Privacy & Data Use
Your submitted information is used to generate your assessment. Your private information will not be included in a public report unless you explicitly choose to share it.
What we store
The category you select, any images or documents you upload, links, messages and the optional context answers you provide, plus the report generated from them. Files are kept in private storage that only your account can read.
Who can see it
Only you. Your checks and reports are tied to your account and are not visible to other users unless you create a share link yourself. Our systems access your data only to produce your assessment and to operate the service.
How your assessment is generated
To produce an assessment, the information you submit — your description, messages, listing or payment details, links, and the contents of images or documents you upload — is sent to an external AI service provider that processes it on our behalf, along with any page content we retrieved from a link you provided. We do not send your name, email address or account identifiers with it. We do not claim that this provider avoids retaining or training on data; we do not control that provider's own retention practices beyond the terms we are subject to. If you do not want particular information processed this way, do not include it in a check.
Link, domain and reputation checks
When your check includes a link, we retrieve the page and may check the web address or domain with external technical services: public domain registration records (RDAP) and a URL security reputation service (currently Google Web Risk). We send the web address or domain only — never your uploads, messages or account details. These services report technical and security signals only; they do not verify that a seller, business or transaction is legitimate.
Sharing
A shared report is a frozen, privacy-safe snapshot showing the assessment content only — risk indicators, recommended actions and questions — with emails, phone numbers, payment details, addresses and message text removed. Your uploads, links and account details are never included. Share links expire (30 days by default) and you can revoke one at any time, which stops it resolving immediately.
How you found us
We record how your visit reached us: a short label for the source (for example a search engine, a social network, another website, or a marketing campaign), the campaign labels carried in the link you clicked, the website that referred you, and which page you landed on. Advertising click identifiers are never stored — we keep only the fact that a visit arrived from an ad. This is stored against the same anonymous device identifier used for our usage statistics, for up to 30 days on your device, and is used only to understand which channels bring people to the service. If you later create an account, this record is linked to your account so we can measure signups by channel. When you delete your account that link is removed and the record stays anonymous; anonymous records are deleted after 12 months of inactivity. We do not store your IP address, browser fingerprint or full web address in these records.
How long we keep it
We keep your checks, uploaded evidence and reports until you delete them. Deleting a check permanently removes its uploads, its report and any share link for it. When you delete your account we permanently remove your profile, checks, reports, uploaded evidence and share links, and delete your sign-in account. Anonymous, non-identifying usage counters may be retained to operate monthly limits and prevent abuse. Product analytics events and referral records created earlier are not deleted; instead the link to your account is removed (the account identifier on those rows is set to empty), so what remains is event names, timestamps, an anonymous session identifier and non-identifying labels. Those records are kept for security, reliability and product measurement.
Your first check without an account
You can run one assessment before creating an account. That check, its evidence and its report are stored without an owner and are reachable only from the private link on your device; they are deleted automatically 24 hours later unless you save them to an account. We record that a free assessment was used on your device in your browser's own storage, which you can clear at any time. We do not use tracking cookies or device fingerprinting for this.
Product analytics
We record aggregate, first-party usage events in our own systems — for example that a check was started, submitted, completed or shared — together with an anonymous, rotating session identifier and non-identifying labels such as risk level, confidence and evidence coverage. We do not use Google Analytics, advertising trackers or third-party analytics services, and we never send submitted links, messages, uploads, report contents, share links, names, emails, phone numbers or IP addresses to analytics.
Product feedback
You can voluntarily send us feedback from inside the app, including an optional note and an answer to “Was this assessment helpful?”. Feedback is associated with your account, the screen it was sent from and, when sent from a report, that check's internal identifier. We never attach your submitted content, links, uploads or share links to feedback, and we ask you not to include passwords, payment details or other sensitive information in the optional note.
Deleting your data
Delete an individual check from your History or from the report screen. Delete everything from Settings → Delete account. Deletion is immediate and cannot be undone.
This assessment is an automated risk assessment based on the information provided and available evidence. It is not a guarantee that a person, business, listing, website, or transaction is legitimate or fraudulent.