1. Who We Are

ShadowTag, Inc. ("Company", "we", "us") operates HeadFade at headfade.com. This Privacy Policy describes how we collect, use, and protect your personal information when you use our AI-powered video forensics platform.

2. Information We Collect

Account Information

Email address and display name via Firebase Authentication. We never store raw passwords.

Video & Media Data

Videos you upload for analysis, including extracted metadata, HDI (Head Displacement Index) scores, and SynthID watermark detection results.

Usage Data

Search queries, voting activity, page visits, and interaction patterns. Analytics are collected via Google Analytics with Consent Mode v2.

3. How We Use Your Data

• Authenticate your identity and prevent fraud
• Analyze uploaded videos using AI models (Google Gemini via Vertex AI)
• Generate HDI scores, forensic reports, and deepfake detection results
• Process payments via Stripe (we never touch card details)
• Improve our services through aggregated analytics

4. Where Your Data Lives

All data is stored within Google Cloud Platform in the us-central1 region. This includes Firestore (user profiles), Cloud Storage (media uploads), BigQuery (analytics), and Vertex AI (AI inference).

5. Data We Never Collect

• Social Security numbers or government IDs
• Raw credit card numbers (handled by Stripe)
• Biometric data beyond AI-generated analysis scores
• We never sell, rent, or trade your personal data to third parties

6. Your Rights

GDPR (EU/EEA): Access, rectification, erasure, portability, restriction, and objection rights.

CCPA (California): Right to know, delete, opt-out of sale (we do not sell data), and non-discrimination.

To exercise any right, email privacy@shadowtagai.com.

7. Account Deletion

You may delete your account at any time from Account Settings. Your data will be permanently removed within 30 days. Backup copies are purged within 90 days.

8. Security

We use HTTPS/TLS encryption, AES-256 at rest, Firebase Security Rules, Content Security Policy headers, and regular security audits to protect your data.

9. Contact

ShadowTag, Inc. — privacy@shadowtagai.com