Privacy Policy

Learn how we collect, use, and protect your data in compliance with GDPR and global privacy standards.

Last updated: January 26, 2026

TL;DR

✓ We collect only essential data to provide scam protection services

✓ Your data is never sold to third parties

✓ Full GDPR compliance with all data subject rights supported

✓ Data encrypted in transit and at rest

✓ You can export or delete your data at any time

✓ Contact: [email protected]

1. Introduction

ScamX ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our scam protection platform and services.

By using our services, you agree to the collection and use of information in accordance with this policy. We treat the General Data Protection Regulation (GDPR) as our baseline for data protection globally, ensuring the highest standards for all our users.

2. Information We Collect

Information You Provide Directly

We collect information that you provide when reporting scams and using our services:

  • Contact Information: Email address, phone number (optional)
  • Scam Reports: Details about scams you report, evidence, screenshots
  • Learning Progress: Quiz scores, achievements, course completion
  • Authentication Data: Account credentials (hashed and salted)
  • Communication Data: Support requests, feedback

Information Collected Automatically

When you use our platform, we automatically collect certain information:

  • Usage Data: Pages visited, features used, time spent
  • Device Information: Browser type, operating system
  • Log Data: IP addresses, access times, error logs
  • Scam Detection Data: URLs analyzed, threat patterns identified

Data Minimization Principle

We practice data minimization - collecting only what's necessary to deliver our services effectively. We don't collect sensitive personal data unless explicitly required for specific features you enable.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

  • Provide scam detection and reporting services
  • Analyze reported scams and generate alerts
  • Deliver personalized learning experiences
  • Process and investigate scam reports

Communication

  • Send scam alerts and important notifications
  • Provide customer support and respond to inquiries
  • Share product updates and new features

Security & Improvement

  • Detect and prevent fraud and abuse
  • Improve our scam detection algorithms
  • Analyze usage patterns to enhance service quality
  • Maintain security and protect user rights

4. Data Sharing and Disclosure

We do not sell your personal information to anyone. We may share your information only in the following limited circumstances:

Service Providers

We share data with trusted third-party service providers who assist in our operations under strict data processing agreements (cloud hosting, email delivery).

Legal Requirements

We may disclose information if required by law or to protect our rights and ensure safety.

With Your Consent

We may share information with third parties when you explicitly consent.

5. Data Security

We implement comprehensive security measures to protect your data:

Encryption

  • HTTPS for data in transit
  • Encrypted database storage
  • Secure authentication

Access Controls

  • Secure authentication system
  • Role-based access control
  • Regular security audits

6. Data Retention

We retain your information only as long as necessary:

Data TypeRetention Period
Account dataUntil account deletion + 30 days
Scam reports2 years (for analysis)
Learning progressUntil account deletion
Log data90 days

7. Your Privacy Rights

You have the following rights regarding your personal data:

✓ Right to Access

Request a copy of your personal data

✓ Right to Rectification

Correct inaccurate or incomplete data

✓ Right to Erasure

Request deletion of your data

✓ Right to Data Portability

Export your data in JSON/CSV format

How to Exercise Your Rights:

Contact [email protected] with your request. We respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our platform.

Questions About Privacy?

We're here to help. Contact our privacy team for any questions or concerns.