Privacy Policy

Last updated:

ScamProtector (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our consumer subscription service.

Company: Multify Inc — 14425 Falcon Head Boulevard, Building E, Suite 100, Austin, TX 78738.

1. Information we collect

  • Account information: Email address, full name, and settings you provide when you create or manage your account.
  • Subscription and payment information: We use Stripe to process payments. We do not store full payment card numbers. Stripe may collect payment details and billing information in accordance with its own privacy policy.
  • Usage data: Diagnostic logs, device/browser type, and interactions with the service. This is aggregated or pseudonymized where possible.
  • Scan inputs: URLs or message metadata you submit for checks. For training and service improvement, we may retain URLs and domains for known or suspected scam websites and limited HTML source information.
  • Emails you forward for checking: When you forward a message to check@scamprotector.app, we store the content of that message — including the original sender's address, the subject, the message text, and any links it contains — together with our analysis of it. We keep this so we can answer you, investigate cases where our answer may have been wrong, and improve how the service recognises scams. The original raw email is deleted automatically after 30 days; the extracted text and our analysis are kept while your account is active. Because a forwarded message was written by someone else, it may contain that person's personal information as well as yours.
  • Screenshots you upload for checking: Images you submit to the Scam check tab are sent to our analysis provider to produce a verdict and are not stored on our servers.
  • Communications: Messages you send to support and feedback you provide.

2. Cookies and similar technologies

We use cookies and similar technologies to operate and improve the service:

  • Essential: Required for basic functionality, security, and session management.
  • Preferences: Save your settings (e.g., text size) and choices.
  • Analytics (optional): We use PostHog and Appizer to understand usage and improve the service. Analytics data is aggregated or pseudonymized where feasible and is not used to identify you directly.

You can control cookies through your browser settings. If you disable essential cookies, parts of the service may not function.

Analytics providers

We use third‑party analytics providers to help us understand how the service is used and to improve user experience:

  • PostHog: Collects events such as page views, navigation flows, clicks/taps, and technical metadata (e.g., browser type, device OS). Configured to avoid collecting sensitive content.
  • Appizer: Collects usage metrics to monitor performance and adoption, including page views and interaction events. Configured to avoid collecting sensitive content.

Where feasible, we pseudonymize or aggregate analytics data. You can limit analytics via browser settings (e.g., cookie controls) and privacy tools.

3. How we use information

  • Provide, maintain, and improve the service.
  • Process subscriptions and payments.
  • Detect, prevent, and address fraud, abuse, or technical issues.
  • Communicate with you about the service, including updates and support.
  • Comply with legal obligations.

4. Information sharing

  • Service providers/processors: Payment processing (Stripe), hosting (Render — Ohio datacenter region), and infrastructure providers under contractual confidentiality and security obligations.
  • Legal and safety: When required by law or to protect rights, safety, or property.
  • Business transfers: In connection with mergers, acquisitions, or asset transfers, subject to this Policy.

5. Your rights and choices

Subject to applicable law, you may have rights to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Delete (erase) your data.
  • Object to or restrict certain processing.
  • Data portability.
  • Opt out of marketing communications.

To exercise rights, contact us at help@scamprotector.app. We will respond consistent with applicable laws (e.g., GDPR, CCPA).

If you ask us to delete your account, we also delete the emails you forwarded for checking and our analysis of them. You can also ask us to delete an individual check without closing your account — tell us the date and subject and we will remove it.

6. Security measures

We use reasonable administrative, technical, and physical safeguards to protect information, including HTTPS encryption in transit, least‑privilege access controls, and routine security reviews. No method is 100% secure; we cannot guarantee absolute security.

7. Data retention

We retain information for as long as your account is active or as needed to provide the service and comply with legal obligations. Aggregated, non‑identifiable data may be kept longer to improve detection. Specifically, URLs/domains of known or suspected scam websites and limited HTML source information may be retained for training and improvement purposes.

Emails you forward for checking are retained as follows:

  • The original raw email is deleted automatically 30 days after the check.
  • The extracted text and our analysis — the sender, subject, message text, links, and the verdict we gave — are kept while your account is active, so we can investigate and correct wrong results.
  • If you reply to one of our verdicts to tell us we got it wrong, we keep your reply and our record of the check so a person can review it.
  • When your account is deleted, all of the above is deleted with it.

8. International transfers

Your information may be transferred to, stored, and processed in countries other than your own. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

9. Territory

The service is intended for use in the United States of America only.

9. Children’s privacy

The service is not directed to children under 13 (or the age defined by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us to remove it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Continued use of the service constitutes acceptance of the updated Policy.

11. Contact us

If you have questions or requests related to privacy, contact us at help@scamprotector.app.