Privacy Policy

1. Information We Collect

Account Information

• Email address
• Name
• Organization name
• Payment information (processed by Stripe)

Usage Data

• API call logs and metadata
• Verification requests and results
• Token usage and billing information

Content Data

Content submitted for verification is processed by our systems and third-party AI providers. By default, we retain content for 30 days for debugging and support purposes. You can request immediate deletion.

2. How We Use Your Information

• To provide and maintain the Service
• To process your verification requests
• To manage your account and billing
• To send important service updates
• To improve our verification algorithms
• To detect and prevent fraud or abuse

3. Data Sharing

AI Providers

We share content with AI providers (OpenAI, Anthropic, Google) solely for processing verification requests. These providers have their own privacy policies and data handling practices.

Service Providers

• Stripe (payment processing)
• Supabase (authentication and database)
• Vercel (hosting)
• Resend (email delivery)

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

4. Data Security

• All data is encrypted in transit (TLS 1.3)
• Sensitive data is encrypted at rest (AES-256)
• API keys are hashed and never stored in plain text
• Regular security audits and penetration testing

5. Data Retention

• Account data: Retained until account deletion
• Verification content: 30 days by default
• Usage logs: 90 days
• Billing records: 7 years (legal requirement)

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. International Transfers

Your data may be transferred to and processed in the United States. We use appropriate safeguards for international data transfers.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or through the Service.

11. Contact Us

For privacy-related inquiries, contact us at privacy@check.ai.