Privacy Policy
Last updated: October 2026
1. Data Minimization & Message Handling
ScamGuard AI treats all submitted messages strictly as passive, untrusted data for security evaluation. We explicitly instruct users never to input active secrets, including passwords, OTPs, PINs, full debit/credit card numbers, or CVVs.
2. User Isolation & Row Level Security (RLS)
When logged in, your analysis history is cryptographically associated solely with your authenticated user identifier in Supabase PostgreSQL. Strict Row Level Security policies guarantee that no other user or organization can view or query your personal evaluations.
3. Third-Party Integrations
Payment transactions and billing data are securely managed by Stripe. We do not store or process payment card details on ScamGuard servers. AI analysis requests are processed via secure server-side pipelines with zero client exposure of API keys.
4. User Rights & Data Deletion
You retain full ownership of your data and can delete individual analyses from your history or clear your analysis history at any time.