Privacy Policy

VVUQ4AI is a research tool operated by Dirk Englund, MIT. Sign-in is via Google OAuth2. We do not sell, share, or use your data for advertising.

Data collected

• Your email + name (Google identity, from OAuth2 sign-in).
• Query text and claim text submitted to the verification endpoints (audit log).
• API request metadata: timestamp, endpoint, response time, HTTP status.
• Issued API keys (hashed).

Retention

• Server access logs: 90 days.
• Verification audit records: 12 months, then anonymised.
• API keys: until revoked.

Opt-out

Send requests with the X-VVUQ-No-Log: 1 header to suppress audit logging for that request. To delete your account data, email [email protected].

Security

All traffic is encrypted in transit via HTTPS/TLS. API keys are stored as bcrypt hashes. Access to production infrastructure requires 2FA.

Contact

Dirk Englund, MIT — [email protected]

Back to VVUQ4AI