PopUp FactCheck — Privacy Policy
Effective Date: January 21, 2026 | Last Updated: January 21, 2026

OVERVIEW
PopUp FactCheck ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our browser extension and related services collect, use, and protect your information.

INFORMATION WE COLLECT

For All Users (Free & Paid)
Video Data Processed:
- Video captions/transcript text (to identify claims)
- Video URL (for caching and context)
- Video metadata (title, channel name) — used for claim context only
Usage Data:
- Extension activation/deactivation
- Number of fact-checks performed
- Time spent with fact-checking active (for free tier limits)
- Error logs (anonymized, for debugging)
Device Information:
- Browser type and version
- Extension version
- Anonymous installation identifier (randomly generated, not linked to identity)

For Paid Subscribers Only
Account Information:
- Email address
- Subscription status and tier
- Payment history (dates and amounts only — we do not store credit card numbers)
Payment Processing:
- Payments are processed by Stripe
- We receive: last 4 digits of card, card type, billing postal code
- Stripe handles: full card numbers, CVV (never transmitted to us)

INFORMATION WE DO NOT COLLECT
- Full browsing history
- Videos you watch (beyond those where you use the extension)
- Personal content from videos
- Your physical location
- Contacts or personal files
- Microphone or camera data
- Full payment card numbers

HOW WE USE INFORMATION
Fact-Checking Service: The extension detects potential claims in video captions, sends them to our servers via encrypted HTTPS, queries authoritative sources (fact-checkers, government databases, news APIs), synthesizes results with AI, and displays verdicts as overlay bubbles. Results are cached to improve performance and reduce API costs.
Service Improvement: Aggregate usage statistics (not individual tracking), error monitoring, and performance optimization.

DATA STORAGE & RETENTION
Cached Fact-Checks: Claim text and results retained 7 days; no personal identifiers attached.
Account Data (Paid Users): Retained while subscription active; deleted within 30 days of account closure. Payment records retained as required by law (typically 7 years).

DATA SHARING
We share data with service providers (AWS — cloud infrastructure; Stripe — payments; OpenAI — AI analysis; all USA) and fact-check sources (Google Fact Check API, Bureau of Labor Statistics, Federal Reserve Economic Data, and news APIs).
We do NOT: sell personal data, share data for advertising, provide data to data brokers, or share individual viewing habits.

YOUR RIGHTS
Access, correction, deletion, portability, and cancellation at any time. To exercise: email support@popupfactcheck.com (response within 30 days).

DATA SECURITY
All data transmission encrypted via TLS 1.3. Servers hosted on AWS with industry-standard security. API keys stored in AWS Systems Manager Parameter Store. No plaintext storage of sensitive credentials.

CHILDREN'S PRIVACY
PopUp FactCheck is not intended for children under 13 and we do not knowingly collect their data.

INTERNATIONAL USERS
GDPR (EU): legal basis is legitimate interest and contract; you may request access, correction, deletion, or portability, and lodge complaints with your local authority.
CCPA (California): you may know what we collect and request deletion; we do not sell personal information; no discrimination for exercising rights.

CONTACT
Contact: support@popupfactcheck.com | PopUp FactCheck, Atlanta, GA, USA