Privacy Policy

1. Information We Collect

1.1 Information you give us

When you submit a form on the Site or request a consultation, we collect:

• Your name and email address
• Your company name
• Any description you give us of how deepfakes are affecting you
• The name of a person or brand you ask us to check
• How you heard about us
• Records of your correspondence with us, if you go on to contact us directly

Giving us this information is voluntary, but we need at least your name and email address to respond to you.

1.2 Information collected automatically

To deliver any page, our hosting provider necessarily processes your IP address and basic request details (the page requested, browser type, and time). It also uses your IP address to tell the Site which country you are connecting from, so we know whether to ask for your consent before running analytics.

Where analytics are active — see Section 1.3 — we also collect:

• Device and connection data: IP address, browser type and version, operating system, and device type
• Usage data: The pages and articles you view, the referring page you arrived from, the date and time of your visit, and how you move through the Site
• Approximate location: A general country or city derived from your IP address. We do not collect precise geolocation.

1.3 Cookies and analytics

The Site uses Google Analytics cookies and a cookie-free visit-tracking script. If you are in the European Union, the wider European Economic Area, the United Kingdom, or Switzerland, neither runs unless you accept them on our cookie banner. Elsewhere they run by default and you can switch them off at any time with the "Cookie settings" link at the foot of every page. Our Cookie Policy sets out each technology, what it collects, and how long it lasts. We do not use advertising or ad-targeting cookies, and we run no advertising or retargeting pixels.

2. How We Use It, and Our Legal Bases

Where data protection law (such as the GDPR or UK GDPR) requires a legal basis for each use, it is the one shown:

• Respond to your enquiry and arrange any meeting you request — to take steps you have asked for before entering into a contract, and our legitimate interest in answering business enquiries
• Follow up with you about our services — our legitimate interest in developing business relationships, or your consent where the law requires it. You can object or unsubscribe at any time.
• Measure and analyse Site traffic, and see which pages led to an enquiry — your consent in the regions listed in Section 1.3 and wherever else the law requires it; elsewhere, our legitimate interest in understanding how the Site is used
• Operate, maintain, and secure the Site, and detect and prevent abuse — our legitimate interest in running a secure website
• Comply with legal obligations and protect our legal rights — legal obligation, and our legitimate interest in establishing, exercising, or defending legal claims

Where we rely on legitimate interests, we have weighed them against your rights, and you may object (Section 7). We do not use the information described in this policy to make automated decisions about you that have legal or similarly significant effects.

3. We Do Not Sell Your Information

We do not sell your personal information, and we do not share it with third parties for cross-context behavioural advertising or targeted advertising. We do not build advertising profiles about you or track you across other websites.

4. Who We Share It With

We share information from the Site only in these circumstances:

• Service providers: The providers listed below, who process information on our behalf or under their own published terms
• Legal requirements: Where required by law, or to establish, exercise, or defend legal rights
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: Where you have given us permission

The service providers involved in running the Site are:

• Google LLC — website analytics (Google Analytics), when active as described in Section 1.3
• A customer relationship management provider — receives enquiries submitted through the Site and, when analytics are active, records Site page visits
• Google Cloud Platform — hosting of the function that receives and forwards form submissions
• Calendly LLC — meeting scheduling, where you choose to book a call
• Netlify — hosting and delivery of the Site, including the country lookup described in Section 1.2

5. Data Security

We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. How Long We Keep It

• Enquiries: Held in our customer relationship management system for as long as we have a prospective or active business relationship with you, and afterwards only where we need to keep a record for legal reasons
• Correspondence: Kept for as long as needed to deal with your query and any follow-up
• Site analytics: Cookies expire as described in our Cookie Policy

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your personal information
• Object to processing based on our legitimate interests, and object at any time to direct marketing
• Restrict certain processing
• Receive your information in a portable format
• Withdraw consent at any time, where we rely on consent, without affecting processing that took place before
• Lodge a complaint with a data protection authority — in the EU or EEA, the authority where you live or work; in the UK, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner
• Not be discriminated against for exercising any of these rights

In Mexico these are known as ARCO rights (access, rectification, cancellation, and opposition).

7.1 How to make a request

Email privacy@revelum.ai describing what you need. If you are in the EU, EEA, UK, or Switzerland, we will respond within one month, which we may extend by up to two further months for complex or numerous requests. Elsewhere we will respond within 45 days, or sooner where your local law requires. If we need to extend, we will tell you before the deadline and explain why. We may need to verify your identity before acting, and we may decline a request where the law allows us to.

You may use an authorized agent to make a request for you. We will ask the agent for proof of your written permission, and we may still ask you to verify your identity directly.

7.2 If we deny your request

You may appeal. Reply to our decision, or email privacy@revelum.ai with "Appeal" in the subject line, and someone other than the person who handled your original request will review it. We will tell you the outcome in writing, with our reasons, within 45 days. If we deny your appeal, you may contact your state attorney general. Appealing is optional: you may complain to a data protection authority at any time, whether or not you have contacted us first.

8. International Data Transfers

We are based in the United States, and the service providers listed in Section 4 process information in the United States and, for some providers, other countries. If you visit the Site from elsewhere, your information will be transferred to and processed there. For transfers from the EU, EEA, UK, or Switzerland, we rely on the provider's certification under the EU-U.S. Data Privacy Framework (and its UK Extension and Swiss-U.S. counterpart) where it holds one, and otherwise on the European Commission's Standard Contractual Clauses, with the UK Addendum where relevant. You can ask us for more information about these safeguards at privacy@revelum.ai.

9. Children's Privacy

The Site is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last Updated" date above, and we will let you know about material changes.

11. Contact Us

Questions about this Privacy Policy, or about how we handle your information, can be sent to: