Privacy Policy

What we collect

When you upload a screenshot, it is sent to our AI provider for analysis. The analysis itself is anonymous — we do not require an account.

If you tick the "save this screenshot" checkbox, we additionally store:

• The raw screenshot, for up to 30 days, in private encrypted storage.
• A redacted copy of the text the AI extracted (names, phone numbers, emails, addresses, and account numbers are replaced with [REDACTED] before storage), kept indefinitely.
• The verdict, score, and any URLs found in the screenshot.
• A daily-rotating one-way hash of your IP address + browser, used only to detect abuse. We do not store your raw IP.

If you do not tick the box, nothing about your scan is stored after the response is returned.

Why we collect it

To improve scam detection — by building an internal corpus of real-world examples that we can analyze to refine our detection models, prompts, and red-flag heuristics.

Who can see it

Only the Check Trust Score team. Stored screenshots and redacted text are never sold, shared with advertisers, or published.

Your rights

Even though uploads are anonymous, you may recognize your own screenshot and want it removed. Use our data deletion form and describe the screenshot (date, rough time, content). We respond within 30 days.

If you are in the EU/UK or California, you may also have rights to access or object to processing under GDPR/CCPA. Use the same form.

What not to upload

Please do not upload government IDs, full bank or credit-card statements, medical records, or any communication from or about minors. The redaction step reduces risk but is not a guarantee.

Subprocessors

• Lovable Cloud (Supabase) — hosting, database, and file storage.
• Lovable AI Gateway (Google Gemini) — model inference.

Contact

For privacy questions or deletion requests, use the deletion form.