Privacy Policy

Last updated: September 10, 2026

TruthCheck ("we", "our", or "us") respects and protects your privacy. This Privacy Policy ("Policy") describes how we collect, use, store, and share your personal information when you use TruthCheck (the "Service"), and your related rights under applicable data protection laws.

Please read this Policy carefully before using the Service. By using the Service, you confirm that you have read and agree to this Policy. We may update this Policy from time to time, and material changes will be communicated in advance via email or platform notifications.

1. Data Controller

The data controller for this Service is:

  • Company Name: TruthCheck, Inc.
  • Registered Address: 123 Verification Street, Suite 100, San Francisco, CA 94102, United States
  • Privacy Contact Email: privacy@truthcheck.ai
  • Data Protection Officer: Available at privacy@truthcheck.ai

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, display name, and password (encrypted) when you register
  • Payment Information: Transaction amount, payment status. We do not store complete card numbers — card data is processed by our payment processor (see Section 5)
  • Content for Fact-Checking: Text, URLs, and images you submit for verification
  • Communication Records: Emails, support tickets, and feedback you send to customer support

2.2 Information We Collect Automatically

  • Device and Network: IP address, device model, operating system, browser type, timezone
  • Usage Behavior: Page visits, feature usage, operation logs, session duration
  • Log Data: Request timestamps, error logs, performance data

3. How We Use Your Information

Purpose Legal Basis
Provide and maintain ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation

We may aggregate or de-identify data for statistical analysis. Such data cannot be traced to specific individuals.

4. Cookies and Tracking Technologies

Type Purpose Can be Disabled
Strictly NecessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes

You can adjust cookie preferences through your browser settings or our Cookie Management Center.

Analytics Tools Used: We use Google Analytics for anonymous usage statistics and product optimization. You can opt out using browser settings or browser add-ons.

5. Information Sharing and Disclosure

We do not sell your personal information, including as "selling" is defined under applicable laws (such as CCPA). We only share your information in the following circumstances:

  • Service Providers: Third parties assisting in operating our platform (payment processing, cloud hosting, customer support) under confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is not stored on our servers.
  • Legal and Regulatory Requirements: As required by law, court order, or legitimate requests from authorities
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice and protection obligations
  • With Your Consent: For other purposes beyond those described herein, only with your explicit prior consent

6. Data Security Measures

  • Transmission Encryption: TLS / HTTPS
  • Storage Security: Sensitive data such as passwords is encrypted or hashed
  • Access Control: Principle of least privilege; employees sign confidentiality agreements
  • Regular Security Audits: Periodic vulnerability scanning

In the event of a security incident affecting your rights, we will notify you and relevant supervisory authorities within 72 hours of discovery per GDPR requirements. Please keep your account credentials secure and do not share them with others.

7. Personal Information Retention Period

Data Type Retention Period Upon Expiry
Account InformationDuring active period; 90 days after account deletionDelete or anonymize
Transaction RecordsAs required by law, typically 7 yearsDelete or archive
Support Records3 yearsSecure deletion
Security Audit Logs12 monthsSecure deletion

8. Your Data Rights

To exercise the following rights, please contact us. We will process requests within 30 calendar days.

Right Description
Right to be InformedUnderstand what data we collect and how we use it
Right of AccessObtain a copy of your personal data
Right to RectificationCorrect inaccurate or incomplete information
Right to ErasureRequest deletion of data under specific conditions
Right to Restrict ProcessingPause data processing under specific circumstances
Right to Data PortabilityObtain your data in machine-readable format
Right to ObjectObject to processing based on legitimate interests or marketing
Right to Withdraw ConsentWithdraw consent for processing based on consent

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to our services via email or in-app notifications. You can unsubscribe at any time: click the "Unsubscribe" link in the email, disable marketing notifications in Account Settings, or contact us. Opting out does not affect service-related notifications (such as billing or security alerts).

10. International Data Transfers

Our servers and partners may be located in various regions including the United States and Singapore. For cross-border transfers, we safeguard data through:

  • Data processing agreements incorporating EU Standard Contractual Clauses (SCC)
  • Transfers only to recipients providing equivalent protection levels
  • Other safeguards such as adequacy decisions or Binding Corporate Rules

11. Children's Privacy

This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors under this age. If you believe your child has provided us with information, please contact us immediately and we will promptly delete such information.

12. Third-Party Links and Services

This Service may contain links to third-party websites or integrations with third-party services. This Policy applies only to information we directly collect. We are not responsible for third parties' data practices and recommend reviewing their policies before use.

13. Changes to This Policy

Material changes will be communicated at least 15 days in advance via platform announcements or your registered email, and the "Last Updated" date at the top of this page will be revised. Continued use after the effective date constitutes acceptance.

14. Contact Us

  • Privacy Contact: privacy@truthcheck.ai
  • Customer Support: support@truthcheck.ai
  • Company: TruthCheck, Inc.
  • Mailing Address: 123 Verification Street, Suite 100, San Francisco, CA 94102, United States
  • Service Hours: Monday to Friday, 09:00–18:00 UTC+8