Privacy Policy

On registration: • Email address • Name (optional) • Company name (optional) During Service use: • Numerical analysis results (deception score, signal averages) • Text labels (flags) • Session metadata (date, question count, verdict) Local mode (on-device): video/audio are processed on your device; only numerical metrics are sent to the server. Server mode / remote sessions: answer transcripts and the video/audio stream are processed by our sub-processors (see "Sub-processors and data transfers"). You choose the mode before each session.

In local mode, all video and audio processing happens LOCALLY on your device: • Face analysis runs on your device • Emotion neural network runs on your device • Web Audio API analyzes voice in browser • Camera and microphone are NOT streamed to server In local mode, only numerical results are transmitted to the server (e.g., stress=45%, blink=23%, score=67). In server mode and during remote sessions, some data is processed by sub-processors — see the next section.

Depending on the analysis mode you choose, your data may be processed by our sub-processors: • OpenAI, L.L.C. and/or Anthropic, PBC — processing of answer transcripts for AI analysis (only when server-side analysis is enabled). Data is processed ephemerally and is not used for model training under the API terms. • LiveKit — transmission of the video/audio stream during remote sessions. • Supabase (EU region) — authentication and profile storage. The full list of sub-processors and current DPAs is available on request: privacy@red-rabbit.io.

• To provide services (session history, reports) • To improve algorithms (anonymized statistics) • For communication (account emails) We do NOT sell your data. We do NOT use data for advertising.

• Stored in Supabase (EU region, PostgreSQL) • Encrypted in transit (TLS/SSL) and at rest (AES-256) • Row Level Security — each user sees only their data

You have the right to: view, export, delete your data, withdraw consent, file a complaint. Contact us at [email]. We respond within 30 days.

Minimal cookies: auth session (Supabase), language preference (localStorage). No tracking cookies, analytics or ad pixels.

Service is not intended for persons under 18. We do not knowingly collect data from minors.

We may update this Policy. Significant changes communicated via email 30 days in advance.

RedRabbit Technologies LLC, Delaware, USA. Email: [contact email]