Privacy Policy

1. Introduction

Authentiq ("Authentiq," "we," "us," or "our") provides an AI-powered image authenticity and facial manipulation detection platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our website, dashboards, and API across our consumer and enterprise tiers.

By creating an account or using our services, you agree to the practices described here. If you do not agree, please do not use the services.

2. Information We Collect

Account information. When you register, we collect identifiers such as your name, email address, password hash, organization, and billing details.

Uploaded images. Images you submit (or that your end users submit through your integration) are processed by our detection models to produce an analysis report.

Usage data. We collect log and device data such as IP address, browser type, pages viewed, and feature interactions to operate and improve the service.

API logs. For API clients we record request metadata (timestamps, endpoints, status codes, API key identifiers, and rate-limit counters) for security, billing, and auditing.

3. How We Use Your Information

We use information to provide and maintain the service, run image analyses and generate reports, authenticate users, process payments, monitor for abuse and fraud, comply with legal obligations, provide support, and improve our models and product. We do not use your uploaded images to train models without a separate, explicit opt-in.

4. Image & Biometric Data Handling

Uploaded images are processed solely to perform the analyses you request (for example, filter, AI-generation, deepfake, face, and liveness detection).

Face embeddings are computed in memory only and are never persisted. Any facial geometry or embedding used for matching, quality, or liveness checks exists transiently during processing and is discarded immediately afterward. We do not store biometric identifiers in our databases. See our Biometric Information Notice for details.

Original uploaded images may be stored in object storage (e.g., to allow you to revisit a report) and are subject to the retention windows described below. Enterprise customers may configure shorter retention or immediate deletion.

5. Data Retention

We retain account and billing records for as long as your account is active and as required to meet legal, tax, and accounting obligations. Uploaded images and their reports are retained for a limited period (generally measured in days to months depending on your plan and configuration) and then deleted or anonymized. Biometric identifiers are not retained at all.

6. Data Sharing & Disclosure

We do not sell your personal data. We share information only with subprocessors that help us run the service — such as cloud hosting and storage providers, and our payment processor (Stripe) — under contractual confidentiality and data-protection obligations. We may also disclose information to comply with law or to protect rights, safety, and security.

7. Security

We use encryption in transit and at rest, access controls, short-lived access tokens with refresh-token rotation and reuse detection, audit logging, and other safeguards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Under the GDPR you may request access, erasure, and portability. Under the CCPA/CPRA you may request that we do not sell or share your personal information — we do not sell personal data. To exercise any right, contact us using the details below.

9. International Transfers

We may process and store information in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers of personal data.

10. Children's Privacy

Our services are not directed to children under 16 (or the age defined by local law), and we do not knowingly collect their personal data. If you believe a child has provided us information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice.

12. Contact Us

For privacy questions or requests, contact us at privacy@authentiq.ai.