Facty Privacy Policy

Effective date: 12 July 2026
Last updated: 12 July 2026

This Privacy Policy explains how Facty handles personal data and Chrome extension user data when you use the Facty browser extension, getfacty.com, payments, and related services (collectively, the Service).

1. Controller and contact

For the operation of the Facty Service outside Russian checkout transactions, the data controller is Individual Entrepreneur KIRILL DIAKONOV, registration number 306543372, Georgia, Tbilisi, Samgori District, Police Lane I, N 5, Floor N 2, N 4a.

For a purchase made through the Russian YooKassa checkout, the seller and controller for that payment, fiscal, and transaction-support data is Individual Entrepreneur Dyakonov Kirill Sergeevich (ИП Дьяконов Кирилл Сергеевич), INN 781443926794, Komendantsky Prospect 22, Saint Petersburg, Russia.

The controllers may share data strictly as needed to provide a unified account, subscription, support, security, legal, and accounting experience. They are not a data broker and do not sell personal data.

For privacy requests or questions, contact hello@getfacty.com. Please use the subject line Privacy request and identify the email address associated with your account.

2. Data we collect

We collect the following categories of data, depending on how you use the Service.

Category	Examples	Why we collect it
Account and authentication data	Email address, account identifier, authentication/session tokens	To create and secure your account, sign you in by email code, link a subscription, and provide support.
Extension and service data	Random device identifier stored locally by the extension, extension version, plan status, quota usage, interface language, technical events	To operate the extension, apply allowance limits, prevent abuse, maintain compatibility, and troubleshoot.
YouTube data used for the feature	Video identifier, caption/transcript segments from the video you choose to analyse, timing windows, extracted statements, assessments, citations, and translations	To provide the fact-checking overlay, cache results, and avoid repeating the same analysis.
Device, log, and security data	IP address, browser/device and request information, timestamps, request identifiers, error and security logs	To deliver the Service securely, prevent fraud and abuse, diagnose failures, and protect our rights.
Subscription and payment data	Selected plan, billing period, payment/order/subscription identifiers, payment status, invoice or receipt information, country or billing details made available by the processor	To process purchases, renew subscriptions, provide refunds when required, prevent fraud, and meet accounting or tax obligations. We do not receive or store your full card number or card security code.
Analytics and marketing data	Website/extension usage events, campaign or referral data, cookie or similar-technology identifiers, email subscription preferences, emails we send and their engagement data	To measure and improve the Service and, with the consent required by law, send product news and marketing.
Communications	Messages, attachments, and information you send to support	To answer you and resolve support, payment, safety, or legal issues.

A note about captions and video data

Facty only processes captions from a YouTube video when you use the fact-checking feature for that video. We do not collect a complete browsing history, continuously monitor all videos you watch, access your contacts, files, microphone, camera, or full payment-card information.

Captions and public video content are not necessarily personal data by themselves, but they can contain personal information or sensitive information about people mentioned in a video. We therefore treat captions and analysis results as protected Service data. Do not use Facty to process content if you do not have a lawful basis to make it available for this purpose.

3. How we use data and our legal bases

Where the GDPR or similar law applies, we rely on one or more of the following legal bases:

Performance of a contract: to provide the extension, account, quota, paid plan, requested fact-checking, and support.
Legitimate interests: to secure the Service, prevent fraud and abuse, maintain and improve reliability, protect legal rights, and conduct limited service analytics. We balance these interests against your rights.
Consent: for non-essential cookies or similar technologies, optional marketing emails, and any processing for which consent is required. You may withdraw consent at any time; this does not affect processing already carried out lawfully.
Legal obligation: to comply with tax, accounting, consumer-protection, sanctions, and lawful government-request obligations.

Captions from a video you choose to analyse may mention or describe people other than you. Where those captions contain personal data of other individuals, we process it only as necessary to provide the fact-checking feature you request, on the basis of our and our users’ legitimate interests in verifying publicly made statements and, where applicable, the exemptions that support processing for journalistic, academic, or freedom-of-expression purposes under applicable law. We limit this processing to what the feature requires and do not use it to build profiles of, or make decisions about, those individuals.

We use data to:

provide the fact-checking feature, including transmitting the minimum necessary caption text and related context to the AI provider selected for the request;
calculate and enforce free and paid usage limits, maintain subscriptions, and prevent duplicate or fraudulent transactions;
cache analyses and translations so the Service is faster and does not repeatedly process the same video;
authenticate accounts and protect the Service from spam, misuse, security incidents, and payment abuse;
operate, test, debug, and improve the reliability and performance of Facty; and
send service messages and, where permitted and consented to where required, marketing communications.

We do not use captions, transcript data, or browsing activity for behavioural advertising, do not sell them, and do not make them available to data brokers. We do not use them to determine creditworthiness, lending eligibility, employment eligibility, insurance eligibility, or any similar high-impact decision.

4. Chrome Web Store user-data commitment

Facty’s collection, use, and transfer of Chrome extension user data comply with the Chrome Web Store User Data Policy, including the Limited Use requirements.

In particular, Facty collects and transfers YouTube caption and video data only when necessary for its user-facing fact-checking feature and related security, maintenance, and reliability functions. We do not allow people to read that data except when you give explicit permission for a specific support issue, when necessary to investigate security or abuse, when data has been aggregated and de-identified for internal operations, or when required by law.

When you choose to run a fact-check on a video, you initiate the sending of that video’s captions and identifier to Facty’s servers and the selected AI provider to generate the requested analysis. This Policy describes that processing, and you can stop it at any time by not using the feature or by uninstalling the extension.

