Privacy & data
Last updated: June 2026. Plain-English where possible. This policy will be reviewed by counsel before launch. Unfaked is operated by Fountem Ltd (England & Wales), the data controller.
What we analyse
You submit a public URL to a video. We fetch that media via our resolver service, extract technical signals (codec, provenance, forensic scores) and produce a verdict. We do not store the source video itself — only the derived signals, the verdict, and the submitted URL.
What we store
- The submitted URL and a content hash (for caching and the public archive).
- Forensic/provenance/contextual signals and the resulting verdict.
- Your account email and per-day usage counts, used to enforce free-tier limits and prevent abuse.
- Limited technical data (e.g. IP-derived rate-limit data) used only for security and anti-abuse.
Legal basis (UK GDPR Article 6)
Our lawful basis is legitimate interests — countering election misinformation and protecting information integrity — balanced against your rights in a documented assessment. We also rely on contract for providing your account. Where a verdict concerns a public figure’s public conduct, we process it in a journalistic/research context.
How long we keep it
We keep account data for the life of your account (and a short period after a deletion request), usage counters on a rolling basis, and cached results for a limited period. Verdicts published in the archive may be retained in the public interest, subject to the review and removal route below.
The public archive
Verdicts on public political media may be published in the public archive in the public interest (journalism/research). If you believe a published case is wrong or harmful, contact us for review or removal — see our right of reply route.
Your rights
You have the right to access, rectification, erasure, restriction, objection, and portability of personal data we hold, and the right to complain to the Information Commissioner’s Office (ICO). To exercise these rights, email privacy@unfaked.ai. We aim to respond within statutory timeframes.
Third parties and international transfers
To produce a verdict we send media to forensic providers (Hive, Sensity) and AI models (OpenAI). We send only what is needed for detection. We use Supabase (EU/London region) for storage and authentication, and Vercel for hosting. Some providers may process data outside the UK/EEA; where they do, we put appropriate safeguards (such as the UK International Data Transfer Agreement) in place.
Cookies
We use only strictly necessary cookies for sign-in and security. See our cookie policy.
Contact
Data matters: privacy@unfaked.ai. Corrections / right of reply: corrections@unfaked.ai. Legal: legal@unfaked.ai.