Loading…
See the measures in use for accounts, files and reports, and the work still in progress.
Checking or saving a company report does not give permission to use its source file for our model research. Company contributions require a separate written arrangement and supporting controls.
Personal checks save reports and sources automatically. Originals remain private for 180 days, with earlier deletion by email. This does not authorise research or training. The separate research option starts unchecked and can be withdrawn in the account.
Company balances, reports and billing are separate from personal accounts. Owner, Admin, Analyst and Viewer permissions are checked on the server.
Case, member, invitation, report-link and export changes record who made them and when.
You can delete saved reports and withdraw research files. If source-file deletion fails, it stays pending for retry; research use remains blocked.
API keys are randomly generated, stored as one-way hashes and shown only once with their webhook secret.
Source files are private while waiting or being checked. We attempt deletion after processing and retry failures.
Delivered reports carry a signature and event ID. Delivery uses HTTPS, time limits and retries.
Reports include an ID, creation time and format version. To request a correction, send the ID and original export rather than just a screenshot.
Our product and payment-funnel events are kept for 90 days; account-linked provider records for 180 days; research-file deletion is scheduled after 180 days; authentication and event-rate hashes last up to 24 hours.
The Google tag loads after consent. Purchase and refund events can use the pseudonymous identifier saved after that consent. Clarity is excluded from checks, results, sign-in, account and admin pages. Our own billing records are separate.
Requests use store:false. Standard abuse-monitoring records may still remain; this is not a zero-retention setting.
The operator confirmed current service arrangements on 7 September 2026. The provider list explains where data goes and the storage details stated for each service. This is not an independent certification.
The owner can close a company workspace in Account → Business agreement and data. New processing stops, keys are revoked and scheduled cleanup removes company content after running tasks finish. Failed file deletions remain pending for retry. Required billing and agreement records remain. Personal account deletion is handled separately by verified email request.
Some service-specific settings, including the exact Google Analytics retention choice, are not documented here. We do not assume a shorter period or a specific region.
An external security review and follow-up fixes are planned. We do not currently claim SOC 2, ISO 27001 or independent security certification.
Read the privacy policy, storage periods and upload rules, or email deepfakepolicy@proton.me. The processing page explains where data is handled, including providers outside the EU. Keep your account secure and review findings alongside the original file.