Overview
Verafai Technologies Ltd. ("Verafai," "we," "us") builds synthetic media detection tools for identity verification, fraud investigation, and content moderation. This policy explains what data we collect when you use our website, web app, or API, why we collect it, and the choices you have.
Because Verafai's core product involves analyzing uploaded media, we've written a dedicated section below on exactly how that media is handled — this is the part most people care about most, so we didn't bury it.
Data We Collect
We collect information in three ways: information you give us directly, information collected automatically, and information generated by using the product.
- Account data: name, work email, company name, and billing information when you create an account or request a demo.
- Usage data: pages visited, features used, and API call metadata, collected to understand product usage and diagnose issues.
- Device data: browser type, IP address, and general location, collected automatically for security and fraud prevention.
Media & Analysis Data
When you upload a video, audio file, or image for analysis, that file is processed by our detection models to generate a synthetic-likelihood score and explanation. Uploaded media is encrypted in transit and at rest.
- Analysis results (score, flagged regions, explanation text) are stored against your account so you can access your case history and export reports.
- Raw media files are retained for 30 days by default to support re-analysis and dispute review, then automatically deleted unless you've enabled extended retention for compliance purposes.
- With consent, confirmed real or fake samples may be used to improve detection accuracy through our retraining pipeline. This is opt-in for pilot and paid accounts and never applied without your agreement.
How We Use Data
We use collected data to operate, secure, and improve Verafai — including to run the detection pipeline you're requesting, respond to support requests, send product and billing communications, and detect misuse of the platform. We do not sell personal data to third parties.
Retention & Deletion
Account data is retained for as long as your account is active. Analysis reports are retained per your plan's compliance settings, with a default of 12 months for audit purposes. You can request deletion of your account and associated data at any time by contacting us — see the section below.
Sharing & Disclosure
We share data only with infrastructure providers necessary to operate the service (such as cloud hosting and GPU inference providers), under contractual confidentiality obligations, or when required by law. A current list of subprocessors is available on request.
Security
Uploaded media and account data are encrypted in transit (TLS) and at rest. Access to production systems is restricted to engineering staff on a need-to-know basis and logged. No system is perfectly secure, and we'll notify affected users promptly in the event of a breach involving personal data.
Your Rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, contact us using the details below — we aim to respond within 30 days.
Children's Privacy
Verafai is a business tool intended for use by adults in a professional capacity. We do not knowingly collect personal data from anyone under 18.
Changes To This Policy
We may update this policy as the product evolves. Material changes will be communicated to active account holders by email ahead of taking effect. The "last updated" date above always reflects the current version.
Contact Us
Questions about this policy or a data request can be sent to hello@verafai.ai, or via our contact page.