Privacy Policy

Last updated: July 26, 2025

1. Introduction

ScamCheck (“we”, “us”, “our”) provides an AI‑powered scam and phishing detection tool. Your privacy is critically important to us. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Information We Collect

2.1 User‑Submitted Content

When you submit text or URLs for analysis, we store:

• Raw Input: The exact message or URL you provided (to power AI analysis and caching).
• Input Hash: A SHA‑256 hash of your input (to prevent duplicate AI calls).
• Analysis Results: Score, category, explanation, and debug details.
• Timestamps: When the request was made.

2.2 Log Data

We log API requests, errors, and server events (e.g. IP address, user agent, timestamp) for security and debugging. Logs are retained for 90 days.

2.3 Cookies & Third‑Party Analytics

We use Google Analytics (via gtag.js) to understand usage patterns. Google Analytics may drop cookies on your browser—see Google’s Privacy Policy. You can opt‑out via your browser settings.

3. How We Use Information

• AI Analysis: To generate scam risk scores and explanations.
• Caching: To avoid repeated AI calls on identical inputs, improving speed and lowering costs.
• Security & Abuse Prevention: To detect and block malicious usage.
• Product Improvement: To analyze feature usage and improve accuracy.

4. Data Sharing & Disclosure

We do not sell, rent, or otherwise share your raw inputs with third parties, except:

• Compliance: If required by law or to protect rights.
• Service Providers: We may share analytics data (anonymized) with Google Analytics and host logs on our database provider.

5. Data Retention

We retain user‑submitted inputs and AI responses for 1 year. Log files are kept for 90 days. After these periods, data is permanently deleted.

6. Your Choices & Rights

• Access & Correction: You can request deletion or correction of your data.
• Cookies: You may disable cookies in your browser, though this may affect site functionality.

7. Security

We implement technical and organizational measures (encryption at rest, secure HTTPS transport) to protect your data. However, no system is 100% secure—please avoid submitting sensitive personal data.

8. Children’s Privacy

Our service is not intended for anyone under 13. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy. We’ll post the “Last updated” date at the top. Your continued use after changes constitutes acceptance.