Corptcha Privacy Policy

Last updated: August 15, 2026 · Effective: August 15, 2026

1. Introduction and Scope

The Corptcha team ("we", "us") respects your privacy. This Privacy Policy explains how we collect, use, store and protect information through the website (www.corptcha.com), the console (dash.corptcha.com), the documentation (docs.corptcha.com), the verification SDK and related APIs (collectively, the "Service"), and the rights you have. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

• Account information: email and encrypted password provided at registration, plus account settings and plan information;
• Site and verification information: site names, domains, siteKey and other configuration you create; verification request records, results and risk levels submitted through the verification API;
• Behavioral signals: mouse movement, clicks, scroll and other behavioral signals collected locally by the verification component for risk assessment only — anonymized and not containing personally identifiable content;
• Device and log information: IP address, browser type, device information, timestamps and request paths in basic access logs;
• Payment information: order number, amount and payment status when paying through third-party payment channels (we do not store sensitive credentials such as your card number on our servers).

3. How We Use Information

We use the information above solely for the following purposes:

• Providing, maintaining and improving the Service (account management, verification issuance, risk assessment, dashboards);
• Security and anti-abuse (detecting attacks, abnormal traffic and fraud);
• Processing paid orders and issuing the relevant documentation;
• Sending service notices, material updates and necessary security alerts by email;
• Complying with legal obligations.

4. Sharing of Information

We do not sell or rent your personal information. We only disclose it to specific parties in the following circumstances:

• Necessary service providers: such as email delivery, payment channels and cloud infrastructure providers, which process information only as instructed by us and to the extent necessary;
• Legal requirements: where required by laws, judicial or administrative procedures;
• Business transfer: in the event of a merger, acquisition or asset transfer, the relevant data will be transferred with the business and remain subject to this policy.

5. Cookies and Local Storage

We use cookies and browser local storage (localStorage) to maintain login sessions and remember language and theme preferences. The SDK uses only the necessary local storage on pages where the verification component is rendered and does not track users across websites. You may disable cookies in your browser settings, although some core features such as login may be affected.

6. Data Storage and Security

The Service is hosted on servers outside mainland China (see the service status page for details). Data is encrypted in transit over HTTPS and encrypted at rest. We employ access control, key isolation, audit logging and least-privilege principles to protect data, but no security measure can guarantee absolute security.

As a human verification service, we collect behavioral signals only on a "need-to-verify" basis and use them in anonymized or aggregated form wherever possible.

7. Data Retention

• Account data is deleted or anonymized after you close your account;
• Verification records and logs are retained for a period required for security auditing and anti-abuse, then automatically purged;
• Data required by law (e.g., payment records) is retained for the legally required period.

8. Your Rights

You have the right to:

• Access and correct: review and update your account information in the console;
• Export: request an export of data related to your account;
• Delete and close: close your account through the console or by contacting us; we will delete or anonymize your data (unless otherwise required by law);
• Withdraw consent: withdraw consent to processing, noting that this may affect the corresponding features of the Service.

9. Children

The Service is intended for developers and adult users. If you are a minor, please use the Service under the supervision of a parent or guardian and with their consent. We do not knowingly collect personal information from minors and will delete it promptly upon discovery.

10. Changes to This Policy

We may update this policy from time to time. Updates will be published on this page with an effective date. Material changes will be notified by email or in-service notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, comments or complaints about this policy or the processing of your personal information, please contact us and we will respond within a reasonable period: