REDFLAG PRIVACY POLICY

Last Updated: September 4, 2026

This Privacy Policy explains how Karapetyan Sargis Hamleti IE (Individual Entrepreneur, Republic of Armenia, TIN 23410543), doing business as RedFlag ("RedFlag," "we," "us," or "our"), collects, uses, stores, and protects information when you access or use the RedFlag website, browser extension, applications, and related services (collectively, the "Service").

By using RedFlag, you acknowledge the practices described in this Privacy Policy.

1. What RedFlag Does

RedFlag is an AI-assisted video and speech analysis service.

Users may submit or provide links to video content for analysis. RedFlag analyzes available verbal, paraverbal, and nonverbal signals and highlights portions of the content where these signals may diverge.

RedFlag is not a facial-recognition system and is not designed to identify individuals.

RedFlag does not determine whether a person is telling the truth or lying.

Because the Service processes video, audio, speech, facial characteristics, and derived analytical information, we take the privacy implications of this processing seriously.

2. Information We Collect

Depending on how you use RedFlag, we may collect the following categories of information.

A. Account Information

If you create an account, we may collect:

• name or display name;
• email address;
• account credentials or authentication information;
• subscription status;
• account preferences; and
• other information you voluntarily provide.

B. Payment Information

When you purchase a subscription, payment information may be collected and processed by our third-party payment provider.

We generally do not store complete payment-card numbers on our own systems.

Our current payment provider may include Polar (Polar Software Inc.) or another payment processor.

Payment transactions may therefore also be subject to the provider's privacy policy and terms.

C. Video and Audio Content

When you upload a video or provide a video for analysis, we may process:

• video files;
• audio tracks;
• speech contained in the audio;
• frames extracted from the video;
• timestamps;
• technical metadata associated with the file; and
• other information necessary to perform the requested analysis.

D. Facial and Visual Signals

In order to provide the Service, our systems may analyze visual characteristics appearing in submitted video, including facial movements, facial landmarks, expressions, and other visual signals.

The Service is intended to analyze communication behavior and not to identify a person.

However, depending on the applicable law and how information is processed, visual or facial information may constitute personal information or biometric information. We therefore treat such information with appropriate care.

E. Vocal and Speech Signals

We may process characteristics of speech and voice contained in submitted content, including:

• pitch;
• intensity;
• speaking rate;
• pauses;
• timing;
• vocal characteristics;
• speech patterns;
• transcription;
• and other audio-derived features.

F. Analytical Results

RedFlag may generate information derived from submitted content, including:

• detected communication signals;
• verbal/paraverbal/nonverbal signal relationships;
• signal divergence;
• timestamps;
• confidence or intensity scores;
• visual markers;
• analytical summaries; and
• other results generated by the Service.

These results may themselves constitute personal information where they can reasonably be associated with an identifiable person.

G. Technical Information

When you use RedFlag, we may automatically collect certain technical information, such as:

• IP address;
• browser type;
• operating system;
• device type;
• approximate location derived from IP address;
• language preferences;
• pages or features accessed;
• dates and times of access;
• referring URLs;
• error logs;
• performance information; and
• similar technical information.

3. How We Use Information

We may use information we collect to:

Provide the Service

Including to:

• process video and audio;
• generate analysis;
• display RedFlag markers;
• maintain user accounts;
• process subscriptions;
• provide customer support; and
• communicate with users.

Improve the Service

We may use technical and analytical information to:

• improve system performance;
• identify errors;
• develop new features;
• improve user experience;
• monitor reliability; and
• improve the accuracy and consistency of our systems.

Security and Fraud Prevention

We may use information to:

• detect unauthorized access;
• prevent abuse;
• protect our systems;
• enforce usage limits;
• investigate security incidents; and
• prevent fraud.

Legal Compliance

We may process information where reasonably necessary to:

• comply with applicable laws;
• respond to lawful requests;
• protect our legal rights;
• enforce our agreements; or
• prevent illegal activity.

4. We Do Not Sell Your Videos

RedFlag does not sell uploaded videos, audio recordings, facial information, voice information, or RedFlag analysis results to third parties for their own commercial purposes.

We also do not use uploaded content to create advertising profiles about the people appearing in the content.

5. AI and Third-Party Processing

RedFlag may use third-party infrastructure and artificial-intelligence services to process information necessary to provide the Service.

These providers may include:

• cloud infrastructure providers;
• speech-to-text services;
• AI model providers;
• video-processing services;
• analytics providers;
• authentication providers;
• email delivery providers; and
• payment providers.

Where third-party providers process personal information on our behalf, we seek to require appropriate contractual and technical safeguards.

We do not authorize third-party AI providers to use your submitted content for their own unrelated purposes where our agreements prohibit such use.

6. AI Training

RedFlag does not use your uploaded videos, audio, or analysis results to train general-purpose AI models without your separate permission.

7. Storage and Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Uploaded videos and audio

For example:

Uploaded video and audio files are automatically deleted following completion of the requested analysis.

Analysis results

Analysis results and associated timestamps may be retained for 30 days to allow users to access their analysis history.

Account information

We may retain basic account information for as long as your account remains active and for a reasonable period thereafter where necessary for legal, accounting, fraud-prevention, or dispute-resolution purposes.

8. Deletion

You may request deletion of your account and personal information by contacting:

redflag.support@gmail.com

Where technically and legally possible, we will delete or anonymize information associated with your account.

