LEGAL

Privacy Policy

LAST UPDATED: September 1, 2026

This document is provided in English for your convenience. In the event of any discrepancy between this translation and the original Spanish version, the Spanish version shall prevail.

1. INTRODUCTION

VOM ("we", "our", or "the platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use our real-time intelligence verification platform, accessible at this domain and any associated subdomain.

By using VOM, you accept the collection and use of information in accordance with this policy. If you do not agree, please stop using the platform.

2. INFORMATION WE COLLECT

2.1 Information you provide directly:

— Email address (when you create an account) — Password (stored encrypted via secure authentication) — Verification queries you submit to the platform

2.2 Information collected automatically:

— Browser language preference (used for interface localization) — A pseudonymous cookie required to enforce anonymous usage limits — IP address processed for security and usage limits, without retaining the raw IP address in optional product events — General operational data (query timestamps and response times)

If you choose “Accept all,” we also collect optional product analytics: a temporary session identifier, approximate country, language, device category, acquisition source, visited path, and feed interactions such as card impressions, publisher opens, source clicks, and verification requests. These analytics do not include your email address, query text, full IP address, exact city, or full user-agent string.

2.3 Information we do NOT collect:

— Your name, phone number, or physical address — Payment information (processed entirely by external providers) — Advertising identifiers or cross-site tracking cookies — Social media profiles or third-party account data

3. HOW WE USE YOUR INFORMATION

We use the collected information to:

— Provide and operate the verification platform — Authenticate your account and maintain session security — Enforce usage limits and prevent abuse — Store your verification history for your personal reference — Improve the accuracy and performance of our systems — Communicate service updates or security notices (by email only)

Optional analytics are used only for aggregate statistics and to improve the feed and product experience. We do not create named browsing histories, use this data for advertising, or sell it to third parties. We do not use your queries to train AI models without explicit consent.

4. AI PROCESSING

VOM uses external AI providers, including language model and embedding services, to analyze and verify claims. Your input text is sent to these providers exclusively to process your verification request, in accordance with our data processing agreements and applicable privacy laws.

These providers are contractually prohibited from using your queries to train their models or retaining your data beyond what is necessary to fulfill the request.

We do not sell your queries to AI providers or any third party. Your queries are used exclusively to produce the verification result you requested.

5. STORAGE AND SECURITY

Your data is stored using Supabase, a secure cloud database platform. All data is encrypted at rest and in transit using industry-standard TLS.

Authentication is managed by Supabase Auth. Passwords are hashed with bcrypt and never stored in plain text. We do not have access to your password.

Although we implement reasonable security measures, no system is completely secure. We recommend using a unique, strong password and notifying us immediately if you suspect unauthorized access to your account.

6. DATA RETENTION

We retain your account information and verification history while your account remains active. Anonymous queries are stored in our shared cache database without personal identifiers.

For optional product analytics, we remove the temporary session identifier and detailed event properties after 30 days and delete the remaining event record after 90 days. Feed events are not linked to your email address or presented as individual browsing histories.

You may request the deletion of your account and all associated data at any time by contacting us. We will delete your personal data within 30 days, unless retention is required by law.

7. THIRD-PARTY INFRASTRUCTURE

VOM uses the following infrastructure providers to operate:

— Supabase — provides database and authentication services. — Vercel — hosts the platform infrastructure. — Upstash Redis — provides usage-limiting services and a short-lived pseudonymous analytics delivery queue retained for up to 7 days. IP addresses used for rate control are processed by Upstash. — Third-party AI services — process verification queries as described in Section 4. They operate under data processing agreements that prohibit unauthorized retention or use.

We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes.

8. REFERRAL PROGRAM DATA

If you participate in the referral program, we collect and retain your personal referral code, the relationship between the referring and referred accounts, referral qualification status, creation and qualification timestamps, and the number of rewards granted.

We use this data to attribute new registrations, display program progress, determine when a referred person completes their first verification, grant promotional Pro access, and prevent fraud or abuse. The referral dashboard displays progress and reward status; it does not display the referred person's verification content.

We retain referral program data while the related accounts remain active and as reasonably necessary to administer rewards, resolve disputes, prevent abuse, and comply with legal obligations. Requests for access, correction, or deletion are handled under the retention and rights sections of this policy.

9. YOUR RIGHTS

Depending on your location, you may have the following rights:

— Access: Request a copy of the personal data we hold about you — Correction: Request correction of inaccurate personal data — Deletion: Request deletion of your personal data — Portability: Request your data in a portable format — Objection: Object to certain types of data processing

These rights apply to users in the European Union (GDPR), California (CCPA), and other jurisdictions with applicable privacy legislation.

10. COOKIES

VOM uses the minimum cookies necessary for the platform to function:

— Authentication cookies: Necessary to keep your session active — Usage-limit cookie: Necessary to enforce anonymous usage limits — Preference cookie: Records whether you accepted or declined optional analytics

Product and performance analytics activate only when you choose “Accept all.” You can withdraw or change your choice at any time through “Cookie settings.” We do not use advertising cookies or cross-site tracking.

11. CHILDREN'S PRIVACY

VOM is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately and we will delete it without delay.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. We will notify registered users of material changes by email. The date at the top of this page reflects when it was last updated.

13. CONTACT

For privacy-related requests, questions, or concerns, contact us at legal@vom-app.com. This is the official channel for GDPR, CCPA, and LGPD rights requests. We will respond to all legitimate requests within 30 days.