Privacy Policy

Truthcore AI, Inc. ("we," "us," or "our") operates the Truthcore Service, an AI-powered fact-checking tool for videos, social media posts, articles, and individual claims.

This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and what rights you have. We have written it to describe what our systems actually do.

Single purpose: Truthcore analyzes content you submit and returns fact-check results. All data collection described below exists to deliver that function, enforce usage limits, prevent abuse, and process payments.

2.1 Anonymous Users

If you use the Service without an account:

• IP address — used for rate limiting and abuse prevention. IP addresses also appear in standard server logs kept by our hosting providers (Render and Vercel) as a routine part of operating a web service.
• Anonymous device identifier ("client ID") — a persistent identifier generated by your browser and stored on your device. We use it to count your free analyses and enforce the limit that applies before signup is required. This identifier is stored on our servers alongside a usage count and a last-seen timestamp. It is not linked to your name or email.
• Submitted URLs — the web addresses you send for analysis.
• Technical data — browser type, device type, and approximate location derived from IP address.
• Local browser storage — we store a small amount of data in your browser to track free-analysis usage on your device.

2.2 Registered Users

If you create an account, we additionally collect:

• Email address — used for authentication, account management, and account-related communication.
• Authentication data — managed through Supabase. We do not store your password in readable form.
• Analysis history — the URLs you submit, the claims extracted, the fact-check verdicts returned, and the date of each analysis, stored in your account.
• Transcripts — when you submit a video or a social media post containing video, we extract the audio and generate a written transcript of the speech in it. Transcripts are used to identify factual claims and may be returned to you as part of your results and stored with your analysis.
• Usage counts — the number of analyses you have run in the current period, used to enforce plan limits.
• Share links — if you create a public share link for an analysis, we store a snapshot of that analysis (the URL analyzed, the claims, the verdicts, and the date) along with the share token and a view count.

2.3 Paying Subscribers

If you subscribe to Truthcore Pro, we additionally collect:

• Payment information — processed by Stripe. We never receive or store full card numbers. Stripe retains payment details and may share limited information with us, such as card type, last four digits, and billing country.
• Subscription status — plan type, status, billing period end date, and trial end date.

2.4 Browser Extension Users

If you use the Truthcore browser extension:

• The extension reads the URL of your active tab only, and only on supported platforms (TikTok, Instagram, YouTube, X), and only at the moment you click the Fact-check button.
• It stores your session token, user ID, and plan locally in the browser's extension storage.
• It does not collect, read, or transmit your browsing history.
• It does not activate on any page unless you click the button.
• It does not read page content beyond the URL of the active tab.

Extension data handling commitments. We do not sell user data to third parties. We do not transfer user data for purposes unrelated to the extension's single purpose of fact-checking content you submit. We do not use or transfer user data to determine creditworthiness or for lending purposes.

2.5 Analytics Data

We use PostHog to collect behavioral analytics, including page views, feature usage, events such as submitting an analysis or signing up, and approximate session duration and navigation patterns.

We do not use analytics data for advertising and we do not sell it.

We use the information we collect to:

• Provide and operate the Service
• Enforce usage limits and prevent abuse of free tiers
• Process payments and manage subscriptions
• Improve the accuracy and performance of the Service
• Communicate with registered users about their accounts
• Detect and prevent fraud and unauthorized access
• Understand how the Service is used so we can improve it

We do not sell your personal information. We do not use your data for advertising. We do not use your submitted content to train our own machine learning models.

Understanding this section matters, because analyzing content necessarily involves sending it to other companies.

4.1 What happens when you submit a link

• Videos and social posts: We retrieve the content at the URL you provide, extract the audio, and send that audio to AssemblyAI for transcription. The resulting transcript is then sent to Perplexity AI for claim extraction and fact-checking.
• Articles: We retrieve the page at the URL you provide and extract its readable text (up to approximately 5,000 characters). That text is sent to Perplexity AI for claim extraction and fact-checking.
• Typed claims: The text you type is sent directly to Perplexity AI for research and verification.

You are responsible for the URLs and content you submit. Please review our Terms of Service and Acceptable Use Policy regarding content you do not have the right to submit.

4.2 Shared results cache

To reduce processing time and cost, we temporarily cache analysis results in server memory, keyed by the submitted URL. If another user submits the same URL while a cached result is present, they may receive that cached result, which can include the transcript generated from that content.

This cache is not associated with any user account and holds no personal information about the person who first submitted the URL. It is stored in memory only and is cleared whenever our servers restart, which happens routinely.

If you do not want a transcript of a piece of content to be reusable in this way, do not submit that content for analysis.

4.3 Accuracy

Truthcore's outputs are generated by AI systems and may contain errors, including incorrect verdicts, missing context, or inaccurate source attribution. Results are provided for informational purposes only and are not a substitute for your own judgment or professional advice.

We share data with the following providers in order to operate the Service. Each processes data only to provide services to us.

For each provider's own privacy practices, see their published privacy policies at perplexity.ai, assemblyai.com, supabase.com, stripe.com, posthog.com, render.com, and vercel.com respectively.

When you submit a URL, we retrieve content from the platform hosting it (for example TikTok, Instagram, YouTube, X, or a news website). We do not send your personal information to those platforms. Retrieving content may reveal our servers' request to that platform, but not your identity.

We do not share your data with any other third parties except where required by law, to protect our legal rights, or in connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information becomes subject to a different privacy policy.

On account deletion: deleting your account permanently removes your analysis history, transcripts, share links, usage records, subscription record, and authentication account from our systems. This cannot be undone.

Billing records held by Stripe are retained as required by law and are not deleted when you delete your account. If you have an active subscription, it is canceled as part of the deletion.

7.1 Deleting your account

You can permanently delete your account and all associated data at any time from your account settings page. The deletion is immediate and irreversible.

7.2 Other rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at policies@truthcore.ai. We will respond within 30 days. We may need to verify your identity before acting on a request.

We will not discriminate against you for exercising any of these rights.

7.3 Anonymous users

If you have used the Service without an account and want the anonymous usage record associated with your device removed, contact us at policies@truthcore.ai. Because these records are not linked to an identity, we may need additional information from you to locate the correct record. Clearing your browser storage will also cause your device to be treated as new.

The Service is not directed to children. We do not knowingly collect personal information from children under 13, or under 16 where a higher age applies under local law.

If you believe a child has provided us with personal information, contact us at policies@truthcore.ai and we will delete it.

We use the following categories:

• Essential — session and authentication state, and the local storage entry used to enforce free-analysis limits. These are required for the Service to function and cannot be disabled while using the Service.
• Analytics — PostHog cookies and similar identifiers used to understand product usage.

We do not use cookies for advertising or cross-site tracking.

You can disable cookies in your browser settings, though parts of the Service will not function correctly without essential cookies. Where required by law, we will request your consent before setting non-essential analytics cookies.

We implement reasonable technical and organizational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• JWT-based authentication with server-side token verification
• Application-level access controls that scope every request to the authenticated user
• Restricted database credentials held only on our backend servers and never exposed to browsers or the extension
• Rate limiting on all analysis and account endpoints

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will revise the Last Updated date above.

If we make material changes to how we collect, use, or share your information, we will notify registered users by email or through a notice in the Service before those changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions, requests, or complaints about this Privacy Policy:

policies@truthcore.ai

Truthcore AI, Inc.
A Delaware corporation