PRIVACY & DATA PROTECTION

Privacy Policy

Your privacy is fundamental to our mission. This policy explains how TruthScan collects, uses, and protects your personal information across our enterprise AI detection services.

Last updated: September 19, 2025

Information We Collect

TruthScan collects information to provide, maintain, and improve our AI detection services. We collect information in the following ways:


Information You Provide Directly


  • Account Information: Name, email address, organization name, job title, and contact details
  • Payment Information: Billing address and payment method details (processed securely by our payment processors)
  • Content for Analysis: Text, images, audio, video, and other content you submit for AI detection analysis
  • Communications: Messages you send to us, including support requests and feedback
  • Survey Responses: Information from surveys, research, and feedback forms

    • Information We Collect Automatically


  • Usage Data: How you interact with our services, features used, and time spent
  • Device Information: IP address, browser type, operating system, and device characteristics
  • Log Information: Server logs, error reports, and performance data
  • Analytics Data: Usage patterns, user engagement, and service performance metrics

    • Information from Third Parties


  • Integration Partners: Data from integrated platforms and services
  • Public Sources: Publicly available information for service improvement and research
  • Business Partners: Information from authorized business partners and resellers

    • How We Use Your Information

    We use the information we collect for legitimate business purposes, including:


    Service Provision and Operation


  • Providing AI detection and analysis services across text, images, audio, and video
  • Processing and analyzing content submitted through our platform
  • Generating detection reports and confidence scores
  • Maintaining and improving service reliability and performance
  • Providing customer support and technical assistance

    • Service Improvement and Development


  • Improving AI detection algorithms and model accuracy
  • Developing new features and detection capabilities
  • Conducting research and analysis to enhance our services
  • Training machine learning models (using aggregated, anonymized data)

    • Communication and Administration


  • Sending service-related notifications and updates
  • Processing billing and account management
  • Responding to inquiries and providing customer support
  • Sending important security and policy updates

    • Legal and Security Purposes


  • Protecting against fraud, abuse, and security threats
  • Complying with legal obligations and regulatory requirements
  • Enforcing our terms of service and other agreements
  • Protecting the rights and safety of our users and others

    • Information Sharing and Disclosure

    We do not sell your personal information. We may share your information in the following limited circumstances:


    Service Providers


    We work with trusted third-party service providers who assist us in operating our services. These providers have access to your information only to perform specific tasks on our behalf and are contractually obligated to protect your information.


    Bot Protection


    We use Cloudflare Turnstile to protect sign-in and our free detection tools from automated abuse. Turnstile runs in your browser and checks device and browser signals, such as your IP address and browser characteristics, to tell people from bots. Cloudflare processes this information as described in the Cloudflare Turnstile Privacy Addendum.


    Mobile Information


    Mobile information will not be shared with third parties or affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.


    Legal Requirements


    We may disclose your information when required by law or in response to valid legal processes, such as subpoenas, court orders, or government requests.


    Business Transfers


    In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to equivalent privacy protections.


    Consent


    We may share your information with your explicit consent or at your direction.

    Data Retention

    We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy:


  • Account Information: Retained while your account is active and for a reasonable period thereafter
  • Content Submitted for Analysis: Retained for 30 days by default, then deleted, unless retention is required for service improvement or otherwise agreed upon in a customer's service agreement.
  • Usage and Analytics Data: Retained in aggregated, anonymized form for service improvement
  • Legal and Compliance Data: Retained as required by applicable laws and regulations

    • You may request deletion of your personal information at any time, subject to legal and contractual obligations. Enterprise customers may have custom retention terms as specified in their service agreements.

    Data Security

    We implement comprehensive security measures to protect your information:


    Technical Safeguards


  • End-to-end encryption for data in transit and at rest
  • Multi-factor authentication and access controls
  • Regular security audits and penetration testing
  • Secure cloud infrastructure with enterprise-grade protections
  • Real-time monitoring and threat detection systems

    • Organizational Safeguards


  • Employee background checks and security training
  • Principle of least privilege access controls
  • Regular security awareness training and updates
  • Incident response and breach notification procedures

    • Compliance Standards


  • SOC 2 Type II compliance
  • ISO 27001 information security management
  • GDPR and CCPA compliance frameworks
  • Industry-standard security certifications
  • Regular compliance audits and assessments

    • Your Rights and Choices

    You have several rights regarding your personal information:


  • Access: Request access to the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal obligations)
  • Portability: Request a copy of your information in a portable format
  • Objection: Object to certain types of data processing
  • Restriction: Request restriction of processing under certain circumstances

    • To request access to your data, deletion of your data, or to update or correct your information, please reach out to us at contact@truthscan.com. Include enough detail for us to identify your records, and we will respond within the timeframe required by applicable law.

