Privacy Policy

2.1 Anonymous Users (No Account Required)

If you use the Service without creating an account, we may collect:

• IP address — used solely to enforce rate limits and prevent abuse.
• Usage data — the URLs you submit for analysis, timestamps, and analysis results. This data may be retained temporarily for operational purposes.
• Technical data — browser type, device type, and general location derived from IP address.

We do not link anonymous usage data to any personal identity.

2.2 Registered Users

If you choose to create an account, we additionally collect:

• Email address — used for authentication and account management.
• Account activity — analyses you have run, stored in your account history.
• Authentication data — managed securely through Supabase, our authentication provider.

We use the information we collect to:

• Provide and operate the Service.
• Enforce usage rate limits.
• Improve the accuracy and performance of the Service.
• Communicate with registered users regarding their accounts.
• Detect and prevent fraud, abuse, and unauthorized access.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

To provide the Service, we share data with the following third-party providers:

• AssemblyAI — We send audio extracted from submitted videos to AssemblyAI for transcription. Please review AssemblyAI's privacy policy at assemblyai.com.
• xAI (Grok) — Transcripts and extracted claims are sent to xAI's API for analysis. Please review xAI's privacy policy at x.ai.
• Supabase — We use Supabase to manage user authentication and store account data. Please review Supabase's privacy policy at supabase.com.

We do not share your data with TikTok, Instagram, or YouTube beyond what is necessary to retrieve the content of submitted URLs.

We retain data as follows:

• IP addresses and anonymous usage logs: retained for up to 30 days for rate limiting and abuse prevention, then deleted.
• Registered user account data: retained for as long as your account is active. You may request deletion at any time.
• Analysis history for registered users: retained until you delete it or close your account.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at legal@truthcore.ai. We will respond to requests within 30 days.