Privacy Policy

Last updated: September 7, 2026.

Controller: Shelby Benkard Rose, operating under the trade name Aletheia, 1280 Lexington Ave FRNT 2 #1085, New York, NY 10028. Aletheia is a trade name, not a separate company. Privacy contact: [email protected]. EU/UK representative: none currently appointed. Aletheia will reassess this if it begins offering the service to, or monitoring the behavior of, individuals in the EEA or the United Kingdom. Data protection officer: none currently appointed. Shelby Benkard Rose is the privacy contact.

This Privacy Policy explains how Aletheia handles information when you visit https://aletheia-ai.io/, visit Aletheia services, use an Aletheia tool, or contact us. The public website and Aletheia services may have different routing, cookies, storage, and response headers.

1. Information we collect

We collect information reasonably needed to provide, secure, support, and improve the service.

• Information you provide: name, email address, account or organization details, support messages, beta waitlist sign-ups, and content or URLs you submit to a tool.
• Service and security data: IP address, device and browser information, timestamps, request metadata, error logs, and information used to enforce rate limits and prevent abuse.
• Transactional information: the public site displays a $0 beta offer, a $9 per month Individual offer after beta, and a Teams and API contact option. No payment processing is active during the beta, so we do not currently collect payment information. If Aletheia offers a paid service later, we will process the product, price, billing contact, payment status, and transaction history that service needs, and payment credentials will be handled by the payment provider rather than by Aletheia.
• Connected-account information: Aletheia does not currently offer a connection to any third-party account, including TikTok. If we add one, we will collect only the information and permissions shown to you in that authorization flow, and we will describe them here before the connection is offered.
• Cookies and similar technologies: we may use cookies and similar storage and access technologies, including technologies that are strictly necessary for sign-in, security, preferences, and core functionality; optional technologies load only where the law permits and, where consent is required, only after you have given it, and our cookie notice will describe what is in use.
• Analytics: we may use privacy-limited first-party measurement to understand how the service performs. We do not operate a third-party analytics provider, tag manager, advertising pixel, or measurement SDK of our own. The corporate site at https://aletheia-ai.io/ runs on WordPress and loads WordPress.com and Jetpack, Gravatar, and Cloudflare resources. Where any of those performs measurement of its own, we will identify it in our cookie notice and, where consent is required, gate it behind consent.

We do not intentionally collect special category or sensitive personal information unless you choose to submit it or a specific service we have described to you requires it. Please do not submit secrets, credentials, or sensitive information that the tool you are using does not need.

2. How we use information

We use information to:

• provide requested tools, accounts, support, and commercial services;
• calculate results, retrieve and display requested source material, and preserve necessary request context;
• secure the service, detect abuse, enforce rate limits, troubleshoot, and maintain reliability;
• understand aggregate performance and usage through privacy-limited first-party measurement;
• administer a third-party connection that you have authorized;
• meet legal, accounting, and compliance obligations; and
• communicate about a request, account, security matter, or material service change.

We do not use content you submit to train, fine-tune, or evaluate general-purpose machine-learning or artificial-intelligence models. Service providers may process submitted content only as needed to provide the requested service and under applicable contractual and legal controls. Any change to this practice will be disclosed before it begins.

We do not use submitted content to build personal profiles for sale or to build advertising audiences.

We do not use solely automated processing to make decisions producing legal or similarly significant effects about you. If that practice changes, we will provide the information and safeguards required by applicable law.

The current product focus is a bounded fact-checking service. Aletheia may use automated or AI-assisted retrieval, extraction, comparison, and explanation, while preserving uncertainty and routing results for human review where the operating policy requires it. The service is not intended to make employment, credit, housing, insurance, health, legal, or other similarly significant decisions about individuals. Where the EU Artificial Intelligence Act applies, Aletheia will assess its role and the use case and apply the obligations that correspond to that classification, including the applicable AI-literacy, prohibited-practice, and transparency requirements. This statement describes our approach and is not a certification of compliance.

2A. Legal bases for EEA and UK processing

Where the GDPR or the UK GDPR applies, we identify the legal basis for each purpose as follows, subject to the actual processing described above:

Where we rely on legitimate interests, we identify the relevant interest and the balancing assessment in our internal records. Where we rely on consent, withdrawal does not affect processing that occurred before withdrawal.

