Privacy Policy

1. Introduction

Welcome to TrustLokki. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, services, and applications (collectively, the "Service"). Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Subscribe to our newsletter or beta waitlist
• Contact us via email or contact forms
• Use our verification services
• Participate in surveys or feedback forms

This information may include: name, email address, phone number, and any other information you choose to provide.

2.2 Automatically Collected Information

When you access our Service, we may automatically collect certain information, including:

• Device information (device type, operating system, browser type)
• IP address and geographic location
• Usage data (pages visited, time spent, features used)
• Cookies and similar tracking technologies
• Referral source and exit pages

2.3 Content Submitted for Verification

When you use our verification tool, we collect the text, travel claims, social media captions, or URLs you submit for analysis. This content is transmitted to OpenAI's API for AI-powered processing and fact-checking. The search queries generated during verification are also processed by Tavily (our web search provider). In addition, anonymised event data — including the input type selected and the first 100 characters of your query — may be logged via Google Analytics to help us understand how the tool is used. We do not store your submitted content on our own servers beyond the duration of a single verification session.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing, maintaining, and improving our Service
• Processing and completing verification requests
• Creating and managing your account
• Sending you updates, newsletters, and promotional materials (with your consent)
• Responding to your inquiries and providing customer support
• Analyzing usage patterns to improve user experience
• Detecting, preventing, and addressing technical issues and fraud
• Complying with legal obligations and enforcing our Terms of Service
• Conducting research and development to enhance our AI verification technology

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share data with the following third-party service providers who perform services on our behalf:

• OpenAI — AI language model processing. Verification content you submit is sent to OpenAI's API to power our fact-checking analysis. OpenAI's privacy policy applies: openai.com/privacy
• Tavily — Web search provider. Search queries generated during verification are processed by Tavily to retrieve relevant web results. Tavily's privacy policy applies: tavily.com/privacy
• Google Analytics — Usage analytics. We use Google Analytics 4 to collect anonymised data on how visitors use our site, including event data such as verification queries (first 100 characters). Google's privacy policy applies: policies.google.com/privacy
• Render — Backend hosting. Our verification API is hosted on Render's cloud infrastructure (US West, Oregon). Render's privacy policy applies: render.com/privacy
• Cloudflare Pages — Frontend hosting and CDN. Our website is served via Cloudflare's global network. Cloudflare's privacy policy applies: cloudflare.com/privacypolicy

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.4 Protection of Rights

We may disclose your information when we believe it is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

4.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.

Types of cookies we use:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how visitors use our Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track your browsing habits to deliver relevant advertisements (with your consent)

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Secure server infrastructure
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it. Content submitted for verification may be retained to improve our AI models and services, but will be anonymized where possible.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your information to another service
• Objection: Object to our processing of your information
• Restriction: Request restriction of processing your information
• Withdraw Consent: Withdraw consent for processing where consent was given

To exercise these rights, please contact us at hello@trustlokki.com. We will respond to your request within 30 days.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us. If we discover that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy, including using standard contractual clauses approved by regulatory authorities.

11. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Do Not Track Signals

Some web browsers have a "Do Not Track" feature that signals websites that you do not want to have your online activities tracked. Our Service does not currently respond to Do Not Track signals. However, you can set your browser to refuse all or some cookies, or to alert you when cookies are being sent.

13. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell personal information. To exercise your CCPA rights, contact us at hello@trustlokki.com.

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

Our legal basis for processing your information includes consent, contractual necessity, legal obligations, and legitimate interests. You have the right to lodge a complaint with your local data protection authority.

15. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. For material changes, we will provide a more prominent notice (including, for certain services, email notification). You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to all requests, inquiries, or concerns within 30 days.