5. How data is shared

We share data only as needed for the purposes above, including with the following recipients:

Recipient category	Data shared and purpose
AI providers	Anthropic, OpenAI, and Google (Gemini), depending on the provider selected for a request. We send the minimum caption text and related analysis context needed to extract, assess, or translate claims.
Authentication provider	Supabase processes account authentication and email one-time-password functions.
Hosting and infrastructure providers	Facty operates its application and database on self-managed VPS infrastructure currently located in Finland. Hosting, backup, security, and operational vendors process data only to run and secure Facty.
Payment providers	Creem processes international checkout as Merchant of Record. YooKassa processes Russian checkout. They process payment and transaction information under their own notices and contractual terms.
Analytics and email providers	The specific analytics and email-delivery providers enabled for Facty will be named in the service’s cookie/preferences interface and in this Policy before they receive personal data. They may measure permitted product usage or deliver emails only under the consent and opt-out rules described below.
Professional advisers and authorities	Accountants, legal advisers, insurers, auditors, law enforcement, regulators, or courts where reasonably necessary or legally required.
Corporate successors	A buyer, investor, or successor in a merger, financing, acquisition, or asset sale, subject to applicable law and appropriate safeguards.

The recipients above may process data in countries other than yours. We do not authorize them to use your data for purposes incompatible with this Policy. Payment processors and other independent controllers process data under their own privacy notices; please review Creem’s Privacy Notice and YooKassa’s Privacy Policy.

Named subprocessors and service providers

The following named providers may receive data when their relevant function is used:

Anthropic - AI-assisted claim extraction, assessment, and translation;
OpenAI - AI-assisted claim extraction, assessment, and translation;
Google Gemini - AI-assisted claim extraction, assessment, translation, and, where enabled, search-grounded assessment;
Supabase - email one-time-password authentication and account authentication;
Creem - international payment checkout, subscription administration, invoicing, and Merchant of Record functions; and
YooKassa - Russian payment checkout, recurring-payment functions, and fiscal-payment functions where enabled.

An AI provider is selected per request and may not be used for every analysis. We will update this list before adding a new provider that receives personal data or Chrome extension user data.

6. Hosting

Facty’s production infrastructure is currently hosted in the European Union (Finland), and we may move or add infrastructure elsewhere as operational needs change. Some providers we rely on - including AI, authentication, payment, analytics, and email providers - may process data in other countries. Where required by applicable law, we apply appropriate safeguards to that processing.

7. Cookies, local storage, analytics, and marketing

The website and extension may use strictly necessary storage to provide functions you request, such as the extension’s local device identifier, session information, and website theme preference. These are not used for behavioural advertising.

We will ask for consent before placing or reading non-essential analytics or marketing cookies/similar technologies where consent is required. You can change non-essential preferences through the cookie/preference control on the website. Blocking non-essential technologies does not prevent you from using core Facty functions.

Marketing emails are optional. You can opt out at any time using the unsubscribe link in the email or by contacting us. We may still send non-marketing messages about your account, subscription, security, payment, or material changes to the Service.

8. Retention

We retain data only for as long as needed for the stated purpose, unless a longer period is required or permitted by law.

Data	Retention approach
Cached caption-derived claims, verdicts, and translations	Up to 6 months from creation, then deleted or overwritten through the cache-retention process.
Account, device-linking, and subscription data	While the account or subscription is active and then only as necessary for deletion requests, disputes, security, and legal obligations.
Payment, invoice, receipt, tax, and accounting records	For the period required by applicable tax, accounting, and payment law.
Security and operational logs	No longer than reasonably necessary for security and troubleshooting, subject to legal needs.
Marketing-consent and suppression records	Until consent is withdrawn or as needed to document compliance and honor an opt-out.

We may retain de-identified or aggregated information that no longer reasonably identifies you for internal analytics and service improvement, where allowed by law.

9. Security

We use reasonable technical and organizational measures designed to protect data, including encryption in transit, access controls, authentication controls, least-privilege practices, and security monitoring. No system is completely secure, and we cannot guarantee absolute security. You should use a secure device and keep your account email secure.

10. Your privacy choices and rights

Depending on your location and applicable law, you may have the right to request access to, correction of, deletion of, restriction of, objection to, or portability of your personal data; to withdraw consent; and to complain to a competent data-protection authority.

To exercise a right, email hello@getfacty.com from your account email and describe your request. We may need to verify your identity and may decline or limit a request where the law permits, for example to protect another person’s rights or satisfy a legal obligation. We will respond within the period required by applicable law.

You may uninstall the extension at any time. Uninstalling removes future extension access from your browser but does not automatically delete server-side data, cancel a subscription, or remove data that we must retain by law. To delete an account, contact us at the address above.

11. California disclosures

For California residents, the categories of personal information we collect are described in Section 2. We disclose information to service providers and other recipients as described in Section 5. We do not sell personal information or share it for cross-context behavioural advertising as those terms are defined by California law. We will not discriminate against you for exercising applicable privacy rights.

12. Children

The Service is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe that a child has provided us personal data, contact us and we will take appropriate steps to delete it, subject to legal obligations.

13. Changes to this Policy

We may update this Policy from time to time. If a change is material, we will provide reasonable notice through the website, extension, or account email before it takes effect where required by law. The current version will always show its effective date.

14. Contact

For privacy questions or requests, contact hello@getfacty.com.