Privacy Policy

1. Who We Are

askepstein.ai is an independent community research platform. This policy explains how we collect, use, and protect information when you use the Platform.

Operator: BlackVeil Security Ltd, New Zealand.

2. Information We Collect

2.1 Account Data

When you create an account, we store a pseudonymous handle, optional display name, and a hashed access token. We do not collect email addresses, passwords, real names, or phone numbers.

2.2 User-Generated Content

Stories, research items, comments, votes, and board contributions you create are stored in our database and publicly visible.

2.3 AI Chat Queries

Questions you send to the AI assistant are processed in real-time to generate responses. We may retain anonymised query logs for service improvement. Queries are not linked to your account identity.

2.4 Technical Data

We automatically collect standard technical data including IP addresses, browser type, and page views via Cloudflare's infrastructure. This data is used for security, abuse prevention, and aggregate analytics only.

3. How We Use Information

• To provide, maintain, and improve the Platform
• To authenticate your account via token-based auth
• To display your public contributions (stories, research, comments)
• To detect and prevent abuse, spam, and malicious activity
• To respond to legal requests and protect our rights

We do not sell personal data. We do not use data for advertising. We do not build individual profiles for marketing purposes.

4. Data Storage & Security

Data is stored on Cloudflare's global edge network using D1 databases. Access tokens are SHA-256 hashed before storage — we cannot read your raw token. All traffic is encrypted via TLS.

5. Data Sharing

We share data only in these limited circumstances:

• Public content: Stories, research, comments, and board contributions are publicly visible by design
• Service providers: Cloudflare (infrastructure), Workers AI (AI processing) — under their respective privacy policies
• Legal compliance: When required by valid legal process (court orders, subpoenas)

6. Cookies & Local Storage

We use browser localStorage to store your authentication token. We use essential Cloudflare cookies for security (e.g., bot detection). We do not use tracking cookies, advertising cookies, or third-party analytics.

7. Your Rights

You may:

• Delete your account: Via Settings → Danger Zone. This permanently removes all your data.
• Access your data: Your public contributions are visible on your profile page.
• Rectify your data: Update your display name and bio in Settings.

For data access requests or complaints, contact privacy@askepstein.ai.

8. Evidence File Subjects

Evidence media files hosted on this platform may depict identifiable individuals. These files are public court records from the U.S. Department of Justice and are served unmodified. Regarding individuals depicted in evidence files:

• This platform does not perform facial recognition, voice identification, or any automated identity extraction on evidence media files
• This platform does not create metadata linking evidence media to named individuals beyond what exists in the original DOJ evidence cataloguing
• Victims and witnesses (or their legal representatives) may request removal of specific evidence files via our victim media takedown process

For privacy concerns related to evidence media files, contact privacy@askepstein.ai.

9. Children

The Platform is not intended for use by anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

Access to evidence media files requires age verification confirming the user is 18 years or older, in addition to the general platform minimum age of 16.

10. International Data & Cross-Jurisdiction Rights

The Platform operates on Cloudflare's global edge network. Data may be processed in multiple jurisdictions including New Zealand, the United States, and the European Union.

EU/UK Residents: If you believe your data protection rights under GDPR or the UK Data Protection Act have been infringed, contact privacy@askepstein.ai citing the applicable regulation. We will respond within 30 days.

New Zealand Residents: Your rights under the Privacy Act 2020 (NZ) apply. Contact the Privacy Commissioner (privacy.org.nz) if you are unsatisfied with our response.

All Users: You may submit a dispute to request correction or removal of data about you.

11. Changes

We may update this policy from time to time. Changes will be reflected with an updated "Last updated" date. Continued use of the Platform constitutes acceptance.

12. Contact

Privacy questions: privacy@askepstein.ai

General legal: legal@askepstein.ai