Privacy Policy

Effective date: March 20, 2026 | Applies to: factiator.com and all associated services

2.1 Controller

The data controller for all personal data processed through Factiator is:

VALINORSK LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA

Contact for data protection matters: privacy@factiator.com

2.2 Data We Collect

Account data (if you register)

• Name and email address
• Authentication provider data (Google OAuth, if used)
• Subscription tier and payment status (via Stripe — no card data stored by us)

Usage data

• Claims and article URLs submitted for analysis
• Analysis outputs and epistemic scores generated
• Session metadata: timestamps, browser type, device type, IP address
• Feature usage patterns

Technical data

• Log data: server logs, error reports
• Analytics: page views via Cloudflare Web Analytics (cookie-free, GDPR-compliant)

Advertising data (Free tier only)

On the Free tier, Factiator displays personalised advertisements via Google AdSense. Google AdSense uses cookies and similar tracking technologies to serve relevant ads. This data is processed by Google under their own privacy policy. Your consent is obtained via our cookie consent banner before any advertising cookies are set.

2.3 Legal Basis for Processing (GDPR)

• Contract performance (Art. 6(1)(b) GDPR): Processing necessary to provide the analysis service
• Legitimate interests (Art. 6(1)(f) GDPR): Improving the service, preventing abuse, ensuring security
• Consent (Art. 6(1)(a) GDPR): Advertising cookies and marketing communications — consent obtained via cookie banner
• Legal obligation (Art. 6(1)(c) GDPR): Where required by applicable law

2.4 How We Use Your Data

• To deliver analysis results and maintain your account
• To enforce usage limits and subscription entitlements
• To improve the accuracy and reliability of the AI engine
• To detect and prevent misuse, fraud, or abuse
• To serve contextually relevant advertisements on the Free tier (with consent)
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your submitted claims to train third-party AI models without your explicit consent.

2.5 Data Sharing

• Anthropic (AI inference): Claims are processed by Anthropic's API. Anthropic's data processing terms apply.
• Supabase (database): User data stored in Supabase US East region. Encrypted at rest and in transit.
• Stripe (payments): Payment processing only. No card data stored by VALINORSK LLC.
• Vercel (hosting): Infrastructure provider. Server logs may be retained.
• Google AdSense (advertising, Free tier only): Google processes data for ad targeting under their privacy policy. Requires user consent.
• Cloudflare (analytics): Cookie-free, anonymised analytics only.

We do not share personal data with data brokers or third parties for marketing purposes beyond the advertising framework described above.

2.6 International Transfers

Data is primarily processed in the United States. When you use Factiator from the EU/EEA, your data is transferred to the US under standard contractual clauses (SCCs) or equivalent safeguards as required by GDPR Art. 46.

2.7 Data Retention

• Account data: retained while account is active, deleted within 30 days of closure
• Analysis reports: retained as published public records unless deletion is requested
• Usage logs: retained for 12 months
• Payment records: retained for 7 years as required by US tax law

2.8 Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights:

• Right of access (Art. 15): Request a copy of your personal data
• Right to rectification (Art. 16): Correct inaccurate data
• Right to erasure (Art. 17): Request deletion of your data
• Right to restriction (Art. 18): Restrict processing
• Right to data portability (Art. 20): Receive your data in a structured format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent: At any time, without affecting prior processing

To exercise any right, contact: privacy@factiator.com. We will respond within 30 days. You have the right to lodge a complaint with your national data protection authority.

2.9 California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. VALINORSK LLC does not sell personal information. To exercise your rights: privacy@factiator.com

2.10 Security

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, access controls, and regular security reviews. No system is 100% secure. We will notify affected users of data breaches as required by applicable law.

VALINORSK LLC | factiator.com | Last updated: March 20, 2026