Privacy Policy

1. Who We Are

NewSage ApS (c/o Flare)
Kronprinsensgade 1, 2
1114 København
Email: privacy@flare.co
DPO: Nicolai Frost

2. What Data We Collect

Claim Detection Data

• Text content from public posts such as Reddit, X, YouTube
• Claims you interact with
• Platform URLs where claims appear

User Activity Data

• Edits you submit
• Evidence sources you select
• Time spent on claims
• Claims you view

Account Information

• Email address
• Username
• Profile settings
• Expertise areas

Technical Data

• IP address
• Browser type and version
• Device information
• Cookie data

3. Why We Collect Data (Legal Basis)

Legitimate Interest

• Provide claim detection and verification functionality
• Build and maintain the platform
• Improve user experience

Your Consent

• Send notifications about claim updates
• Share your verifications publicly
• Include your contributions in training datasets

Contractual Necessity

• Create and maintain your account
• Provide services you request

4. How We Use Your Data

• Platform Functionality: Detect claims, match to evidence, enable verification
• Reputation Building: Create portable professional profiles showing your expertise
• Data Quality: Generate verified training datasets (anonymized for AI companies)
• Service Improvement: Analyze usage patterns, fix bugs, develop features
• Communication: Send updates about claims you've verified (if enabled)

5. Data Sharing

Third-Party Services We Use

• Search Providers: Exa, Parallel Web Systems, Brave
• Authentication Provider: WorkOS
• Hosting Infrastructure: AWS EU
• Analytics: PostHog EU

Data Processing Agreements: We maintain data processing agreements with all third-party services to ensure GDPR compliance.

What We Don't Do

• We do NOT sell your personal data
• We do NOT use your data for advertising
• We do NOT share personally identifiable information with AI companies

Public Information

• Your verifications and votes are visible to other users
• Your username and reputation metrics are public
• Specific claims you've verified appear in your profile

6. Data Storage & Security

Location: All data stored in EU (Denmark/EU data centers)

Security Measures

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (AES-256)
• Access controls and authentication
• Regular security audits

Breach Notification: We will notify you within 72 hours of discovering any breach affecting your personal data.

7. How Long We Keep Data

• Active accounts: Data retained while account is active
• Deleted accounts: Personal information deleted within 30 days
• Verified claims: Anonymized contributions may remain in public dataset
• Legal requirements: Some data retained for compliance (e.g. 6 months for GDPR)

8. Your Rights (GDPR)

You have the right to:

• Access: Request copy of your data
• Rectification: Correct inaccurate information
• Erasure: Delete your account and data
• Restrict Processing: Limit how we use your data
• Data Portability: Export your data
• Object: Opt out of certain processing
• Withdraw Consent: Change permission settings anytime

How to Exercise Rights: Email privacy@flare.co or use account settings

9. Cookies & Tracking

We use cookies for:

• Authentication (keeping you logged in)
• Preferences (remember your settings)
• Analytics (understand platform usage)

You can disable cookies in browser settings, but some features may not work.

10. International Data Transfers

If we use non-EU services:

• We ensure adequate safeguards (EU Standard Contractual Clauses)
• Your data remains protected to GDPR standards
• You can request details about specific transfers

11. Children's Privacy

Flare is not intended for users under 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy periodically. We will:

• Post the new version with updated date
• Notify you via email for material changes
• Require fresh consent if data use changes significantly

13. Contact & Complaints

Questions: privacy@flare.co

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

14. Browser Extension Permissions

Our extension requires these permissions:

• Read the DOM: To detect claims
• Storage: To save your settings
• Network access: To retrieve evidence from sources

We do NOT:

• Track your browsing outside the platforms where the extension is active
• Access your personal messages
• Monitor your searches