Falsifai Privacy Policy

Falsifai is operated by Falsifai Pty Ltd (ACN 699 158 051, ABN 57 699 158 051) (“Falsifai”, “we”, “us”). This policy explains what information we collect, why we collect it, who we share it with, and the choices you have. We have written it to be read, not skimmed past. If anything is unclear, contact us at privacy@falsifai.ai.

1. What we collect

Account information. Your name, email address, and password when you create an account.

Your inquiries. The problems, questions, and responses you submit to Falsifai, and the outputs the service generates for you. This is the core of the service and may include personal information if you choose to include it.

Payment information. Payments are handled by our payment processor, Stripe. We do not receive or store your card details — Stripe processes them directly. We retain records of your subscription status and transaction history.

Technical and usage data. IP address, browser type, device information, sign-in and session records, pages visited, and how you use the service, collected via cookies and similar technologies for operating, securing, and improving the service.

A request: please do not include health information, government identifiers, financial account numbers, or information about children in your inquiries. The service does not need them to do its work.

2. How we use your information

We use your information to: provide and operate the service, including processing your inquiries; manage your account and subscription; respond to support requests; secure and improve the service; and — only with your consent — send you marketing communications. We do not sell your personal information, and we do not use it for advertising.

3. AI processing

Falsifai is an AI-powered decision-support service. When you use it, you are interacting with AI systems, and your inquiries are processed by AI.

To process your inquiries, we use a third-party AI inference provider located in the United States. Under the commercial terms governing our configuration, this provider does not train AI models on your inquiries and does not retain your inquiry data: it is processed in memory for the duration of the request and is not stored on the provider’s systems. Your inquiry history is stored only by Falsifai, for you, as described in section 5.

Falsifai’s outputs are AI-generated and advisory. They are tested theories with stated limits, not guarantees, and they are not legal, financial, or medical advice. You remain the decision-maker. Falsifai does not make automated decisions about you that have legal or similarly significant effects.

4. Who we share information with

We share personal information only with service providers needed to operate Falsifai:

• our third-party AI inference provider (United States), to process your inquiries;
• our web-search providers, Serper (which returns Google search results) and Brave, to retrieve public web evidence for your inquiries (see below);
• our authentication and account-management provider, Clerk, Inc. (United States), to manage sign-in, sessions, and account security (see clerk.com/legal/privacy);
• our payment processor, Stripe, to handle billing; and
• hosting and infrastructure providers to run the service.

Each is bound by contractual terms governing their handling of your data. We may also disclose information where required by law.

Web search for evidence. To gather public web evidence, the service composes search queries derived from your inquiry and sends them to Serper and Brave. Before a query leaves our systems, we automatically strip identifiers in common structured formats — email addresses, phone numbers, payment card numbers, IP addresses, and US-style government identifiers — and a query consisting entirely of such identifiers is not sent at all. Be clear about the limit of that filter: it cannot recognise personal information written as ordinary text, so a name or topic that is part of the substance of your inquiry may still appear in a query. Queries are sent under Falsifai’s own provider accounts and are not accompanied by your name, email address, or account details. Please keep personal information you would not want used in a web search out of your inquiries (see also our request in section 1).

Because some of these providers are located overseas (principally the United States), your information may be transferred outside Australia. We take reasonable steps to ensure overseas recipients handle your information consistently with this policy.

5. Retention

We keep your account information and inquiry history while your account is active. When you delete your account (see section 6), we remove your account record, inquiry history, and associated session data from Falsifai’s systems within 30 days, including from our routine backups as they rotate. Account and sign-in records held by our authentication provider (Clerk) are deleted through that provider’s own deletion process once we action your request. We may retain transaction records as required by tax and accounting law.

6. Your rights and choices

Access and correction. You can access and correct your account information in your settings, or by contacting us.

Deletion. You can delete your account and data at any time using the “Delete my account” function in settings. We confirm by email when deletion completes.

Marketing. Marketing messages are sent only with your consent, and every message includes a one-click unsubscribe that works without logging in.

For users in the EU/UK: where the GDPR applies to our processing of your data, you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. The mechanisms above are how we honour them; contact privacy@falsifai.ai for anything they don’t cover. Our legal bases for processing are performance of our contract with you, our legitimate interests in operating and securing the service, and consent (for marketing).

7. Security

We take reasonable technical and organisational steps to protect your information, including encryption in transit, access controls, and the provider configurations described in section 3. No internet service can promise perfect security, and we won’t pretend otherwise — but if a breach occurs that is likely to cause you serious harm, we will tell you promptly.

8. Age restriction

Falsifai is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an account, contact us and we will delete it.

9. Cookies

We use cookies necessary for the service to function (sign-in, security) and basic analytics cookies to understand usage. You can control cookies through your browser settings; disabling necessary cookies may stop the service working.

10. Changes to this policy

If we change this policy, we will post the updated version here with a new date, and notify you by email of material changes before they take effect.

11. Complaints and contact

Questions or complaints: privacy@falsifai.ai. We will acknowledge within 7 days and respond within 30. If you are unsatisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).