FreshProof Privacy Policy

Effective October 20, 2026

FreshProof is operated by Corvo Labs and helps writers and editors check factual claims in articles. This policy explains how we handle information when you use FreshProof at freshproof.io. Contact us at info@corvolabs.com about this policy or your information.

Information we collect

Account information. Clerk manages registration, sign-in, and email verification. We use your account identifier and verified-email status to secure your account and associate your reports and subscription with you. If you choose Google sign-in, Google and Clerk process your basic profile information, email address, and account identifier for authentication. We request only basic identity, email, and profile access, not access to your Gmail messages, Drive files, contacts, or calendar.

Articles and reports. We store article text you submit for a report, including text imported from a URL and then submitted, report titles, word counts, source-exclusion preferences, extracted claims, search queries, evidence excerpts and source links, findings, suggested wording, processing status, and timestamps. We also store feedback and notes you submit about findings. Importing a URL sends that URL to our page-retrieval service to fetch its text before you choose whether to submit a report.

Billing and usage. We store credit allowances, reservations and usage, and Stripe customer, subscription, checkout, and invoice identifiers and billing status. Stripe processes payment details through its hosted checkout and customer portal; FreshProof does not store your full payment-card number.

Technical and usage information. Our hosting, security, authentication, and analytics services process information such as IP addresses, browser and device information, cookies or similar identifiers, requests, errors, page visits, and product interactions. When analytics is enabled, we associate usage with your account identifier. The application’s explicitly defined analytics events use identifiers, counts, and status information rather than article text or email addresses.

How we use information

We use this information to authenticate you, process articles, retrieve evidence, produce and save reports, manage subscriptions and credits, respond to feedback and support requests, understand product usage, investigate errors, prevent abuse, and meet applicable legal obligations.

Article text and relevant excerpts are sent to our configured AI processing services to extract and assess claims. Claim-derived queries and requested page URLs are sent to search and retrieval services to find supporting or conflicting sources. Those queries can reveal information from your article. Submit only material you are authorized to share with these services; do not submit passwords, private credentials, or sensitive personal information that is unnecessary for your report.

Google account information is used for authentication and account operation. It is not needed for the article fact-checking task itself.

Service providers and disclosure

We use service providers for hosting and delivery (Vercel and Cloudflare), database storage (Neon), authentication (Clerk and Google when you choose Google sign-in), payments (Stripe), analytics (PostHog), and configured AI, search, and page-retrieval services. These providers receive the information needed for the functions described above. Processing may occur outside your country. Provider handling is also subject to their applicable service terms and privacy policies.

We may disclose information when legally required or when necessary to investigate abuse or protect users and the service. We do not sell your article content or Google account information.

Sharing reports

Reports are associated with your account. If you create a share link, anyone who obtains that link can view the shared report without signing in, including its title, quoted article sentences, claims, evidence, and findings. Treat the link as public and avoid sharing confidential material. You can disable the link in FreshProof; this does not remove copies or exports other people already saved.

Retention and your choices

We retain saved articles, reports, feedback, account mappings, and usage records to operate your account and provide report history. Canceling Pro stops renewal; it does not delete your account or saved reports. The 72-hour report-processing window is not a data-deletion deadline. FreshProof currently has no automatic report-retention limit or self-service account-deletion flow.

Contact info@corvolabs.com to request access, correction, or deletion of your information, or to ask about privacy rights that apply where you live. We may need to verify your identity. Some records may need to be retained for legal, accounting, security, or fraud-prevention reasons, and deleted information may remain temporarily in backups. We will explain applicable limitations when handling your request.

You can use email sign-in instead of Google sign-in and revoke FreshProof’s Google connection through your Google Account settings. Revoking that connection does not itself delete saved FreshProof reports. Browser controls can limit cookies, but blocking authentication storage may prevent sign-in.

Security and updates

We use access controls and service-provider security features to protect information. No online service can guarantee absolute security. We will update this policy as our practices change and publish its effective date here.