Privacy Policy
Effective Date: September 1, 2026 · Version 2.4 · GDPR, CCPA & Google Consent Mode v2 Compliant
Our Binding Zero-Model-Training Guarantee
Acuityio will NEVER use your submitted text, documents, prompts, or API payloads to train, fine-tune, or improve any public, foundation, or proprietary language models. Your data is treated as strictly confidential and processed ephemerally in isolated execution runtimes.
1. Introduction & Overview
Acuityio Inc. (“Acuityio”, “we”, “our”, or “us”) provides an automated, multi-model fact-checking and claim verification platform accessible at https://www.acuityio.online and through our programmatic HTTP APIs and SDKs.
This Privacy Policy explains how we collect, process, secure, and protect customer data when you interact with our services, APIs, and web applications.
2. Technical Encryption & Security Standards
We enforce enterprise-grade defense-in-depth security standards across all layers of our infrastructure:
All traffic to and from our APIs, webhooks, and dashboard is strictly enforced over TLS 1.3 with HSTS (HTTP Strict Transport Security) and forward secrecy ciphers.
All stored records, verification audit logs, and account metadata are encrypted at rest using AES-256 via AWS Key Management Service (AWS KMS) with automated key rotation.
3. Information We Collect & How It Is Handled
Account & Profile Data: Name, work email address, organization name, and authentication identifiers.
Verification Payloads: Text assertions submitted for verification via UI or API. By default, API requests can be configured with ephemeral zero-retention mode, where raw input payloads are purged immediately following pipeline completion.
Payment & Billing Data: Payment processing is handled directly by Stripe. Acuityio never ingests, stores, or transmits credit card numbers on our infrastructure.
4. GDPR & CCPA / CPRA Privacy Rights
Regardless of your geographic jurisdiction, Acuityio affords all customers comprehensive privacy rights under the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA):
- Right to Access & Portability: You may request a complete machine-readable export of all verification logs and account records.
- Right to Rectification & Erasure: You may permanently delete your organization profile, API keys, and historical claim logs at any time.
- Right to Restrict & Object to Processing: You have the right to limit automated processing of your account data.
- Zero Sale of Personal Information: Acuityio does not sell, rent, or monetize personal information to any third party.
5. Third-Party Sub-Processors
We partner only with security-certified cloud and infrastructure providers who maintain SOC 2 Type II and ISO 27001 certifications:
- Amazon Web Services (AWS): Cloud compute, Amazon ECS, AWS Bedrock, OpenSearch, and encrypted storage.
- Stripe: PCI-DSS Level 1 payment processing and subscription management.
- Vercel: Global edge CDN delivery and frontend application hosting.
6. Data Protection Officer (DPO) & Contact Information
For privacy inquiries, Data Processing Agreements (DPAs), standard contractual clauses (SCCs), or data deletion requests, please contact our Data Protection Office: