privacy policy
1. Who we are
Resolve Research LLC ("Resolve", "we", "us") is a Maryland limited liability company based in Annapolis, Maryland. This policy covers the Site (resolveresearcher.com and its subdomains) and all Resolve-operated products, applications, and APIs — together, the "Services."
Questions, requests, or complaints: resolveresearcher.com/contact.
2. What we collect
When you create an Account
- Your email address
- A cryptographic hash of your password — we never store the password itself
- Account status and entitlements (tokens, subscription tier, verification state)
Automatically, when you use the Services
- IP address and browser user-agent string
- Request logs: timestamps, endpoints called, response codes, request duration
- A session cookie and a CSRF token, used to keep you logged in
When you run a detector analysis
- The verdict metadata: modality (audio or video), the probability score, the verdict label, detector version, processing duration, and the token cost of the run
- Nothing else. See Section 4.
When you make a purchase
- Stripe processes the payment. We never receive or store your full card number.
- We do store a card fingerprint supplied by Stripe — an opaque identifier that lets us enforce one free trial per payment method. We do not use it for any other purpose and it cannot be used to charge you.
When you subscribe to a brief or email
- Your email address and delivery preferences, plus unsubscribe state.
When you contribute written work for publication
- Your name (published as a byline) and any contact or profile link you ask us to display, together with the work you submit. See the Contributor Terms.
3. What we do not collect
- We do not sell personal information, and we do not share it for cross-context behavioral advertising.
- We do not derive or store biometric identifiers. Our video detector locates and crops faces in order to analyze image and signal properties; it does not compute, store, or compare a facial template, faceprint, voiceprint, or any other identifier capable of recognizing a person.
- We do not use your uploaded media to train models.
4. Uploaded media: how we handle it
This is the part most people care about, so it's plain:
Your uploads are not retained. When you submit a clip for analysis, it is written to temporary storage, scored, and then deleted. What persists is the verdict metadata described in Section 2 — a score and a label, not your file.
Where it goes while we process it. Audio is scored on our own infrastructure. Video is dispatched to Lambda (Lambda Cloud) for GPU scoring and returned; the remote working copy is deleted after the run and the compute instance is ephemeral.
Two exceptions, both narrow:
- Illegal content. We screen uploads against hash sets of known child sexual abuse material. If a submission matches, we do not score it. We preserve the file and associated records, report the matter to the National Center for Missing and Exploited Children as U.S. federal law requires, and restrict the account. Preserved material is held securely for at least one year, as the law requires, and may be held longer if law enforcement requests it.
- Legal obligation. If we are served with a valid legal demand to preserve specific material, we will comply with it, and our normal deletion schedule does not override that obligation.
5. Cookies and similar technologies
See our Cookie Notice for the full detail. We do not respond to browser “Do Not Track” signals; we honor the Global Privacy Control signal as described in Section 9. In summary: strictly necessary cookies — including our aggregated, non-personalized first-party analytics — are always active; advertising technologies are used only with your consent, and you can withdraw that consent at any time.
6. Service providers
We use the following providers, each of which processes data only as needed to deliver the Services:
| Provider | Purpose |
|---|---|
| Cloudflare | Site hosting, DNS, network protection |
| Fly.io | Application hosting and database |
| Lambda (Lambda Cloud) | Video analysis (GPU compute) |
| Stripe | Payment processing |
| Anthropic; Google | Large language model providers generating DeepDive and oracle outputs |
| Google; Resend | Transactional and subscribed email |
| Advertising measurement, with consent, once we begin running ads |
We also load web fonts and icon assets from third-party content delivery networks, which receive your IP address when a page loads.
7. How we use what we collect
- To operate, secure, and debug the Services
- To authenticate you and maintain your session
- To meter and bill usage, and to prevent abuse of free tiers and trials
- To send you transactional email, and subscribed email you asked for
- To comply with legal obligations
- To measure advertising performance, with your consent
We do not make automated decisions with legal or similarly significant effects about you, other than the automated content screening described in Section 4, which is legally mandated and which you may appeal by contacting us.
8. How long we keep things
| Data | Retention |
|---|---|
| Uploaded media | Deleted after scoring. Not retained |
| Verdict metadata and usage logs | For the life of the Account, so you can review your history |
| Account record | Until you delete the Account |
| Request and security logs | We rely on our hosting provider's (Fly.io) platform log retention |
| Card fingerprints | Retained for as long as needed for our anti-abuse purpose |
| Preserved illegal content | Minimum one year, per federal law, or longer on law-enforcement request |
| Email subscription state | Until you unsubscribe, plus a suppression record so we don't re-add you |
9. Your rights
Wherever you live, you can:
- Request a copy of the personal information we hold about you
- Ask us to correct it
- Ask us to delete your Account and the data associated with it
- Withdraw consent for advertising technologies
- Unsubscribe from any email
If you are in the EEA, the UK, or Switzerland, you also have the right to object to or restrict processing, the right to data portability, and the right to lodge a complaint with your supervisory authority. Our legal bases are contract performance (operating your Account), legitimate interests (security, abuse prevention, service improvement, and our aggregated non-personalized first-party analytics), consent (advertising and subscribed email), and legal obligation (the screening and reporting described in Section 4).
If you are a California resident, you have the rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of — but the request channel is the same and we honor the Global Privacy Control signal where your browser sends one.
To exercise any of these, contact us at resolveresearcher.com/contact. We will respond within 30 days. We will not discriminate against you for making a request.
What deletion actually does. When we fulfil a deletion request, we delete your Account record and the personal information attached to it. Any usage or verdict records we keep beyond that point are stripped of your email address, IP address, Account identifier, and card fingerprint, leaving aggregate statistical records not linked to you.
We keep a small amount of information after a deletion request, in the narrow cases the law permits or requires: a suppression record so we don't email you again, records needed to detect and prevent fraud or abuse of free entitlements, and anything we are legally obliged to preserve. We do not keep anything else, and we do not re-link anonymised records to a person.
Two limits worth stating honestly: we cannot produce uploaded media in response to an access request, because we do not have it. And deletion does not extend to material we are legally required to preserve.
10. Children
The Services are not directed to children, and no one under 18 may create an Account. We do not knowingly collect personal information from anyone under 18; if we learn an Account belongs to a minor, we will close it and delete the associated information. If you believe a child has provided us information, contact us and we will delete it.
11. Security
Passwords are stored hashed. Traffic is encrypted in transit. Access to production systems is limited to the owner. Preserved material under Section 4 is held in a restricted location.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any required regulator as the law requires.
12. International transfers
We operate from the United States and our providers may process data in the United States and elsewhere. Where we transfer personal data out of the EEA or the UK, we rely on our service providers' data processing agreements, which incorporate the applicable EU/UK standard contractual clauses, or on an adequacy decision.
13. Changes
We will post the version number and effective date at the top of this policy. For material changes we will notify you by email to your Account address or by a notice on the Site before the change takes effect, and where the law requires consent we will ask for it rather than assume it.
14. Contact
Resolve Research LLC · Annapolis, Maryland, USA resolveresearcher.com/contact