Privacy Policy

1. What We Collect #

This policy covers ReallySolved™ and every other service Really Solved LLC runs, including AImultisearch.ai, multi-search.ai, Reesolved.com, FixTruth.com, Certainize.ai & FixAI.group. Where it says "ReallySolved" or "the platform", it means all of them.

When you create an account and use ReallySolved, we collect:

• Account information: email address, username/handle, and password hash
• Submitted content: Truths you submit, verification votes, and comments
• SIQ activity: your reputation score history and tier progression
• Device & security data: IP address, browser type, and session tokens, used only for security, fraud prevention, and abuse detection
• Analytics: page views and feature usage, aggregated and anonymized. We use privacy-respecting analytics with no third-party ad tracking

Photos you add to a search. If you are on Plus or Pro and add a photo to a search, one AI reads the photo once and writes a short description of what it sees. You can fix that description before you search. We do not keep the photo. We keep the description only as part of that search, the same as the words you type. The location stored in a phone photo is removed before the photo leaves your device.

The browser extension. If you use our browser extension, ReallySolved: Check AI answers with 3 AIs, it reads text on a page only when you click its button, use its right-click menu or highlight text. It sends that text and the address of that page to ReallySolved to run your check, the same as typing it into the site yourself. It never reads pages in the background and never collects your browsing history. Signing in to the extension is optional. If you sign in with your work email, it keeps your sign-in and a short list of your recent checks on your own device. If your company is verified, you can share any check you want to your company’s shared record so your teammates can see it, or you can keep it private. A shared check saves the text, the page address & the time.

Passkeys. If you add a passkey, your device keeps a private key and we keep only a public key. Your fingerprint or face never leaves your device.

2. What We Don't Collect #

We do not sell personal data. We never have and we never will.

We also do not collect:

• Identity documents or biometric data: KYC verification for the Anonymous Solver tier is handled entirely by our third-party KYC provider (Persona or Onfido). We receive only a verified-tier boolean, a pass/fail signal. The underlying identity data never reaches Really Solved LLC's servers.
• Payment card information: All payments are processed by Stripe. We receive only transaction confirmation and payout metadata. We never see or store card numbers, bank account details, or CVV codes.

3. How We Use It #

We use the data we collect to:

• Operate and improve the ReallySolved platform
• Authenticate your account and maintain session security
• Detect and prevent abuse, spam, and coordinated inauthentic behavior
• Calculate and display SIQ scores and Solver tier standings
• Send transactional emails (account verification, password reset, bounty notifications)
• Comply with legal obligations

We do not use your personal data for advertising or sale to third parties. We do use what you save to your notebook to help you: for example, surfacing related past searches or answers, or suggesting a next search based on your own activity. We do this because it also makes the platform better for everyone, and it is always about your own account, never other users' data, never for outside advertisers. Anything you mark confidential in your notebook is excluded entirely: our systems never tag it, score it, match it to opportunities, or use it to generate a suggestion.

4. Derived Data: De-Identified & Aggregated #

What Derived Data is. In addition to the uses listed in §3, we use content collected through the platform to create de-identified datasets ("Derived Data"). Derived Data may take the form of aggregated or structured derivatives, such as statistical trends, semantic embeddings, feature vectors, points of model disagreement, benchmark datasets, and aggregated accuracy metrics, or de-identified textual records (such as model-disagreement and resolution outcomes) to which our de-identification measures have been applied, compiled from platform activity including user-submitted Truths, multi-model comparisons, and expert-authored resolutions. Derived Data is not sold or licensed in personally identifiable form.

How we use and commercialize Derived Data. Except as set out under "Company plan" below, we may use Derived Data for internal analytics, platform research, product improvement, and benchmarking. We may also license Derived Data to third parties, including AI research organizations, academic institutions, and commercial AI developers, for purposes including AI model training, evaluation, and analytics. This is distinct from selling personal data: we license only de-identified data from which an individual cannot reasonably be identified. See also Terms of Service §6 (Data Ownership & Derived Data) for the full contractual basis.

De-identification standard. Before any Derived Data is commercialized or licensed, we apply our de-identification pipeline, which includes: (a) named-entity recognition and scrubbing via our Presidio-based pipeline, applied to both submitter identifiers and third-party names referenced in content; (b) k-anonymity controls to reduce the risk of re-identification through quasi-identifying combinations; and (c) generalization and bucketing of remaining quasi-identifying fields. For users in the EEA or UK, this process is designed to render the data anonymous within the meaning of GDPR Recital 26, such that the resulting Derived Data is intended to fall outside the scope of personal-data processing.

