LEGAL

Privacy Policy — Verifyco Web

Last updated: July 2026

The short version

Your uploaded files are analyzed in a per-request temporary workspace and removed when analysis finishes. We keep only the analysis report, and you can delete that (or your whole account) at any time. We never train models on your uploads and never sell data.

What we store

• Account data: email, name, sign-in provider, hashed password (if set).
• Analysis reports: the JSON verdict and layer findings — never the media itself. Reports remain in your account until you delete them or delete your account.
• Billing records: plan, credits and transaction references. Payments are processed by Paddle (merchant of record) — we never see card numbers.

What we don't do

• No application-level persistent storage of uploaded or link-fetched media; request cleanup removes temporary media on completion and handled-error paths.
• No training on user content and no sale of personal data for advertising. Limited service processors are listed below.
• No third-party advertising or cross-site tracking on this site.

Shared reports

Sharing is strictly opt-in. A share link exposes only the score, verdict and per-layer statuses of that one report; detailed findings and your identity are never included. Revoking the link (or deleting the report) blocks future access through Verifyco. Screenshots, downloaded copies and third-party cached previews may remain outside Verifyco's control.

Link analysis

When you paste a social-media URL, our server fetches the public media at that link, analyzes it, and deletes it — the same ephemeral contract as uploads.

Your rights (GDPR / KVKK)

Access, correction and erasure are self-serve: change your email/password in account settings, delete individual reports, or delete your entire account — which permanently cascades to reports, purchases and the credit ledger. For anything else, contact us via the support page on verifyco.info.

Processors we rely on

Vercel (hosting), Neon (database), Render (analysis compute), Paddle (payments), Google Workspace (transactional email). Each processes only what its role requires.