1. Introduction

Polygraph ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered fact-checking platform.

2. Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. We use Better Auth for secure authentication and Neon for data storage.

API Keys You Provide

You may optionally provide API keys to connect third-party services to your account, including:

Brave Search API keys for web search functionality
Google AI (Gemini) API keys for AI inference
AssemblyAI API keys for audio transcription

These keys are encrypted at rest and are only used to make requests on your behalf. We do not share your API keys with third parties, and you can delete them at any time from your Settings.

Content You Submit

When you submit content for fact-checking (URLs, claims, videos, articles), we process and store this content along with the extracted claims and verification results.

Usage Data

We automatically collect certain information about your device and usage patterns, including IP address, browser type, pages visited, and timestamps.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our fact-checking services
Process and verify claims using AI-powered analysis
Generate credibility scores and verification reports
Communicate with you about your account and our services
Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations

4. Public Content

Important: Polygraphs (fact-check reports) and individual claims are publicly accessible by default. This includes:

The content being fact-checked (video titles, article excerpts, claim text)
Extracted claims and their verification verdicts
Credibility scores and supporting evidence
Sources used for verification

Public content may be indexed by search engines and shared by other users. Do not submit content containing sensitive personal information that you do not wish to be public.

5. Third-Party Services

We use the following third-party services to operate our platform:

Neon - Database hosting
Fly.io - Application hosting and infrastructure
Google Gemini - AI inference for claim extraction and verification
AssemblyAI - Audio and video transcription services

Each of these services has their own privacy policies governing how they handle data. When you use Polygraph, your data may be processed by these services in accordance with their respective policies.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest (API keys)
Secure session-based authentication
Regular security reviews and updates

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your account information for as long as your account is active. Publicly accessible polygraphs and claims are retained indefinitely to maintain the integrity of our fact-checking database. You may request deletion of your account by contacting us.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Delete your account and associated personal data
Export your data in a portable format
Object to or restrict certain processing activities

To exercise these rights, please contact us at gregarious.narain@gmail.com.

9. Children's Privacy

Polygraph is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at gregarious.narain@gmail.com.