    GDPR Compliance

    For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR):


    Legal Basis for Processing


  • Contract Performance: Processing necessary to provide our services
  • Legitimate Interests: Service improvement, security, and business operations
  • Legal Compliance: Meeting legal and regulatory obligations
  • Consent: Specific consent for certain processing activities

    • Data Subject Rights


    EEA residents have comprehensive rights under GDPR, including access, rectification, erasure, portability, and the right to lodge complaints with supervisory authorities.

    California Privacy Rights (CCPA)

    California residents have additional rights under the California Consumer Privacy Act (CCPA):


  • Right to Know: Request information about personal information collection and use
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
  • Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights

    • To exercise these rights, please contact us using the methods described in the "Contact Us" section.

    Changes to This Privacy Policy

    We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of material changes through:


  • Email notification to registered users
  • Prominent notice on our website
  • In-app notifications for significant changes
  • Direct notification to enterprise customers as required by contract

    • Continued use of our services after changes become effective constitutes acceptance of the updated privacy policy.

    Contact Us

    If you have questions about this privacy policy or our privacy practices, please contact us using the information below.

    Enterprise Data Processing

    For enterprise customers, we offer additional data processing protections including:

    ā€¢ Data Processing Agreements (DPAs) with enhanced security terms

    ā€¢ Custom data retention and deletion schedules

    ā€¢ Dedicated security controls and audit capabilities

    ā€¢ Single Sign-On (SSO) and advanced authentication options

    Privacy Contact

    If you have questions about this privacy policy or our privacy practices, or to request access to, deletion of, or updates to your personal data, please contact us:

    Email: contact@truthscan.com

    Address:

    TruthScan Privacy Office
    1309 Coffeen Ave
    Sheridan, WY 82801

    We will respond to your privacy-related inquiries within 30 days. For urgent privacy matters, please include "URGENT PRIVACY REQUEST" in your subject line.

    Privacy Notice: Your privacy is fundamental to our mission. We are committed to protecting your personal information and maintaining transparency about our data practices.

    GDPR Contact - European Union Representative

    For data protection matters in the European Union, we have appointed Rickert Rechtsanwaltsgesellschaft mbH as our representative for data protection matters (Art. 27 GDPR). You can contact them at:

    EU Representative: Rickert Rechtsanwaltsgesellschaft mbH
    Represented entity: Undetectable Inc

    Address:

    ColmantstraƟe 15
    53115 Bonn
    Germany

    Email: art-27-rep-undetectable@rickert.law

    This contact is specifically for GDPR-related and data protection matters within the European Union.

    CHROME EXTENSION

    TruthScan Browser Extension Privacy Policy

    The TruthScan browser extension lets you check images you encounter on the web for signs of AI generation. This section describes how the extension handles information and applies in addition to the rest of this policy.

    What the Extension Accesses

    The extension does not read, monitor, or transmit the pages you browse. It acts only when you deliberately check a specific image, either by right-clicking it on a webpage or by uploading it through the extension.


    When you run a scan, we receive:

  • Image URL: When you right-click an image on a webpage, the extension sends us that image's web address so our servers can retrieve and analyze the image. We do not receive the address of the page you are on, and we do not receive any other text, links, or content from that page.
  • Image Content: When you upload or drag an image into the extension, the image file is transmitted to TruthScan servers for analysis. Images submitted through the extension are handled as Content for Analysis under this policy, including the 30-day default retention described in Data Retention.
  • Authentication Information: A session token identifying your TruthScan account, used to associate each scan with your account and apply your scan allowance. We do not receive your password through the extension.

    • The extension does not access text you type, form fields, passwords, or payment information.

    How We Use Extension Data

    We use images submitted through the extension to perform AI detection analysis and return a result to you, and your session token to maintain your account and scan usage. Where we use submitted content to improve detection accuracy, we do so using aggregated, anonymized data as described in How We Use Your Information.


    Use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

    Sharing

    Information collected through the extension is shared only as described in Information Sharing and Disclosure. We do not sell it and we do not use it for advertising.

    Security

    All data transmitted by the extension is encrypted in transit. The extension is covered by the safeguards described in Data Security, including our SOC 2 Type II and ISO 27001 programs. Documentation is available at our Trust Center.

    Your Control

    You can stop all collection by the extension at any time by removing it at chrome://extensions. Rights of access, correction, and deletion described in Your Rights and Choices apply to extension data, at contact@truthscan.com.