Privacy Policy

Last updated: April 13, 2026

1. Who this policy covers

PBT Construction LLC d/b/a CheckHumans operates the CheckHumans website, dashboard, APIs, and related services.

This policy applies to account holders, prospective customers, and visitors to properties operated by CheckHumans.

When customers send event data through the service to protect their own websites, applications, or APIs, they remain responsible for the notices and lawful bases that apply to their end users.

2. Roles and responsibilities

For account, billing, security, and support data, CheckHumans acts as the data controller.

For event data that customers send to the service to score or classify traffic, CheckHumans generally acts as a service provider or processor on the customer's behalf.

Customers are responsible for deciding what information they submit through the API and for providing any end-user notices required by applicable law.

3. Information we collect

Account and commercial data: name, email address, organization details you choose to provide, subscription details, billing records, and support communications.

Service configuration data: site names, domains, site keys, policy settings, plugin configuration, and audit logs related to key management or account security.

Event and telemetry data that customers send to the service: risk signals, request metadata, IP address, user-agent, site context, policy outcomes, and analytics events needed to operate the product.

We do not intentionally ask customers to send special-category personal data, payment card numbers, government identifiers, or personal content that is not needed for the service.

4. How we use information

Provide, secure, maintain, and improve the service.

Score events, apply policies, and return trust or intent decisions requested by customers.

Authenticate users, monitor abuse, rotate credentials, investigate incidents, and send operational or security notices.

Process subscriptions, invoices, and customer support requests.

Comply with legal obligations and enforce our terms.

5. Cookies and similar technologies

Essential cookies: We use strictly necessary cookies for authentication, session management, and security. These cannot be disabled without breaking core platform functionality.

Analytics cookies: With your consent, we use Google Analytics (GA4) to collect anonymous usage data such as pages visited, session duration, and general geographic region. Google Analytics uses cookies including '_ga' and '_ga_*' with retention periods up to 2 years. You can withdraw consent at any time by clearing your browser cookies and revisiting the consent banner.

We do not use cookies for cross-site behavioral advertising, retargeting, or profiling.

You can manage cookie preferences through the consent banner shown when you first visit the site, or by adjusting your browser settings.

For more information about Google's data practices, visit Google's Privacy Policy at https://policies.google.com/privacy.

6. Sharing and subprocessors

We share information with service providers that help us operate the platform, such as hosting, email, authentication, payment, and support vendors.

We may disclose information when required by law, to protect rights or safety, or in connection with a merger, financing, asset sale, or corporate restructuring.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising.

7. Retention

We retain account, billing, and support records for as long as needed to provide the service, meet contractual obligations, resolve disputes, and comply with legal requirements.

Event data retention depends on product settings, customer configuration, and operational needs. Enterprise or contractual retention commitments must be stated in a separate order form, DPA, or support addendum.

Secret-key audit events, security alerts, and billing records may be retained longer than ordinary analytics for fraud prevention, incident response, and accounting compliance.

8. International transfers

CheckHumans may process information in the United States or other countries where our providers operate.

If cross-border transfer mechanisms are needed for a particular customer relationship, they should be addressed in the applicable customer contract or data processing addendum.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information.

To submit a privacy request, contact privacy@checkhumans.com.

If you are an end user whose data was submitted by one of our customers, we may need to direct your request to that customer because they control the relevant collection and use.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect the service and customer data.

No security measure is perfect, and we do not guarantee that the service will be immune from every attack, interruption, or unauthorized access attempt.

Customers are also responsible for protecting their own credentials, configuring secure integrations, and limiting the data they send through the product.

11. Changes and contact

We may update this policy as the product, vendors, or legal requirements evolve. Material changes will be reflected by updating the date on this page and, when appropriate, by additional notice.

PBT Construction LLC d/b/a CheckHumans

Privacy: privacy@checkhumans.com

Legal: legal@checkhumans.com

Support: support@checkhumans.com