Privacy policy for the tools

1. Who is responsible

Tinta Tech, located at Balmoral 309, Santiago, Chile, is responsible for processing your data. For any question or request about your data, write to hola@tintatech.com.

2. What data we process

• Your email address. We ask for it when you want to see a result. We confirm it with a 6-digit code and use it to create your account.
• The files and text you submit to the tools that need to read them (documents, images, audio, pasted text and web addresses).
• Certificate data: the SHA-256 fingerprint of each file, its name, type and size, the timestamp date and, depending on the tool, descriptive data declared by the file itself (for example a photo's date and device, a thumbnail, or a chat summary).
• Usage data: which tool you used and at which step, with an anonymous visit identifier. Your IP address is stored only as an irreversible fingerprint, to limit abuse.

3. What never leaves your device

In the file, photo and chat certification tools, in certificate verification and in the metadata tool, the file is not uploaded: your browser computes the fingerprint and reads the metadata, and only that is sent. We never receive the content of those files.

4. What we use your data for

• To give you the result on screen and by email, and let you see it again.
• To issue certificates and let anyone verify them with their code.
• To measure how the tools are used in order to improve them, and to prevent abuse.
• To send you Tinta Tech updates, only if you ticked that box. It is optional and you can unsubscribe at any time.

We do not sell your data or use it for targeted advertising.

5. How long we keep them

• Uploaded files: deleted as soon as processing ends and, as a safeguard, a daily cleanup removes anything left within 48 hours.
• Results (summaries, translations, transcripts, website captures and the like): available for at least 24 hours; a daily cleanup deletes them within 48 hours.
• Certificates: kept for as long as the service exists, because their purpose is to be verifiable in the future. They contain fingerprints and descriptive data, not the file.
• Your email and account: until you ask us to delete them.

6. Who we share them with

We use providers that process data on our behalf, only to deliver the service:

• Artificial intelligence providers. Tools that analyze content send that content to third-party AI models to produce the result. Do not use these tools with information you cannot share with an external provider.
• Hosting, database and storage for the site, with servers in the United States and Brazil.
• Email delivery, for the verification code and the results.
• Timestamping authority. It receives only the file's fingerprint, never the file or your data.

This involves international data transfers. We may also disclose information when required by law or by a competent authority.

7. Certificates are public to anyone with the code

Anyone who knows a certificate's code can open its verification page and see the data it contains, including the file name, descriptive data and thumbnails. Share it only with the right people. Certificate pages are not offered to search engines.

8. Cookies and measurement

• A session cookie, needed to recognize you after you confirm your email. It lasts 30 days.
• Your light or dark theme preference, stored in your browser.
• Visit measurement, our own and with Google Analytics. The site also loads the Google AdSense code used by Tinta News, which may set Google cookies. You can block them from your browser.

9. Your rights

You can ask us to access your data, correct it, delete it, object to its processing or receive a copy, and withdraw your consent to receive updates at any time. Write to hola@tintatech.com from your account's email address and we will respond within the legal deadlines. These rights are exercised under Chilean personal data protection law; if you live elsewhere, you may have additional rights under your local law. If you delete your account, the certificates you issued remain without any link to you, unless you also ask us to delete them.

10. Other people's data and minors

If you submit content containing other people's data (a chat, a contract, a recording), you are responsible for having the right to do so. The tools are not directed at children under 14.

11. Security and changes

We apply reasonable technical measures: encrypted connections, database access restricted to the server and automatic file deletion. No system is infallible. If we change this policy, we will publish the new version here with its date.