Privacy Policy

1. Who We Are

Scamanot.com ("Scamanot," "we," "us," or "our") is operated by Robert Scott Singleton, an individual doing business in Arizona, USA. We operate an AI-powered scam investigation and awareness platform accessible at scamanot.com, offering both free and paid subscription tiers.

We can be reached at hello@scamanot.com for any privacy-related questions or requests.

2. Our Data Philosophy

Scamanot does not store your search queries. Scamanot is built on a principle of radical data minimalism. The most secure data is data that was never collected in the first place. We collect only what is absolutely necessary to deliver our service — and nothing more.

3. Information We Collect

What we do NOT collect

• Your search queries, text submissions, URLs, or any content you paste into our tools
• Your IP address for tracking or profiling purposes
• Browser fingerprints or device identification data
• Behavioral tracking data or browsing history
• Any personally identifiable information (PII) beyond what is required to create and manage an account, or what you explicitly provide via our contact form

What we DO collect (minimum required)

• Account information: If you create an account (required for Guardian and Pro subscriptions), we collect your email address and a securely hashed version of your password — we never store passwords in plain text. Your email is used only for account access, subscription management, and service-related communications.
• Subscription and billing status: For paid accounts, we store your current plan (e.g., Guardian or Pro) and billing status as a simple access-control flag. We do not store your card number or other payment details — that information is held exclusively by Stripe.
• Report history (opt-in, paid plans only): If you are a paid subscriber and choose to enable saved report history, your past report outputs are stored so you can revisit them. This is off by default and requires your explicit consent.
• Server logs: Standard web server logs may temporarily record IP addresses for security and operational purposes. These are not retained beyond standard log rotation periods and are not used for tracking.
• Contact form submissions: If you reach out via our contact page, we collect the name and email address you provide in order to respond to you. This information is not used for marketing.
• Anonymous usage metrics: We may collect aggregate, anonymized statistics (e.g., total number of tool uses per day) with no individual user tracking.

4. Cookies & Tracking

Scamanot uses minimal cookies. We do not use advertising cookies, behavioral tracking cookies, or third-party analytics that track individual users across websites.

Any cookies set by our site are strictly functional or security-related — required for basic operation and account security — and do not contain personally identifiable information. You may disable cookies in your browser without affecting core site functionality. For a full breakdown of every cookie we use and why, see our Cookie Policy.

5. How AI Processing Works

Our scam investigation tools are powered by the Anthropic API (Claude AI). When you submit content for analysis, the following occurs:

• Your submission is sent securely to our Cloudflare Worker server-side processor
• The processor sends your submission to the Anthropic API for analysis
• The analysis result is returned to your browser and displayed
• Your original submission is not stored on our servers or in our database

Anthropic as our data processor: Under GDPR and applicable data protection law, Anthropic acts as Scamanot's data processor — you are the data subject, we are the data controller, and Anthropic processes your submission on our behalf solely to provide the analysis result. Anthropic does not sell or share your data, and does not use API inputs to train their models by default. Anthropic is bound by their standard Data Processing Addendum (DPA), which includes EU/UK/Swiss Standard Contractual Clauses (SCCs), 48-hour security breach notification obligations, and data deletion requirements. Anthropic may retain API inputs and outputs for up to 30 days for trust and safety purposes under their standard API terms. For full details, see Anthropic's Privacy Policy and their trust and security portal.

International data transfers

Anthropic operates servers located in the United States. When you submit content for analysis, that content is transferred to and processed in the US by Anthropic. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, this constitutes an international transfer of personal data. Anthropic maintains appropriate safeguards for such transfers through their standard Data Processing Addendum (DPA), which includes EU/UK/Swiss Standard Contractual Clauses (SCCs) — Module Two (controller to processor) — governed under Irish law per the European Commission's Implementing Decision (EU) 2021/914. By using Scamanot, you acknowledge that your submission will be processed in the United States by Anthropic for the sole purpose of generating your analysis result.

6. Data Sharing

We do not sell, rent, trade, or share your personal information with third parties for commercial purposes — under any circumstances.

We may share information only in the following limited situations:

• Legal compliance: If required by applicable law, court order, or government authority
• Safety: To prevent fraud, protect the rights of Scamanot or our users, or respond to emergency situations
• Service providers: Infrastructure and AI providers — including Anthropic (AI analysis, bound by their standard DPA), Cloudflare (CDN, WAF, and Workers infrastructure), and Hostinger (web hosting) — who process data solely to operate our service, each bound by data processing agreements

7. Your Rights (GDPR & CCPA)

For users in the European Union (GDPR)

• Right to access — request a copy of personal data we hold about you
• Right to erasure — request deletion of your personal data
• Right to portability — receive your data in a portable format
• Right to object — object to certain types of data processing
• Right to lodge a complaint with your local supervisory authority

For California residents (CCPA)

• Right to know what personal information is collected and how it is used
• Right to delete personal information we have collected
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your privacy rights

If you have an account, you can permanently delete it and all associated data at any time using the "Close My Account" option in your account dashboard — this immediately cancels any active subscription and erases your account data, fulfilling your right to erasure under GDPR Article 17 and your CCPA right to delete. For any other privacy request, or if you don't have an account, contact us at hello@scamanot.com. Because we collect minimal data, most requests will be fulfilled immediately.

8. Children's Privacy

Scamanot is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. Security

We implement industry-standard security measures including HTTPS/TLS encryption, Cloudflare DDoS protection and Web Application Firewall, rate limiting on all API endpoints, and input sanitization on all user-submitted data. Account passwords are never stored in plain text — they are protected using strong, industry-standard hashing. No method of internet transmission is 100% secure, but we take every reasonable precaution.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will update the effective date at the top of this page. Continued use of Scamanot after changes constitutes acceptance of the updated policy.

11. Contact Us