Privacy Policy

1. Introduction

Creative Content Crafts Inc. ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Co.Actor Fact Checker service (the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we may collect:

• Email address
• Name (optional)
• Profile picture (if signing in with a third-party provider)
• Payment information (processed by Paddle; we do not store card details)

2.2 Third-Party Authentication (OAuth)

When you sign in using a third-party authentication provider, we receive limited information from that provider. Here is what we collect from each:

• Google: Email address, name, and profile picture. We use Google OAuth solely for authentication purposes. We do not access your Google Drive, Gmail, or other Google services.
• GitHub: Email address, username, and avatar. We use GitHub OAuth solely for authentication purposes. We do not access your repositories, code, or other GitHub data.
• LinkedIn: Email address, name, and profile picture. We use LinkedIn OAuth solely for authentication purposes. We do not access your connections, posts, or other LinkedIn data.

By signing in with these providers, you consent to us receiving and storing this information. You can revoke access at any time through your account settings or directly through the provider's settings.

2.3 Usage Data

We automatically collect certain information when you use the Service:

• URLs of pages where fact-checks are performed
• Text content submitted for fact-checking
• Fact-check results and verdicts
• Timestamps and usage patterns
• Browser type and version
• IP address (anonymized for analytics)

2.4 Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors interact with our Service. GA4 collects the following information:

• Pages visited and time spent on each page
• Referral source (how you found us)
• Device type, browser, and operating system
• Approximate geographic location (country/city level, derived from anonymized IP)
• Interactions with site features (clicks, scrolls)

Important: GA4 does not store your full IP address. IP anonymization is enabled by default and cannot be disabled. We have configured GA4 with a 2-month data retention period. This data is processed by Google LLC in the United States under the EU-US Data Privacy Framework.

We do not use Google Signals or link GA4 data with Google Ads. Analytics data is used solely to improve our Service and is not shared with third parties for advertising purposes.

You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on or by declining analytics cookies when prompted on our site.

2.5 API Keys

If you use the Unlimited plan, you may provide your own API keys for OpenRouter and Perplexity. These keys are encrypted at rest and are only used to process your fact-check requests.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process fact-check requests and display results
• Manage your account and subscription
• Process payments through our payment provider
• Send service-related communications
• Respond to your inquiries and support requests
• Monitor usage to prevent abuse and enforce our terms
• Analyze usage patterns to improve user experience
• Comply with legal obligations

4. Data Retention

We retain your data as follows:

• Account information: Retained while your account is active and for 30 days after deletion
• Fact-check history: Retained for 30 days, then automatically deleted
• Payment records: Retained for 7 years for legal and tax compliance
• API keys: Deleted immediately when removed from your settings

You can request deletion of your data at any time by contacting us or using the account deletion feature in your settings.

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Service providers: Third parties that help us operate the Service (payment processing, analytics, hosting)
• AI providers: OpenRouter and Perplexity to process fact-check requests (text content only, not personal information)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Cookies and Tracking

We use cookies and similar technologies to provide and improve our Service. When you first visit our site, you will be presented with a cookie consent banner where you can choose which types of cookies to accept.

6.1 Types of Cookies We Use

• Essential cookies (always active): Required for authentication, session management, and security. These cannot be disabled as they are necessary for the Service to function.
• Analytics cookies (optional): Google Analytics 4 cookies that help us understand how visitors use our Service. These include:
  • _ga - Distinguishes unique users (expires: 2 years)
  • _ga_* - Maintains session state (expires: 2 years)
• Preference cookies (optional): Remember your settings such as theme preference and cookie consent choices.

6.2 Cookie Consent

In accordance with GDPR and other privacy regulations, we obtain your consent before placing non-essential cookies on your device. You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of any page.

If you decline analytics cookies, Google Analytics will not track your activity. You can also use the Google Analytics Opt-out Browser Add-on for additional protection.

6.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies
• Delete all cookies when you close your browser

Note: Disabling essential cookies may prevent you from using certain features of the Service, including signing in to your account.

7. Data Security

We implement appropriate security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Regular security audits
• Access controls and authentication
• Encrypted storage of sensitive data like API keys

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing

To exercise these rights, please contact us at privacy@co.actor.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: