Controller: Fleissner Digital LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States. Email: contact@uploadcheck.net.
Hosting and operations: Strato hosts the website; Render operates the backend and business database. Technically necessary connection and log data, such as IP address, time, resource and browser information, are processed for availability and abuse prevention.
Contact and feedback: We process your message and account email to reply. If you link a scan, we receive its ID and title; the original file is not sent. Support requests go to support@uploadcheck.net; ideas and general feedback go to feedback@uploadcheck.net.
Upload processing and Google Gemini API: Depending on the upload path, images and videos pass through the UploadCheck backend or go directly to a private Google Cloud Storage bucket before analysis with Google Gemini. Temporary copies are deleted after processing; automatic cleanup rules apply if errors occur. We do not use the files to train our own AI models.
Payments: New subscriptions and scan packs cannot yet be purchased in the public beta. Stripe will process payments when purchasing is enabled. Existing entitlements and billing records are processed to provide contracted services.
Cloudflare Web Analytics: Cloudflare Web Analytics is used to measure reach and performance. Cloudflare may process technical usage data for this purpose.
Local settings and allowances: Language, appearance, currency and a random device identifier are stored in your browser. A confirmed user’s free allowance belongs to their account, not a shared remaining device allowance. We process pseudonymous device/account links and usage records for entitlements and abuse prevention. A non-reversible account- or device-scoped file fingerprint and analysis result can remain in the technical cache for up to 90 days; original media is not retained there.
Your rights: Where legal conditions apply, you can request access, correction, deletion, restriction and portability, and object to processing. You can withdraw voluntary consent at any time for future processing. You may complain to a competent data protection authority. Contact: contact@uploadcheck.net.
Sign-in and error diagnosis: Supabase processes authentication and sessions; Resend delivers confirmation and sign-in emails. Sentry supports technical error diagnosis. By default, we remove user data, request bodies, cookies, headers and URL query parameters from error reports. These services receive data intended for their respective tasks.
Purposes, legal grounds and transfers: Account, scan and support processing provides the service you request. Necessary security measures serve our legitimate interest in operating a secure service. Voluntary product improvement and optional campaign measurement require separate consent. These providers may process data outside your country, including the United States. Google’s API data terms also apply; we do not use your original media to train our own models. Technical backups may persist until their backup cycle expires. Statutory retention duties remain applicable.
Google retention: Under its Gemini API abuse-monitoring policy, Google retains prompts, associated contextual information and analysis responses for 55 days to detect and prevent policy violations and for required legal disclosures. This security logging is separate from deletion of temporary upload copies at UploadCheck. Logged content may be reviewed by authorized Google staff and used for policy-enforcement models.
Encrypted backups: We back up Supabase account, authentication and support-ledger data daily, encrypted, in private Google Cloud storage in Frankfurt. Original media is not part of this database backup. The automatic deletion rule applies from seven days, followed by a further seven-day recovery period. Execution is asynchronous and does not promise final deletion at an exact instant. The private decryption key is held separately from the backup service. Deletions in the live system do not immediately remove older backup copies.
Completed support requests: The retention automation covers only messages in the designated completed folder. Twelve calendar months after first recording a message there, it moves the message to Trash recoverably; it does not empty Trash. This does not automatically erase all support-mailbox data.
Your data and preferences
Signed-in scan results are saved to your personal history by default. In your account you can turn off new saving and delete individual results, your entire history or your account. Turning saving off keeps existing results. Cancelling a subscription or inactivity currently does not automatically delete history; there is no fixed result expiry. Original images and videos are not stored in history. The technical result cache is separate. History also stores a small private preview (up to 20 KB), if your device can create one. It is deleted together with its scan; turning off history saving prevents new previews from being saved.
Reported platform outcomes are personal entries. Only with your separate voluntary agreement do we use existing and future reported outcomes together with scan predictions for product improvement. No original media is stored for this purpose. Withdrawal in your account deletes these contributions; personal outcomes remain.
Campaign measurement starts only after separate voluntary agreement. A random browser token and campaign-link attribution last 30 days. After sign-in, attribution can be linked to your account. We count visits, pricing views, scan attempts and server-confirmed registrations, scans and purchases. Original media is not stored for this purpose. Withdrawal under “Campaign measurement” deletes attribution and events for that browser token; account deletion also removes account-linked campaign data.
Age confirmation: We store your declaration that you are at least 18, together with the time, declaration version and confirmation method, with your account to enforce the access requirement. This self-declaration does not collect your date of birth or an identity document. The record is deleted with your account, subject to statutory retention requirements.