Last Updated: November 2, 2026
Verifi AI ("we," "our," or "the extension") is a Chrome browser extension that helps users understand and verify AI-generated responses from ChatGPT. This Privacy Policy explains what information we handle, why, and what choices you have. It is written to be read together with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") — where this policy uses a DPDP Act term (for example "Data Principal," meaning you, or "Data Fiduciary," meaning us), that term carries the meaning given to it in the Act.
The extension works in one of two modes, and what happens to your data depends on which you choose in the extension's Settings:
Signing in with Google to use the free tier is how you give us your consent, under the DPDP Act, to process your personal data specifically and only for the purposes described in this policy (operating and securing the free tier — see "How We Use Information" below). We do not ask for, or rely on, consent for any other purpose, and we do not process your personal data for a purpose you have not consented to.
You can withdraw this consent at any time by signing out in Settings or by emailing us to request account deletion (see "Your Rights" below). Withdrawing consent stops further processing going forward; it does not undo processing that already happened before you withdrew it. Own-key mode never requires this consent in the first place, since your conversation text is sent directly from your browser to Google and never reaches our server.
When you click Analyze (or Analyze selected text), the extension reads from the ChatGPT page:
This happens only when you click the button. We do not monitor or collect your conversations in the background.
If you use the free tier you sign in with Google. Our authentication provider (Supabase) receives and stores the basic profile information Google shares for sign-in: your email address, name, profile picture link and a unique account ID. The extension stores your sign-in session tokens in its local storage on your device.
For each free-tier analysis our server records metrics, not content: your account ID, your plan, which AI provider and model handled the request, the number of input and output tokens, how long it took, how many attempts were needed, whether it succeeded or failed (with an error code), and a timestamp and request ID. We do not store the text of your prompts or responses. Counters that enforce daily limits (number of requests and tokens per account per day) are kept in a short-lived cache and expire after about two days.
If you choose to use your own key, it is stored only in the extension's local storage on this device (not synced to your Google account). It is sent only to Google's Gemini API, directly from your browser. You can delete it in Settings at any time.
Results (explanation, relevance and trust scores, claim verdicts with their source links) are stored in the extension's local storage on your device so the popup can show them. They are kept per browser tab and removed when the tab closes, after 24 hours, or when you reinstall the extension.
The extension periodically downloads a small, non-personal list of page-layout hints from our server so it can keep reading ChatGPT correctly when its layout changes. This request carries no account or conversation information. Like any web request, it is visible to our hosting provider as a standard request (for example, an IP address).
When an analysis fails, the popup offers a Copy diagnostics link. It copies a description of the page's structure (element and attribute names, text lengths) to your clipboard. It contains none of your conversation text and nothing is sent anywhere unless you paste and send it yourself.
A History page (opened from the popup's footer link) keeps a short local record of past checks so you can see your own trend over time ("12 checked this week, 3 flagged") and tell entries apart. Each entry stores the outcome of a check: the topic category (for example "health" or "legal"), the trust score, band and verdict breakdown, how many claims were checked, the date, and ChatGPT's own short title for that chat (the same text already shown in ChatGPT's own sidebar — read from the browser tab's title, not from the conversation content). It never stores the claim text, your prompt, or the AI's response. This history is kept only in your browser's local storage, is never sent to our server in either mode, is capped at 200 entries and 90 days, and you can delete it at any time with the Clear history button on that page.
We do NOT:
Your conversation text travels from your browser to our server, which forwards it to an AI provider and returns the result. The server does not store the text. It is processed by:
To avoid repeating work, fact-check verdicts are cached: on your device in own-key mode, and on our server in free mode. The server cache is keyed by a one-way hash of the claim text and stores only the verdict and public source references (article title, link, a short quote from the public article). It does not store the claim text, your conversation, or your account ID, and entries expire automatically within days.
Your text goes directly from your browser to the Google Gemini API using your key, subject to Google's terms for that key. Our servers are not involved in the analysis.
Important: we do not control these third-party services. We encourage you to review their privacy policies.
The DPDP Act requires us to tell you when your personal data is processed or stored outside India. Our service providers operate internationally, so data described above is processed on servers located outside India, including:
None of these providers are in a country the Indian government has restricted personal data from being sent to. We review this list as our providers change.
In line with the DPDP Act, we keep personal data only for as long as it serves the purpose it was collected for, or until you withdraw consent, whichever comes first — except where we are required by law to keep something longer.
No system is perfectly secure, and we cannot guarantee absolute security.
chat.openai.com and chatgpt.com: to read the conversation you ask us to analyze and to show highlights and icons on the page.generativelanguage.googleapis.com: to call Google's Gemini API directly in own-key mode.en.wikipedia.org: to search for and read articles related to claims in the response.1. Choose your mode: you can use your own key and avoid our server entirely.
2. Control: analysis happens only when you click a button.
3. Sign out / delete local data: sign out in Settings, remove your API key in Settings, or uninstall the extension to remove everything stored on your device.
4. Right to Access: you can ask us for a summary of the personal data we hold about you and how it is being processed — email us and we will provide it.
5. Right to Correction and Erasure: if any account information we hold is inaccurate or outdated, or you want your account information and usage records deleted, email us and we will act on your request. (Your Google profile information itself — name, email, picture — is corrected at your Google Account, not with us; we just read what Google gives us at sign-in.)
6. Right to Withdraw Consent: see "Your Consent" above.
7. Right to Grievance Redressal: if you have a complaint about how we handle your personal data, contact our Grievance Officer (below) before approaching the Data Protection Board of India. We aim to acknowledge every request within 48 hours and resolve it within 15 business days.
8. Right to Nominate: you may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, by emailing us with the nominee's name and contact details.
To exercise any of these rights, email the address under "Contact Us" below, stating which right you are exercising and the email address on your account.
In accordance with the DPDP Act, our Grievance Officer is:
Name: Ramansh Tomar
Email: ramansh964@gmail.com
Write "Grievance" in the subject line so it is handled under this process. We aim to acknowledge every grievance within 48 hours and resolve it within 15 business days.
Under the DPDP Act, anyone under 18 is a child, and processing a child's personal data requires verifiable parental consent, which this extension has no way to obtain or verify. Verifi AI is therefore not intended for anyone under 18, and you must be 18 or older to sign in to the free tier or use own-key mode. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe a child has provided us with personal information, please contact us immediately so we can delete it.
We may update this Privacy Policy from time to time. We will notify you of changes by updating the "Last Updated" date above and posting the new policy in the Chrome Web Store listing. Please review it periodically.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: ramansh964@gmail.com
This Privacy Policy is written with reference to: