Privacy

What we process

• Your account: email address, sign-in records, plan and credit usage, and privacy preferences.
• What you submit for analysis: image, video and document files, text you paste, and links you ask us to fetch.
• Results: the verdict, the score, per-frame or per-passage scores, whether Content Credentials were found, and technical facts about the file (format, dimensions, size and a SHA-256 fingerprint). Results never contain the content itself - no frames, thumbnails or excerpts.
• Business API: API key records, request metadata, and any reference ids or context you attach to a request.
• Security and operations: server logs including IP addresses, rate-limit records and security audit events.
• Analytics: cookie-free page-view statistics from a self-hosted analytics service. You can opt out in your account settings; the opt-out applies in every browser where you are signed in.

How long we keep it

• Uploaded and fetched files are deleted automatically about 24 hours after upload.
• Text you paste is deleted about 24 hours after its scan finishes (or sooner if you delete the scan). The result stays in your history; it records which character ranges were analysed, not the text itself.
• Results and history are kept until you delete them or your account.
• PDF reports are kept for 30 days; share links expire after 7 days.
• Business API content (files, text, documents) is analysed and then discarded; the result and its numeric evidence stay in your detection history.
• Rate-limit records are deleted after 2 days, and server logs are rotated away after 14 days.

What we do not do

We do not sell your data. We do not use the content you submit to train or evaluate our detection models. We do not share your content with other detection providers: analysis runs on CESOERA’s own infrastructure.

Who else processes data

Our servers are rented from a hosting provider. Account emails are sent through our email provider. Card payments are not active yet; when they are, a payment processor will handle card details and CESOERA will not see them. The providers and their locations will be listed here after legal review.

Your choices

You can delete individual scans, your whole history or your account from your account settings. Deleting your account removes your scans, results, uploads and reports. Detections made with an organization’s API keys belong to that organization and stay with it when a member leaves. A record that an account was deleted is kept in the security audit log. To ask for a copy of your data or for a correction, email info@cesoera.com.