Privacy Policy

Effective date: July 19, 2026. Last updated: July 19, 2026.

1. Who We Are

iLens ("we," "us," "our") is operated by iLens Inc., a content authenticity and digitally fabricated media detection company. You can reach us via the contact form.

2. What We Collect

When you create an account we collect:

• Your email address and name (required for account creation and certificate issuance)
• Your company name (optional, collected if you provide it)
• A hashed and salted version of your password. We never store your password in plain text.

When you analyze a video we collect:

• The video file you upload, held temporarily on our servers for the duration of the analysis (typically under 60 seconds) and then permanently deleted
• The SHA-256 hash of your file, stored as part of your forensic certificate record
• Analysis results and the forensic certificate issued, associated with your account
• A timestamp and IP address of the analysis request, used for audit trail and rate limiting

When you browse the site we collect:

• Standard server logs (IP address, browser type, pages visited). Logs are retained for 30 days.

3. How We Use Your Data

• To operate the platform and deliver forensic certificates to you
• To verify your email address and authenticate your sessions
• To enforce daily usage limits and prevent abuse
• To send you transactional emails you have requested (email verification, password reset)
• To maintain our audit trail for issued certificates

We do not use your uploaded videos or your account data to train, fine-tune, or evaluate any AI or machine learning model.

4. How We Share Your Data

We do not sell your data. We share data with third parties only in the following cases:

• SightEngine — video frames are sent to SightEngine's API for AI-detection analysis. SightEngine processes frames only for the purpose of returning a detection score and does not retain your content. Their privacy policy is at sightengine.com.
• Anthropic Claude API — a text description of scene characteristics may be sent to the Claude API for semantic plausibility analysis. No video frames are sent to Anthropic.
• Resend — used to deliver transactional emails (verification, password reset). Your email address is passed to Resend solely for delivery.
• Railway — our cloud hosting provider. Your data at rest resides on Railway infrastructure.
• Polygon blockchain — a cryptographic hash (not your video, not your personal data) may be anchored to the public Polygon blockchain as part of certificate immutability.
• Legal process — we may disclose data when required by law, court order, or valid legal process.

5. Data Retention

• Uploaded video files: deleted immediately after analysis, within 60 seconds of upload
• Forensic certificates and associated hashes: retained indefinitely as part of the certificate chain of custody
• Account data: retained until you request deletion
• Server logs: 30 days
• Sessions: expire after 30 days of inactivity

6. Your Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your account and personal data
• Right to restriction — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests

To exercise any of these rights, send us a message. We will respond within 30 days.

7. EU AI Act Disclosure (Article 50)

iLens is an AI-powered detection system. In accordance with EU AI Act Article 50, which is in effect as of August 2026:

• Our platform uses automated analysis to assess whether video content was generated or substantially modified by AI systems.
• All analysis results include a confidence score and a disclosure that the assessment was produced by an AI-assisted detection system.
• Human expert review is available for contested or inconclusive results.
• Our detection system is calibrated to a 0% false positive rate. A false negative rate of approximately 17% means some synthetic media may not be detected. This limitation is disclosed in every certificate issued.

8. Cookies

We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function. We do not use advertising, analytics, or tracking cookies.

9. Security

We protect your data with industry-standard measures including HTTPS encryption in transit, per-user randomly salted password hashing (PBKDF2-SHA256 with 100,000 iterations), Ed25519 cryptographic signing for all certificates, and RFC 3161 trusted timestamps. We do not store your video files beyond the analysis window.

10. Children

iLens is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a minor has submitted data to us, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy. If we make material changes, we will notify you by email or by posting a notice on the site. Continued use of the service after changes take effect constitutes acceptance of the updated policy.