hCaptcha | Privacy Policy Platform PLANS ProEnterpriseFEATURES Bot DetectionUser JourneysMFAFraud ProtectionAccount DefensePrivate Learning Use Cases ACCOUNT SECURITY Account TakeoverMulti-AccountingAccount SharingIDENTITY & FRAUD Synthetic IdentitiesIncentive AbuseTransaction Fraud Pricing Docs DOCUMENTATION Developer GuideIntegrationsEnterprise FeaturesSwitch from reCAPTCHARESOURCES FAQBlog Sign UpLog In From the blog: hCaptcha CAPTCHAs: Highly Effective Against Bots and Agents in 2026 → Switch to EnglishAccessibility Platform PLANS Pro Frictionless user experience Enterprise World-class bot and abuse protection FEATURES Bot Detection Multi-layered bot defense User Journeys Protect across sessions, devices, and apps Fraud Protection Secure transactions from fraud and abuse MFA Stronger verification with pull-based SMS Account Defense Privacy-preserving ATO detection Private Learning ML-driven detection, response, and analysis Use Cases ACCOUNT SECURITY Account Takeover Block takeover attempts Multi-Accounting Stop abuse across accounts Account Sharing Enforce access and usage policies IDENTITY & FRAUD Synthetic Identities Prevent fake account creation Incentive Abuse Stop fraudulent reward claims Transaction Fraud Prevent fraudulent payments PricingDocs DOCUMENTATION Developer Guide Get started in minutes Integrations Hundreds of plugins and integrations Enterprise Features Overview of hCaptcha Enterprise Switch from reCAPTCHA Switch with two lines of code RESOURCES FAQ Frequently asked questions Blog Research, strategies, and more Contact Sales Sign UpLog In DE - ES - FR - PT - PT (BR) hCaptcha.com Bot detection and anti-abuse services. Used by millions of websites and apps. ‍Learn more. ‍ ‍ Privacy Policy Last updated: October 7, 2025 Welcome to hCaptcha! This Privacy Policy describes the practices of Intuition Machines, Inc. ("IMI", "we" or "us") regarding our collection, use, and disclosure of information (including Personal Information, defined below) through our website at www.hcaptcha.com and any other subdomains or domains we use (the "Sites") and the hCaptcha application program interface and related software and materials (collectively, the "Service"). Not Applicable to Third Party Websites. Please note that this Privacy Policy does not apply to any website, offering, product or service of any third party, even if it links to our Site or incorporates the Service – please refer to the applicable privacy policies before deciding to provide any information to third parties. A Note to Customers Outside the United States. IMI is based in the United States. The Sites and Service are controlled and operated by us from the United States. Your Personal Information may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Sites and Service you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information. ‍A Note to California Residents. Please see our "Notice to California Residents" section related to your rights under the California Consumer Privacy Act ("CCPA"), as amended from time to time, including by the California Privacy Rights Act of 2020 ("CPRA"). At or before the time of collection, California residents may have a right to receive notice of our practices, including the categories of Personal Information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared, and how long such information is retained. You can find those details within this Privacy Policy. ‍A Note to European Economic Area Residents. Please see our "Notice to EU Data Subjects" section related to your rights under the General Data Protection Regulation ("GDPR"), and our Data Privacy Framework notice below. Note that IMI is the controller of your personal information, except where we process personal information on behalf of our Integrators in connection with the provision of our Service, in which case we are the processor/service provider of personal information, and those Integrators are the controllers/businesses of the personal information. ‍Where we act as a processor/service provider for our Integrators, we do not use the personal information collected for any purpose other than as reasonably necessary to provide our Service, and our processing will be governed by the contracts that we have in place with our Integrators, not this Privacy Policy. If a contract we have with an Integrator refers to, or incorporates by reference, this Privacy Policy, any personal information we process on behalf of the Integrator will be subject to the Data Processing Addendum, not this Privacy Policy. In some cases, we may license our software to Integrators and/or operate it within their environment on their behalf, in which case we are solely a licensor of software and only their terms and privacy policy shall apply to such personal data. We may reference or describe some personal data collected from End-Users throughout this Privacy Policy. However, these disclosures are for informational purposes only and, for clarity, the processing of End-User personal data is governed by the agreement we have with our Integrator