleared when the server restarts.

You can ask us to delete a score or pack at any time. See Your rights.

8.Private links

Your results open through links that contain a long random code. A pack's link looks like /p/…/…, an order's like /o/…/…, and a score's like /score/…. Score histories (/h/…/…), brand kits (/b/…/…), workspaces (/w/…/…) and read-only review links (/r/…/…) work the same way. The codes can't practically be guessed, and we don't list or index these pages.

A review link shows a pack's content read-only. It doesn't show the order, the workspace, the brand kit or the score history, and the pack's owner can revoke it at any time.

The link is the key. Anyone who has it can open that score, pack or order, so share it only with people you trust. We don't send packs by email yet, so please save your link somewhere safe. If a link has been shared by mistake, contact us and we can remove that pack.

9.Cookies and local storage

LeakFix doesn't set cookies, and it doesn't use analytics tools or advertising pixels. Our pages load no third-party scripts.

When you run a free score, your browser keeps the private link to that page's score history in its own local storage, so your next score of the same page can be added to it. It stays on your device, and you can clear it in your browser settings at any time.

When paid checkout opens, our payment provider's checkout pages may use their own cookies. Those are covered by the provider's policy.

10.Security

We take reasonable steps to protect the information we hold. Private links use long random codes and are checked on the server. Our page fetcher refuses private and internal network addresses. Server logs leave out page text and IP addresses, and we never handle card numbers.

No online service is perfectly secure. If we become aware of a data breach that is likely to cause serious harm, we will act on it and notify affected people where the law requires.

11.Your rights

You can ask to access the personal information we hold about you, to correct it, or to delete a score or pack. Please email [email protected] and include the private link or the page URL involved, so we can find it. We don't hold accounts, so the link is usually the only way we can tell which record is yours.

We aim to respond within 30 days. We may need to confirm that a request is genuine before acting on it. If we can't do what you ask, we'll explain why.

12.Complaints

If you have a concern about how we've handled your information, please email [email protected] first. We'll look into it and reply within 30 days.

If you're not satisfied with our response, you may also be able to contact a privacy regulator in your country.

13.Children

LeakFix is a tool for businesses. It is not directed at children, and we don't knowingly collect information from anyone under 18.

14.Changes to this policy

We'll update this policy when the service changes, for example when paid checkout or email delivery opens. The date at the top shows the latest version. If a change materially affects information we already hold, we'll make that clear on this page.

15.Contact

Phantom AI
[email protected]