Downstream licensees. Any organization that receives Derived Data from us is contractually prohibited from attempting to re-identify individuals from it, from combining it with other datasets in a manner that could enable re-identification, and from using it for any purpose other than those specified in the license agreement.

Legal basis (GDPR Art. 6(1)(f). Legitimate Interests). We process submitted content to create Derived Data on the basis of our legitimate interests in operating, improving, and commercially sustaining the platform, and the broader public interest in advancing AI model accuracy and accountability research. We have assessed that this processing does not override users' fundamental rights, given that (a) the commercial output is intended to be anonymized data that is no longer personal data, (b) our de-identification pipeline is designed to strip both submitter and third-party identifiers before any commercialization, and (c) users may object to this processing at any time by contacting privacy@reallysolved.com (we will honor objections for future processing; Derived Data already in circulation in anonymized form cannot be recalled).

Revenue share for votes & corrections. Where a 👍/👎 vote or correction you submitted is included in Derived Data that we license for payment, we pay 50% of the net amount we actually receive for that license to the account that submitted it. This is a separate, contractual promise from the legal basis above: the legitimate-interest basis is what lets us use your submission at all; the 50% share is what you are owed if we do. Objecting under the paragraph above stops your future submissions from being licensed; it does not undo payment already owed for submissions licensed before your objection. See also Terms of Service §6 for the full contractual terms.

Company plan. The data stay with the company & we keep an anonymized record if we can sell the anonymized human corrected data. We use a company’s work to run the Services for that company, keep them secure & meet the law. The company, through its admin, decides who owns the work created on its account. We sell or license only anonymized data, never the work itself or anything that names the company or a person. Where we have agreed terms with a company in writing, including a revenue share, we keep to them. See Terms of Service §6A (Company Plan).

Company log of AI assistant checks. On the Company plan, the company’s admin can turn on a log of the checks your AI assistant makes with us before it acts for you. While it is on, the company can see who made each check, when, the fact checked & the answer. It is off unless the admin turns it on, & only checks made after it is turned on are shown.

What this is not. This section describes the use of de-identified data. It is entirely separate from the "We do not sell personal data" commitment in §2, which remains fully in effect. We do not sell, rent, or trade your personal information. The Derived Data pipeline is designed so that the output is no longer personal data before it leaves our systems for any commercial purpose.

4A. Groups #

This part covers clubs, forums & communities that connect our answers to their own forum. The group’s owner is the person or team who runs that forum & connected it to us.

Your group’s posts & data stay yours. Your forum stays on your own site. Every post in it, written by your members or by our AI, belongs to your group, not to us. We work alongside your forum & own no part of it.

What we keep. To answer well & to point people to answers your group already has, we keep:

• a searchable copy of the title & first post of your forum’s threads
• the questions sent to us from your forum & the answers we post
• any fix or takedown your moderators make, & any report a member sends about an AI answer
• a record of every answer we posted, every answer we held back, & who turned a switch on or off & when

Moderators are recorded by their forum username. Your members do not need a ReallySolved account, & we do not ask for their names or emails. When a member reports an answer or searches your forum through us, we keep a scrambled code made from their network address, never the address itself, so we can stop spam & count 1 report per person.

What we use it for. Only to run the service for your group: answering questions, pointing to earlier threads, letting your moderators approve, fix or take down answers, keeping the service safe & meeting the law. Questions are sent to AI providers as described in §5, without any member’s name or email. We never use your group’s data for advertising.

Nothing is sold unless the owner turns it on. Nothing from your group is sold or licensed, including as Derived Data (see §4), & your members’ corrections are not shared with AI labs, unless the group’s owner turns that on. If the owner turns it on, we use only anonymized data, & the group, not each member, may receive a share of that revenue, agreed with us in writing first. If your forum belongs to a company on our Company plan, the Company plan rules in §4 apply to it too.

Your members. Your members can report any AI answer on your forum. To have something removed from what we keep, a member can ask your group’s moderators or email privacy@reallysolved.com, & we delete it within 30 days.

Switching off & leaving. Your group’s owner can stop all posting at any time. When your group leaves, it removes our access to your forum & we stop reading & posting. Answers we already posted stay on your forum, because your forum is yours: your moderators can edit or delete them like any other post. We keep your group’s records for at least 30 days after it leaves, with a warning to download them first, & your group can get a copy of them. After that we may delete them at any time. If the owner asks us to delete them, we delete them within 30 days.