Some information may be retained where necessary to:

• comply with legal obligations;
• resolve disputes;
• prevent fraud or abuse;
• maintain security;
• enforce agreements; or
• comply with legitimate regulatory requirements.

9. Cookies and Analytics

RedFlag may use cookies, local storage, pixels, analytics tools, and similar technologies to:

• keep users signed in;
• remember preferences;
• understand how the Service is used;
• measure performance;
• diagnose technical problems; and
• improve the Service.

Where required by applicable law, we will obtain consent before placing non-essential cookies or similar technologies.

10. Marketing Communications

If you voluntarily provide your email address, we may use it to send:

• account-related communications;
• service announcements;
• security notices;
• product updates; and
• marketing communications, where permitted by law.

You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism included in the message.

Transactional and security-related communications may still be sent when necessary to operate your account.

11. Sharing of Information

We may disclose information to the following categories of recipients:

Service Providers

Companies that help us operate RedFlag, including hosting, cloud infrastructure, AI processing, analytics, customer support, authentication, email delivery, and payment providers.

Legal and Regulatory Authorities

Where disclosure is required by law or reasonably necessary to:

• comply with legal process;
• protect someone's safety;
• investigate fraud;
• protect our rights; or
• respond to government requests.

Business Transfers

If RedFlag is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

We will not sell personal information simply because you use RedFlag.

12. International Data Transfers

RedFlag may operate using service providers located in countries other than the country where you live.

As a result, your information may be processed internationally.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.

13. Your Privacy Rights

Depending on where you live, you may have rights concerning your personal information.

These may include the right to:

• access your information;
• obtain a copy of your information;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• withdraw consent where processing is based on consent;
• request information about how your information is used and shared; and
• lodge a complaint with a relevant data-protection authority.

The rights available to you depend on applicable law.

14. California Privacy Rights

If you are a California resident and applicable California privacy law applies to RedFlag, you may have additional rights, including rights to know, delete, correct, opt out of certain sale or sharing, limit certain uses of sensitive personal information, and receive equal treatment for exercising applicable privacy rights.

California law defines personal information broadly and includes categories such as biometric information, audio/visual information, internet activity, and certain inferences.

To submit a California privacy request, contact:

redflag.support@gmail.com

We may need to verify your identity before completing certain requests.

We will not discriminate against you for exercising privacy rights provided by applicable law.

15. European Economic Area and United Kingdom

If you are located in the European Economic Area or United Kingdom, additional data-protection rights may apply.

Where applicable, RedFlag may act as a data controller for information associated with your account and use of the Service.

Depending on the circumstances, our legal bases for processing may include:

• performance of a contract;
• compliance with legal obligations;
• legitimate interests;
• consent; or
• another lawful basis recognized under applicable law.

Certain categories of biometric information receive special protection under the GDPR, particularly biometric data processed for uniquely identifying an individual.

If your use of RedFlag involves processing that falls within special-category data rules, additional legal requirements and safeguards may apply.

For privacy requests, contact:

redflag.support@gmail.com

16. Children's Privacy

RedFlag is not directed to children under 13.

We do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete it.

If applicable law establishes a higher age threshold or additional requirements, we will comply with those requirements.

17. Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.

Depending on the nature of the information, safeguards may include:

• encryption in transit;
• access controls;
• authentication mechanisms;
• logging and monitoring;
• restricted access to production systems; and
• secure cloud infrastructure.

However, no online service can guarantee absolute security.

18. Publicly Available Videos

RedFlag may allow users to submit links to publicly available videos.

The fact that content is publicly accessible does not necessarily mean that all processing of that content is unrestricted.

Users are responsible for ensuring that their use of third-party content complies with applicable law and the terms of the platform hosting that content.

RedFlag does not claim ownership of third-party videos submitted by users.

19. Your Responsibility

You are responsible for ensuring that you have the legal right and appropriate permissions to upload or submit content for analysis.

In particular, you should not submit:

• private recordings without appropriate authorization;
• confidential recordings where you lack permission;
• personal information that you are not authorized to process;
• sensitive information unnecessarily; or
• content whose processing would violate applicable law.

RedFlag is designed to be a user-directed analytical service. We do not independently determine whether you have permission to process content that you submit.

20. Data Protection and Biometric Information

Because RedFlag analyzes visual and vocal characteristics, certain jurisdictions may classify some information processed through the Service as biometric or otherwise sensitive information.

Our systems are designed for communication-signal analysis rather than identification.

We do not intentionally create faceprints, voiceprints, or other biometric identifiers for the purpose of uniquely identifying individuals through the Service.

If our technology or processing practices change in a way that materially affects this statement, we will update this Privacy Policy and take any additional measures required by applicable law.

21. Third-Party Websites

RedFlag may contain links to third-party websites, services, or platforms.

We are not responsible for the privacy practices of third parties.

We encourage you to review the privacy policies of any third-party services you use.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

When we make material changes, we may provide notice through the Service, by email, or by other appropriate means where required by law.

The updated version will include a revised "Last Updated" date.

23. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or your personal information, contact:

RedFlag

Legal entity: Karapetyan Sargis Hamleti IE (Individual Entrepreneur, Republic of Armenia, TIN 23410543)

Privacy contact: redflag.support@gmail.com

Website: https://redfl.ag

Address: Nor Aresh 41, apt. 72, Erebuni, Yerevan 0020, Armenia