Back to Studio

Privacy Policy

Effective Date: October 13, 2026 • Last Updated: October 17, 2026

1. Who We Are

Credsly is operated by Ronan Stanford, an individual based in Canada ("we", "us", or "our"), who is responsible for the personal information described in this policy. This policy explains what we collect when you use Credsly, why, who we share it with, and the choices you have.

We do not sell or rent your personal information or the text you submit, and we do not use advertising or cross-site tracking.

2. Information We Collect

  • Account information: your name, email address, and a hashed (never plain-text) password. If you sign in with Google, we receive your name, email address, profile photo, and Google account ID instead of a password.
  • Login sessions: when you sign in, we store a session record that includes your IP address and browser type (user agent). Sessions expire automatically.
  • Subscription information: your plan, subscription status and billing dates, and a customer ID from our payment provider. We never receive or store your card details.
  • Text you check: the text you submit is processed to run your check and sent to the service providers below. We do not save it to our database.
  • Draft saved in your browser: your current draft is saved in your own browser's local storage so it survives a page refresh. It stays on your device and is not sent to us until you run a check.
  • Technical data: our hosting provider records basic request logs, such as IP address, time, and page requested, for security, troubleshooting, and rate limiting.
  • Usage analytics: which pages you visit and which features you use (for example, starting a check, its word count and number of claims, opening checkout, signing in), plus browser errors, device and browser type, and approximate location from your IP address. If you are signed in, these are linked to your account ID, name, and email address. The text you check is excluded.

3. How We Use Information

  • To provide the Service: running checks, managing your account, and giving Pro subscribers their plan.
  • To send account emails, such as email verification and password resets. We do not send marketing emails.
  • To understand how the Service is used and to find and fix errors, so we can improve it.
  • To keep the Service secure and available, including rate limiting and preventing abuse.
  • To meet legal and tax obligations.

4. Service Providers We Share Information With

We use the following providers to run Credsly. Each receives only what it needs for its task:

  • Cloudflare: hosting, database, and request logs (all of the data above except your browser draft).
  • Google Gemini API: the text you submit, to identify claims and evaluate evidence. Under Google's paid API terms, Google does not use this data to improve its products.
  • Tavily: web search queries generated from the claims in your text.
  • Wikimedia Foundation (Wikipedia): search queries generated from the claims in your text.
  • Creem: our Merchant of Record, which processes payments and subscriptions and receives your email address, billing details, and payment information.
  • Resend: delivers account emails and receives your email address and the email content.
  • PostHog: product analytics and error tracking. Receives the usage analytics described above, never the text you check.
  • Google Sign-In: only if you choose "Continue with Google".
  • Google Fonts: our pages load fonts from Google's servers, which means Google receives your IP address when you visit.

We may also disclose information if required by law, or to protect the rights, safety, or security of our users or the Service.

5. International Transfers

Our service providers may process and store information outside Canada, including in the United States, where it may be subject to the laws of those countries.

6. Cookies and Local Storage

We use a strictly necessary cookie to keep you signed in. Your browser's local storage holds your unsaved draft. Our analytics provider, PostHog, sets a first-party cookie and local storage entry with a random ID so it can tell visits from the same browser apart. We do not use advertising or cross-site tracking cookies.

7. How Long We Keep Information

  • Account and subscription information: for as long as your account exists. When you ask us to delete your account, we delete it within 30 days.
  • Login sessions, email verification links, and password reset links: these expire automatically.
  • Hosting request logs: kept for a short period, typically a few days.
  • Payment and tax records: kept by Creem for as long as the law requires.

8. Your Rights

Depending on where you live, including under Canada's PIPEDA, the EU and UK GDPR, and California's CCPA, you may have the right to access, correct, delete, or receive a copy of your personal information, and to withdraw your consent. To make a request, email us from the address on your account. We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or to the data protection authority where you live.

9. Children

Credsly is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, contact us and we will delete it.

10. Security

We protect your information with encrypted connections (HTTPS), hashed passwords, and restricted access to our systems. No online service can guarantee perfect security, so please use a strong, unique password.

11. Changes to This Policy

We may update this policy. We will post the new version on this page with a new "Last Updated" date and notify account holders by email of material changes.

12. Contact

For privacy questions or requests to access or delete your data, contact:
Email: support@credsly.com