3. Sale, sharing, and disclosures

Aletheia does not sell personal information for money or other valuable consideration and does not share personal information for cross-context behavioral advertising. We do not disclose personal information to data brokers or advertising networks. Service providers may use information only to perform services for us, subject to appropriate confidentiality, security, and data-use restrictions.

We disclose information only in the circumstances described in Section 5.

4. Cookies and consent

Cookies and similar technologies that are strictly necessary to provide a service you requested, or that exist only to carry a communication, may operate without consent where the law permits. We still describe them in our cookie notice.

Optional analytics, advertising, social-media, and tracking technologies will not intentionally be enabled on either host until the inventory and consent control are complete; after deployment, they will load only where applicable law permits and, where consent is required, only after you have given it. When deployed, our consent control will be a lightweight first-party banner. It will give a clear choice, make refusal as easy as acceptance, use no pre-ticked boxes, and stay reachable so that you can change your choice later. We do not use a third-party consent-management platform.

United Kingdom visitors: since 5 February 2026, UK law has allowed a small number of additional technologies to be used without consent, including first-party statistical technologies used only by us to improve the service, and technologies that adapt the appearance or functionality of the service to your preferences. Where we rely on one of those exceptions we say so clearly and give you a free and simple way to opt out. Technologies used for advertising, cross-site tracking, or profiling still require consent.

Before optional technologies are enabled, we will publish a current inventory of cookies and similar technologies, with providers, purposes, lifetimes, and consent status, and link it from this Policy and from the site footer.

5. Sharing and international processing

We may share information:

• with service providers, which currently include Vercel for application hosting and delivery, Clerk for authentication and sessions where account features are enabled, Upstash Redis for server-side rate limiting where enabled, WordPress.com and Automattic including Jetpack, Cloudflare, and Gravatar for the corporate site and related services, and the service that receives beta waitlist submissions;
• with a third-party service when you ask us to connect to it;
• to protect users, the service, or legal rights;
• in connection with a sale or transfer of the business or its assets, subject to appropriate confidentiality; or
• when required by law or valid legal process.

Aletheia and its providers may process information in countries other than where you live, including the United States. Where a transfer from the EEA or the United Kingdom requires a transfer mechanism, we will rely on an adequacy decision, the EU Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum, as applicable to that provider. You may request a copy of the safeguards we rely on by contacting [email protected].

6. Retention

We keep information for no longer than necessary for the purpose collected, security and abuse prevention, dispute resolution, legal obligations, and reliable operation. We delete, anonymize, or de-identify information when it is no longer needed, subject to lawful exceptions and backup cycles.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, export, or object to processing, and to withdraw consent where processing relies on consent. You may also have the right to complain to a data-protection authority. EEA and UK individuals may generally complain to the authority in their habitual residence, place of work, or the place of an alleged infringement.

To make a request, contact [email protected]. We may need information to verify your identity and complete the request safely. You may use an authorized agent where applicable law allows. We will respond within the period required by applicable law and will not treat you differently for exercising a privacy right.

If you are in the United Kingdom, you may also complain to us directly. We will acknowledge your complaint and respond within the periods UK law requires.

If and to the extent Aletheia is a business under the California Consumer Privacy Act, California residents have rights to know, delete, and correct personal information, to opt out of sale or sharing, to limit certain uses of sensitive personal information, and to receive equal service and price. As Section 3 states, Aletheia does not sell or share personal information, and Aletheia does not use automated decision-making technology to make significant decisions about individuals.

8. Children

The service is intended for adults. You may not use the service if you are under 18, and the service is not directed to children under 13. We do not ask for or verify your age, and we do not knowingly collect personal information from a child under 13. If you believe a child has submitted information to us, contact [email protected] and we will investigate and delete it where required.

9. Security

We use administrative, technical, and organizational safeguards appropriate to the information and the risk, including transport encryption, access controls, and rate limiting. No transmission or storage system can be guaranteed to be completely secure, so please avoid submitting secrets, credentials, or personal information we do not need.

10. Changes

We may update this Policy when our practices, services, or legal obligations change. We will post the revised version with a new "Last updated" date and provide additional notice when required. We will not apply materially adverse changes retroactively to information already collected without notice and, where required, your consent.

11. Contact

Shelby Benkard Rose, operating under the trade name Aletheia 1280 Lexington Ave FRNT 2 #1085 New York, NY 10028

Privacy contact: [email protected]