customers, not this Privacy Policy. Processing of EU Data Subject data operates under the legal basis of the Standard Contractual Clauses (SCCs) integrated within the Data Processing Addendum to our Terms of Service or Data Processing Agreements with our Integrators. If you have any questions or concerns about how such data is handled or would like to exercise your rights, you should contact the person or entity (i.e., the data controller) who has contracted with us to use the Service to process this data. We will, however, provide assistance to our Integrators to address any concerns you may have, in accordance with the terms of our contract with them. ‍ Data Privacy Framework ‍ Intuition Machines, Inc. ("IM") complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. IM has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. IM has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit: https://www.dataprivacyframework.gov/ Scope: IM adheres to the EU-U.S. DPF Principles with respect to personal data of individuals in the European Economic Area member states, the United Kingdom (and Gibraltar) and to the Swiss-U.S. DPF Principles with respect to the personal data of individuals in Switzerland ("Covered Individuals") processed by Intuition Machines, Inc. as part of providing our Services ("Personal Data"). Data processed: IM provides cloud security services that may be included in other websites and apps, or used within the customer's server environment. In providing these services, IM seeks to minimize collection and retention of data, and maintains no long-term data about End Users of IM services, but may process the following Personal Data of Covered Individuals in the United States: Communications metadata (e.g. information on originating IP address or other identifier, date and time of interaction); Contact information for our customers and their employees with access to the Services, and similar registered user data; and Service support ticketing information (contact detail for individuals initiating the support request and any other personal data shared as part of the support request). Purposes for which data is used: IM may use Personal Data for providing, managing, supporting, deploying, enhancing, or improving our services, as otherwise instructed by the IM customer or other data controller who transmitted, received, or stored the data, or in accordance with contractual requirements. IM may also use Personal Data for other purposes for which the customer or other data controller has obtained the relevant Covered Individual’s consent. Inquiries and complaints: If you are a Covered Individual and believe that IM maintains your Personal Data within the scope of our EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, or Swiss-U.S. DPF certifications, you may submit any privacy or data use concerns concerning such data by emailing [email protected] or by mail to: Intuition Machines, Inc. 1065 SW 8th St #704, Miami FL 33130, USA Attention: Privacy IM will respond within 45 days of receiving the communication. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Intuition Machines, Inc. ("IM") commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at: https://www.jamsadr.com/DPF-Dispute-Resolution If neither IM nor our U.S.-based third party dispute resolution provider resolves your complaint, you may have the possibility to engage in binding arbitration as provided under the Data Privacy Framework Program. See Data Privacy Framework website at: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction Third parties who may receive Personal Data: IM may disclose Personal Data to its affiliates, as well as to a limited number of third-party business partners, service providers, vendors, suppliers and other contractors (collectively, "Service Providers") for the purpose of assisting us in providing, managing, deploying, enhancing, or improving our services. IM maintains contracts with these IM affiliates and Service Providers restricting their access, use and disclosure of Personal Data in compliance with our Data Privacy Framework obligations, and IM may be liable if such parties fail to meet those obligations and we are responsible for the event giving rise to the damage. We also may share or disclose Personal Data to the extent that the customer or other data controller has obtained the relevant Covered Individual's consent. Your rights to access, to limit use, and to limit disclosure: Covered Individuals have rights to access their stored Personal Data and to limit its use and disclosure. With our Data Privacy Framework certification, IM has committed to respect those rights. If you are an Covered Individual and you wish to request access to or to limit use or disclosure of your Personal Data, please contact us by email to [email protected] or by mail to: Intuition Machines, Inc. 1065 SW 8th St #704, Miami FL 33130, USA Attention: Privacy U.S. Federal Trade Commission enforcement: IM's commitments under the Data Privacy Framework are subject to the investigatory and enforcemen…