5. Sharing #

We share data only with the following categories of third parties, and only to the extent necessary:

• AI providers, some outside the USA: when you ask a question, its text (and any link or photo description you add) is sent to the AI models that answer it, so they can write their answers. We never send your name, email or account details. If you are signed in, the AI that writes the final answer also receives a short list of your recent questions and their answers, so it can follow on from them. Each provider handles what it receives under its own terms for business use. On the Company plan, AI providers based outside the USA stay off unless the company's admin turns them on.
• Database & sign-in provider (Supabase): stores your account, saved notes and search history, and runs sign-in. Processes data as a data processor on our behalf.
• Edge network (Cloudflare): runs the service that sends your question to the AI models and returns their answers. Processes data as a data processor on our behalf.
• Email provider (Resend): sends our emails. Receives your email address & the content of the email. Processes data as a data processor on our behalf.
• AI gateway (OpenRouter): passes your question on to some AI models that have no direct account with us. Receives the question text only, never your name, email or account details.
• KYC processor (Persona/Onfido): receives identity data from Anonymous Expert Solver applicants. We receive only a verification result.
• Payment processor (Stripe/Deel): handles all payment and payout transactions. Receives necessary payout information for bounty disbursement.
• Hosting provider (Netlify): hosts the platform. Processes data as a data processor on our behalf.
• Legal compliance: we may disclose data in response to a valid court order, subpoena, or legal process. We will notify you to the extent permitted by law.

Derived Data licensees: We may license de-identified Derived Data (see §4) to AI research organizations, academic institutions, and commercial AI developers. These licensees receive only de-identified data, not personal data, and are contractually prohibited from re-identifying individuals. Data from a Company plan account is never included unless the company’s admin has turned that on.

We do not share personal data with advertisers, data brokers, or marketing platforms.

6. Cookies #

At launch, we use only essential cookies: session authentication, CSRF protection, and security tokens. We do not use third-party tracking cookies or advertising cookies.

We do not use cookies for behavioral profiling, retargeting, or any form of cross-site tracking.

You can block cookies through your browser settings. Blocking session cookies will prevent you from logging in.

7. GDPR: EU & EEA Users #

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:

To exercise these rights, contact privacy@reallysolved.com. We will respond within 30 days.

8. CCPA: California Residents #

If you are a California resident, the California Consumer Privacy Act gives you equivalent rights to know, delete, correct, and opt out of sale of your personal information. We do not sell personal information. Derived Data (see §4) is de-identified data that does not meet the CCPA definition of "personal information" under Cal. Civ. Code §1798.140. We apply the four-part de-identification standard (technical and administrative controls, public commitment, downstream licensee prohibition on re-identification, and no reasonably available re-identification method) before any commercialization.

To submit a CCPA request, contact privacy@reallysolved.com. We do not discriminate against users who exercise their CCPA rights.

9. Thai PDPA: Thailand Residents #

If you are located in Thailand, the Personal Data Protection Act B.E. 2562 (PDPA) grants you rights substantially equivalent to those described in Section 6 above: access, rectification, erasure, portability, and objection.

To exercise your PDPA rights, contact privacy@reallysolved.com. We will respond within 30 days.

10. Data Retention #

We retain account data while your account is active and for at least 30 days after your account is closed, with a warning to download it first. After that we may delete it at any time, oldest data first. If you ask us to delete your data, we delete it within 30 days.

Submitted Truths and verification votes may persist as part of the platform's public record after account deletion, to preserve the integrity of the verification history. On request, we will redact your handle from historical submissions, but the anonymized verification record may be retained.

Security logs (IP addresses, session data) are retained for 90 days and then deleted.

11. Children #

ReallySolved is for users 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will terminate their account and delete their data promptly. If you believe a minor has created an account, contact privacy@reallysolved.com.

12. International Transfers #

ReallySolved's infrastructure is hosted on Netlify, which primarily processes data in the United States. If you access the platform from the EU, EEA, or other regions with data transfer restrictions, your data may be transferred to the US.

Questions sent to AI providers are processed wherever that provider runs its service, which for providers based outside the USA can include other countries.

We rely on Standard Contractual Clauses (SCCs) for EU-to-US data transfers where applicable. Our data processors are required to maintain appropriate safeguards.

13. Contact: Data Privacy #

For all privacy-related requests, questions, or complaints, contact our data privacy team at privacy@reallysolved.com.

Really Solved LLC