Privacy Policy

1. Introduction

Obsidian Clad Labs LLC ("we," "our," or "us") operates ScamShield ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, username (callsign), and password (stored securely using industry-standard hashing).

2.2 Scan Data

When you use our scanning features, the content you submit (text, URLs, email content, screenshot descriptions) is processed by our AI systems. For unauthenticated users, scan data is processed in real-time and not stored. For authenticated users, scan results (but not the original content) are stored to power your dashboard, XP, and badges unless you choose to save the full scan.

2.3 Usage Data

We collect anonymized usage data including scan counts, feature usage, and performance metrics to improve our Service. This data cannot be used to identify individual users.

3. How We Use Your Information

• •To provide and maintain our scam detection Service
• •To manage your account, gamification (XP, badges, leaderboard), and preferences
• •To improve our AI detection models (using anonymized, aggregated data only)
• •To process payments and manage subscriptions
• •To send you notifications you've opted into (scan results, level ups, etc.)
• •To comply with legal obligations

4. Data Sharing

We do NOT sell your personal data. Period. We may share data with:

• •Service providers (hosting, payment processing) who are contractually bound to protect your data
• •Law enforcement when required by valid legal process
• •Anonymized, aggregated statistics (e.g., "X scams detected this month")

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, secure password hashing (bcrypt), and regular security audits. However, no method of electronic storage is 100% secure.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• •Access: Request a copy of your personal data
• •Correction: Update or correct inaccurate data
• •Deletion: Request deletion of your account and data
• •Portability: Export your data in a machine-readable format
• •Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, contact us at privacy@myscamshield.app.

7. CCPA Rights (California Residents)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. As stated above, we do not sell personal information.

8. GDPR Rights (EU/EEA Residents)

If you are in the EU/EEA, we process your data based on: (a) your consent, (b) performance of our contract with you, (c) our legitimate interests, or (d) compliance with legal obligations. You have the right to withdraw consent, lodge a complaint with a supervisory authority, and all rights listed in Section 6.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies for advertising. Analytics cookies are anonymized and can be disabled in your browser settings.

10. Children's Privacy

ScamShield is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices: