Skip to main content
Back
Trust Centre
Transparency first

You’re trusting us with the messages that worry you.Here’s exactly what happens to them.

Encryption, GDPR rights, AI transparency, storage locations and our no-selling promise — written plainly, with the controls to act on every one of them.

Never

Data sold

Supported

Anonymous scans

Self-service

Export & erasure

Opted out

Model training

We do not sell your data

Not to advertisers, not to data brokers, not to insurers, not to anyone. Your scans exist to protect you. SafeScan AI is funded by subscriptions — that is the whole business model, and it is why your inbox stays yours.

Commitments

Six things we hold ourselves to

Each one describes what the product actually does today — not an aspiration.

Encryption

Protected in transit and at rest.

01
  • Every connection to SafeScan AI is served over HTTPS with modern TLS.
  • Account data, scan history and subscription records sit in a managed database with encryption at rest.
  • Payment traffic is handled entirely by PayPal over their encrypted, PCI-compliant infrastructure.
  • Assistant conversations can be locked behind your device passcode or biometrics in Settings.

GDPR rights

Export and erasure, self-service.

02
  • UK GDPR and EU GDPR rights are built into the product, not a support queue.
  • Download a complete JSON copy of your data from Data & privacy at any time.
  • Delete your account and every associated record permanently, in one confirmed action.
  • We keep your records only while your account exists.

Privacy by default

Minimum data, no ad tracking.

03
  • You can scan anonymously — no account, no email, history stays on your device.
  • We collect only what a scan needs: the content you paste, the result, and a usage counter.
  • No advertising cookies, no third-party analytics pixels, no cross-site profiling.
  • Incognito mode stops the assistant writing threads to your account.

AI transparency

You see the reasoning, always.

04
  • Every verdict ships with a plain-English explanation, highlighted red flags and a confidence score.
  • Risk scores and confidence are shown separately so you know how sure the model is.
  • Your scans are never used to train models, and the provider never receives your account identifier.
  • AI output is decision support, not a guarantee — we say so on every result.

Security standards

Least privilege, enforced in the database.

05
  • Row-level security means your rows are readable only by you — enforced by the database, not just the app.
  • Privileged operations run server-side behind authenticated functions; secrets never reach the browser.
  • Webhooks are signature-verified before anything is written.
  • Automated security scanning runs against the backend as part of our release process.

Data storage

You know exactly where it lives.

06
  • Account data, scan history, usage counters and subscription records: our managed backend database.
  • Billing records: PayPal.
  • Anonymous scans, plan counters and cached preferences: your browser's local storage only.
  • Nothing is copied to a third location for marketing or resale.

Under the hood

How SafeScan AI works

Four steps from the message that worried you to a decision you can act on.

01

You submit

Paste a message, upload a screenshot or PDF, or enter a website, phone number or email address.

02

We pre-check

Text is extracted on-device where possible, then checked against heuristics, our blocklist and community reports.

03

AI analyses

The content plus a scam-detection prompt goes to the model. It returns a verdict, risk score, confidence and red flags.

04

You decide

You get a plain-English explanation and recommended actions. Save it, export a PDF, or report it to the community.

Answers

Frequently asked questions

The questions people ask before they trust us with a suspicious message.

No. We never sell, rent or trade your personal data, scans or scan results. There are no advertising trackers and no data brokers in our stack. Our only revenue is subscriptions and one-off plans paid through PayPal.

If you're signed in, your scan content and result are saved to your account history so you can revisit or re-run them. If you scan without signing in, that history stays in your browser's local storage on that device only. You can clear or delete either at any time.

Scans are sent, together with a short scam-detection prompt, to a third-party large-language-model provider through our AI gateway. The provider receives the content you submitted and never your account identifier. We do not use your scans to train any model.

Yes. The Data & privacy page gives you a one-click JSON export containing your profile, complete scan history, daily usage counters, subscription records and any scans stored on your current device.

We permanently remove your profile, scan history, usage counters and subscription records from our database, delete your sign-in credentials, and clear the on-device history on the device you confirm from. It cannot be undone, so cancel any paid plan first.

No. All payments run through PayPal. We only keep your PayPal order and subscription IDs, your plan, its status and the billing period — never card numbers.

No. SafeScan AI gives you an informed risk assessment with plain-English reasoning, not a legal or financial verdict. Always double-check anything involving money using a phone number or website you already trust.

Family and Business Edition sharing is opt-in. Members choose to link an account, and admins only see the activity that the member's plan and settings expose — never the raw content of another person's private scans unless it is shared with them.

Your data, your controls

Export everything we hold, wipe your account, or read the full legal detail. All of it is one tap away.

These are SafeScan AI’s own statements about how the product handles your data. They are not an independent audit or certification.