Privacy Notice

Swes operates VeriLens and acts as the data controller for personal data processed through the Service. We decide what data is collected and why, and we are responsible for keeping it safe.

• Account data — email address, and the identifier and basic profile returned by Google if you sign in that way. Used to create and secure your account and to link your plan to you. Legal basis: performance of our contract with you.
• Uploaded media — the images and video frames you submit. Used solely to produce the analysis you requested. Legal basis: performance of our contract.
• Analysis history — results and thumbnails, stored in your own browser so you can revisit recent scans. You can clear this at any time from the history panel.
• Subscription records — the plan you hold, its status and billing period, plus the customer and subscription identifiers issued by our payment provider. Used to grant the right level of access. Legal basis: contract and legal obligation.
• Usage and technical data — quota counters, device and browser information, IP address and error logs. Used for security, fraud and abuse prevention and to keep the Service working. Legal basis: legitimate interests.
• Support messages — whatever you send us when you ask for help. Legal basis: legitimate interests.

• Hosting and infrastructure providers that run the application and database on our behalf.
• AI model providers that perform the authenticity analysis on submitted media.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where we are required to disclose by law.

We do not sell personal data.

Uploaded media is processed to produce a result and is not retained as a long-term library by us; analysis history lives in your browser until you clear it. Account and subscription records are kept while your account is active and for as long as needed afterwards to meet tax, accounting and legal obligations, then deleted or anonymised.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

Subject to the law that applies to you, you may request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time. We respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority.

Contact us through the address published on our site to exercise these rights.

We apply appropriate technical and organisational measures, including encryption in transit, scoped database access rules so accounts can only read their own records, and restricted administrative access.

We use strictly necessary storage only: a sign-in session token, your daily quota counter, and your local analysis history. We do not use advertising or cross-site tracking cookies. Clearing your browser storage removes the quota counter and local history; your plan stays attached to your account.

See our Terms & Conditions and Refund Policy.