Legal

Privacy Policy

Last updated: 19 October 2026

1. Who is responsible

Jaafar Barada runs Verifeed personally and is responsible for your personal data. Contact: support@verifeed.org.

2. What we collect

Today:

  • Your account: your email address and your password. The password is stored as a one-way hash by our sign-in provider; nobody can read it, us included.
  • Sign-in cookies that keep you signed in. They are the only cookies we set.
  • Technical logs kept by our hosting providers, such as IP address, browser and the pages requested, used for security and to fix faults.

When verified research opens:

  • Your questions and reports, linked to your account so only you can see them, and the source pages we read to check each claim.

When paid plans open, a payment provider will handle payments. We will not see or store your card number. We will update this policy before that happens.

We do not use analytics or advertising trackers.

3. How we use it

  • to run your account and your research;
  • to keep the service secure and working;
  • to answer you when you write to us;
  • to meet legal obligations.

We do not sell your data, show you ads, or train AI models on your questions or reports.

4. Who else handles it

  • Sign-in and database: Supabase, in the European Union (Frankfurt).
  • Website hosting: Vercel.
  • Research service hosting: Railway, once verified research opens.
  • AI research platforms: two AI companies based in the United States receive your questions and the source text we check, to answer and verify them. Under their terms for paid use, they do not train their models on this data by default and keep it for up to 30 days to detect abuse. We will tell you which companies they are on request.
  • People you share a report with: when you or your team make a share link, anyone who has the link can read that report (its claims, statuses and sources; never your notes, discussions or who asked) until the link is stopped or expires. We count how many times it is opened and keep nothing about who opened it.

Some of these providers process data outside your country, including in the United States. Each handles it under its own data protection terms with us.

5. How long we keep it

  • Your account, questions and reports: until you close your account.
  • When you close it in Email settings, your personal workspace and everything in it are deleted at once, with your sign-in account and your email settings, and your address is removed from invites and our logs. Research, notes and messages you made in a team stay with that team, shown as a former member's. If you ask us by email instead, we delete within 30 days. Either way, we keep something only when the law requires us to.
  • Technical logs: for the period each hosting provider keeps them.

6. Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it. Email support@verifeed.org; we reply within 30 days. If you are in the EU or the UK, you can also complain to your data protection authority.

7. Age

Verifeed is not for anyone under 18, and we do not knowingly collect their data.

8. Changes

If we change this policy in a way that matters, we will tell you by email or on the site first. The date at the top shows the latest version.

9. Contact

Privacy questions and requests: support@verifeed.org. See also the Terms of Service.