Privacy, in plain English.

Operator and scope

MVD is operated by AI for the Mission Inc. in Québec, Canada. It is offered as an add-on through the Survona platform at survona.com. Survona is hosted on Microsoft Azure. The MVD landing page is hosted on Vercel and directs users to the Google Chrome Web Store to download the extension. This policy applies to the MVD public website, extension, and supporting analysis service.

The public MVD website is www.misinformationviralitydetector.app.

References to “MVD,” “we,” and “our” mean AI for the Mission Inc.

When processing begins

MVD does not analyze a page merely because the extension is installed, a page is opened, or text is highlighted.

Processing begins only after you request an analysis—for example, by selecting Analyze, choosing a page element, or selecting Analyze page. If access requires an invite code, MVD may automatically continue the same action after the code is accepted.

Information processed

Content and page context

• Selected-text analysis: the text you selected and the current page URL.
• Element analysis: the text of the page element you chose and the current page URL.
• Full-page analysis: up to 60 visible text blocks, subject to a combined limit of 120,000 characters, together with each block’s identifier and HTML tag name, the current page URL, and page title.

MVD sends text and limited structural labels for full-page analysis; it does not send the page’s HTML or DOM.

Identifiers and access records

• a randomly generated installation identifier;
• a revocable session token and its expiration date;
• invite and session status, activation, access, expiration, and revocation timestamps;
• daily request counts by service endpoint.

Network and operational data

Cloudflare may process standard network information such as an IP address and user-agent header when delivering and securing a request. MVD application logs may contain a route, date, trace identifier, request duration, HTTP status, text length, error category, and risk index.

Application logs are designed not to contain analyzed text, the page URL, or page title.

Information MVD does not request

MVD does not request screenshots, webpage cookies, the full browser history, or page HTML. It does not use an advertising analytics SDK. The current page URL is processed only as context for the page the user has chosen to analyze.

Why information is processed

MVD processes the information described above only as needed to:

• perform the analysis, extraction, or translation you requested;
• return and explain the resulting linguistic and rhetorical signals;
• authenticate access and maintain revocable sessions;
• apply service quotas and protect the service from abuse;
• diagnose errors and maintain the security and reliability of the service.

MVD does not personalize analyses or the product experience based on a user profile.

Service providers and disclosures

The main services involved in MVD’s current request flow are:

• Microsoft Azure hosts the Survona platform and provides Azure Communication Services for notification emails.
• Vercel hosts the separate MVD marketing landing page. Its download link directs visitors to the Google Chrome Web Store; it does not host the Survona platform or MVD analysis service. As the landing-page host, Vercel may process basic connection data when the page is visited.
• Cloudflare Workers operates the authenticated MVD API and performs an initial request-filtering step; Cloudflare D1 stores invite, session, installation, and quota records; and Cloudflare’s network and security systems process request metadata.
• OpenAI API performs an initial content-filtering and text-structuring step before Survona analysis, and translates selected text or completed analysis fields. For full-page analysis, OpenAI receives the page URL, title, and visible text blocks.
• Survona FakeSpotter API receives text after the initial filtering steps for misinformation-signal analysis and the required model, language, and run parameters. MVD does not send Survona the page URL, page title, installation identifier, or MVD session token.

MVD does not sell user data or disclose it to advertising platforms, data brokers, or third parties for marketing profiling.

Each provider processes information to provide its part of the service and under the settings and terms that apply to that provider.

Storage and retention

In the browser

The extension stores the random installation identifier, revocable session token, and session expiration date in chrome.storage.local. The installation identifier remains until the extension is removed or its storage is cleared. A session token is valid for 30 days unless revoked earlier.

Page text, URLs, titles, browsing history, and completed analysis results are not kept as a persistent history by the extension. Results remain in the tab’s memory. Markdown or PDF exports are created locally only when you request them.

In MVD infrastructure

MVD’s Cloudflare D1 database stores a hashed invite code, installation identifier, hashed session token, invite and session status and timestamps, and daily usage counters. It does not store analyzed text, page URLs, page titles, or analysis results.

These records are kept to manage access, quotas, security, and service operation. Session tokens expire after 30 days, but expiration does not itself delete the related database record. Some database records do not currently have automatic deletion periods. Cloudflare network and security logs and provider-managed backups are handled under the settings and retention terms that apply to those services.

At service providers

OpenAI and Survona process content to provide the filtering, structuring, translation, and analysis features described above. Retention of provider-held content, logs, or backups depends on the service, the endpoint used, the production settings, and the provider terms in effect. MVD does not promise that every provider-held copy is deleted immediately after a request. We will update this policy when provider-specific retention periods and controls are confirmed.

Limited use and human access

MVD collects, uses, and transfers Chrome user data only as needed to provide, maintain, and secure the extension’s single user-facing purpose. This use complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. MVD does not use Chrome user data for personalized advertising or sell it.

MVD uses user-requested content only to provide and maintain its analysis, extraction, translation, access-control, security, and support functions. It does not use or transfer that content for personalized advertising, marketing profiles, credit decisions, or sale to data brokers.

MVD does not provide its team with a routine interface for reading analyzed text and does not store that text in D1 or application logs.

For a support request, we will ask for your explicit consent before a person reviews a specific excerpt of submitted content. Access without that consent is limited to what is necessary to investigate a security or abuse issue or to comply with law. Provider processing is subject to each provider’s own service terms and controls.

Security

MVD uses an authenticated service architecture, stores session tokens in hashed form in its database, and keeps provider API keys out of the browser extension. No internet service can guarantee absolute security, and this policy does not claim certifications that have not been confirmed.

International processing

MVD is planned to be available to users in Canada and the European Union. Cloudflare operates a global network, and other providers may process information in countries outside the user’s country of residence. The specific processing location depends on the provider and service configuration.

Your choices and deletion requests

You choose whether to initiate an analysis and which available content to submit. You may remove the extension or clear its local storage to remove locally stored MVD identifiers and session information.

You may request deletion by emailing either address in the Contact section. We will use the information you provide to identify the associated records and may ask for additional details if needed. Never send an active session token by email. The extension does not currently provide self-service deletion or display the installation identifier needed to match a request. MVD can delete identifiable invite, session, usage, installation, and timestamp records from D1; provider-held records are handled under the provider’s terms and controls. We respond to privacy requests within the time required by applicable law.

Changes to this policy

Material changes will be reflected on this page by updating the text and the “last updated” date. Where applicable law or a material change in data use requires additional notice or consent, the operator will provide it before the new practice begins.

Contact

AI for the Mission Inc. handles MVD privacy and deletion requests. Email either javad@ai4mission.com or javad@aiformission.com.