Humanpen vs Sonaopus

Pay-as-you-go one-time credit packs, USD, no subscription: 1,000 credits $19, 5,000 $79 (most popular), 10,000 $149, 20,000 $249; a once-per-account first purchase of the same four packs at $9.90 / $49 / $98 / $196; 100 free credits at signup; credits never expire and work in the app and the API. Consumption: 100 credits per 1,000 words rewritten by the humanizer, 5 credits per 1,000 words for citation-format correction. Verified on three surfaces that agree - the rendered /pricing page (four cards, first-purchase prices shown beside list prices), the site's own public endpoint /api/backend/v1/credits/packages?locale=en (eight items: four 'first_*' packs at the discounted cents values and four standard packs at 1900/7900/14900/24900 cents, currency USD, every provider 'waffo', default_provider 'waffo', first_purchase_available true, no recurring flag on any item), and the pricing page metadata ('1,000 credits for $19, or $9.90 on your first purchase'). The Terms state each purchase is a one-time charge and the only mention of a recurring plan is a future conditional ('Credits granted by a future membership plan would expire at the end of each period') in the pricing FAQ, so no subscription price exists to verify and none was recorded.

submitted via form by vendor; editorial entry written independently. Received through FormSubmit twice on 2026-10-23 21:35 UTC with a byte-identical payload (INBOX msgs 201 and 202 / All Mail 496 and 497) - one submission, not two; the timestamps carry minute resolution only. Submitted contact nitubag316@gmail.com differs from the support@humanpen.net the site publishes; 'HumanPen' had zero hits in the repo, the hold ledger or any mail folder and no prior outbound mail existed to either address. The site is a Next.js SPA, so much of it is client-rendered: /privacy, /terms, /contact, /affiliates and a dozen other guesses return the identical 56,457-byte app shell and are not the legal pages - the real ones are /legal/privacy and /legal/terms (both in the sitemap, both 200 when rendered) and both are dated 'Last updated: 7 September 2026'. Pricing was read from the rendered page AND from the site's own public packages endpoint; the pack cards do not exist in the served HTML at all, so a markup-only price sweep finds just the $19/$9.90 figures in the meta description and would have under-reported the ladder. Privacy policy contents verified by rendering: processors named as Creem and Waffo Pancake (merchant of record, card data never stored), an unnamed authentication provider, an unnamed cloud object-storage provider and unnamed third-party AI model providers; retention 7 days for uploaded documents and results, 30 days for account deletion, 7 years for payment records; no sale of personal data and no training use. Terms verified: user retains rights to input and output, 16+ eligibility, refunds of untouched purchases within 14 days, credits auto-returned on a failed job, acceptable-use clause that explicitly bars academic dishonesty, indemnification, liability capped at three months of payments, and a governing-law clause that names no jurisdiction ('the laws of the jurisdiction in which the HumanPen team operates'). Tracker finding verified from the served HTML and the live network, not from policy text: the root layout injects googletagmanager.com/gtag/js?id=AW-18511954133 and a Microsoft Ads UET loader for bat.bing.net/bat.js, both with next/script strategy 'lazyOnload'; loading /legal/privacy produced requests to googletagmanager.com, googleadservices pagead/viewthroughconversion/18511954133, google.com/rmkt/collect/18511954133 and bat.bing.com/action, and the page contains no cookie/consent UI element and no consent-mode call. Privacy section 10 says the only cookies are those 'necessary to sign you in and keep the Service working' and 'We do not use them to build advertising profiles', and section 5 names no Google or Microsoft processor. Operator identity: none. 'HumanPen' / 'the HumanPen team' is the only party named on any page; no company, individual, country, postal address or company number appears, and the About page explicitly declines to give a biography. Contact route verified before any reliance on it: SMTP RCPT TO against the domain's own Cloudflare MX (route1/route2.mx.cloudflare.net) returned 250 2.1.0 Ok for support@humanpen.net and 550 5.1.1 Address does not exist for a random local part, so the mailbox is live and the domain is not a catch-all. Domain: RDAP registration 2026-07-17T06:52:45Z, registrar Namecheap, NS elaine/rajeev.ns.cloudflare.com, Cloudflare Email Routing MX. No affiliate or partner page is public - /affiliates and /partners both render the sign-in screen - so no tracking URL exists and none was invented. Name checked: no famous research project, open-source repo or incumbent AI product trades as HumanPen; the product's own footprint is a GitHub org (humanpen) with ai-humanizer-comparison, humanpen-skill and humanpen-mcp, an aicatalog.app directory review, a Hugging Face space and a twelve.tools badge. Documented API defect recorded: GET /v1/health and GET /v1/ready are in the vendor's OpenAPI 3.1 schema and both return 404 on the live API. Category reclassified from the submitted 'Writing & Productivity' to Productivity, which is where this catalog keeps writing/document tools.

$99 USD one-time per profession-specific product, no subscription and no recurring charge. Five products: HR Management, Executive Assistant, Project Management, Real Estate, Recruiting. Free tier: up to eight generations per profession before purchase, with no signup or card. Lifetime access covers future updates to that profession's tool. Terms state that except where required by law all purchases are final and no refunds are offered, with the free trial given as the reason. A stale third-party mirror (devadex.com) still lists a retired pre-launch $59 price; the mirrored store account sonaopusaiworkflow.gumroad.com now returns 404 and the price on every live vendor page is $99.

Submitted via /submit-tool.html by the vendor on 2026-09-09 and held pending verification. The vendor published /privacy and /terms on 2026-09-12 and answered every outstanding question, so the listing was published 2026-09-12 with remaining caveats recorded in cons and unresolved_claims. Editorial entry written independently; no submission copy was reused. Verified on 2026-09-12: both legal pages live and substantive; all five Gumroad products at $99 with no subscription; shipped JavaScript writes only sonaopus_hr/_ea/_pm/_re/_role to localStorage, makes zero fetch/XHR/sendBeacon calls, and has no third-party script tags; handoff targets claude.ai/new, chatgpt.com/ and gemini.google.com/ carry no query parameters. Operator: Praise Boyinde, sole proprietor, no registered entity, governing law Nigeria. The domain publishes no MX records, so the Gmail address printed in both legal pages is the only reachable contact. Re-checked 2026-09-13 against the live homepage and a vendor email the same day. Closed: the homepage FAQ no longer says “Nothing stored”; on-page copy now matches the Privacy Policy (everything runs in the browser, progress saves locally, nothing is sent until you hand it to an assistant). Closed: a standalone legal-review FAQ (“Nothing happens without you”) is live and treats ER letters, HR policies, and similar outputs as drafts to verify, with legal or compliance risk flagged on-screen. Closed: affiliate terms were stated in writing by the vendor on 2026-09-13 — 40% flat one-time commission ($39.60 per $99 product), no recurring commission because there is no subscription, 30-day cookie, attribution and payout through Gumroad. Approved and wired 2026-09-13: site ref https://sonaopus.com/?ref=58448483 on Visit and official-pricing CTAs; per-product Gumroad affiliate URLs on the five profession products. Editorial score, cons, and methodology are unchanged.