ScamSafe

Privacy Policy

Last updated: October 2026

1. Who We Are

ScamSafe is Made in India. We provide data privacy protection services under the Digital Personal Data Protection Act 2023.

2. Data We Collect

  • Phone number — to scan databases and verify your identity via OTP
  • Email (verified by OTP) — to check configured sources and send account updates
  • Scan results — which breach records your phone number or email appears in. Stored on our servers against your account, so you can see your history and so a removal request can cite what was found
  • Scam Checker messages — the message you paste is sent to our AI analysis provider for the check. We keep only a one-way fingerprint (hash) of it and the result, not the message itself. Remove OTPs, passwords and card numbers before you paste.

3. How We Use Your Data

  • Check breach records for your phone number and email
  • Send deletion requests in your name and track the replies
  • Run a further scan when you ask for one, to check whether your data has reappeared
  • To contact you by phone or email about your scan results and our plans

4. Data Storage

Every scan, free or paid: the result is stored on our servers against your account — what was found, when, and which sources answered. Your browser also keeps a copy so the report loads again quickly, but clearing your browser does not remove our copy.

We store on encrypted servers:
  • Your phone number (AES-256 encrypted)
  • Your email address (AES-256 encrypted)
  • Your removal request records and history
  • Your subscription status and scan history

Your name: saved with your account, along with the billing details you give at checkout. Requests to companies include only your email and phone number. Your name and address are never sent to them.

We do not ask for your street address or date of birth. We previously collected both and then stopped sending them anywhere; the input fields have now been removed entirely, so there is nothing to collect. If either is still held in your browser from an earlier visit, it is cleared the next time you open the site.

We do NOT store: street address, date of birth, Aadhaar, PAN, financial data, chat history, or browsing data.
Payment records are retained for 7 years, as Indian tax law requires.

5. Third-Party Services

We use trusted third-party providers for essential services including OTP verification, email delivery, cloud hosting, payment processing, and AI message analysis for the Scam Checker. All providers are contractually bound to process data only as instructed by ScamSafe and in compliance with applicable data protection laws. No personal data is shared with third parties for marketing purposes.

6. Your Rights (DPDP Act 2023)

You can ask us to:
  • Access — tell you what personal data we hold
  • Correct — fix data that is wrong
  • Erase — delete your data (use the Delete my data page)
  • Withdraw consent — stop using your data (use Manage consent)

We already honour these requests. The DPDP Act's rights sections are scheduled to start on 13 May 2027.

7. What We Collect, and for How Long

Phone numberTo scan breach records and send deletion requests in your nameKept: Until you delete your account
Email addressTo scan, sign you in, and send your results and updatesKept: Until you delete your account
Name and billing detailsSaved with your account and used for billing; never sent to companiesKept: Until you delete your account
Scan resultsSo you can see your historyKept: Until you delete your account
Deletion request recordsTo track which companies received a request and what they repliedKept: Until you delete your account
Payment recordsTax compliance under Indian lawKept: Seven years

Clearing your browser clears your copy of a scan, not ours. You can ask us at any time what we hold about you, and ask us to erase it — see section 6.

Do you sell or share my scan? No. Never, to anyone.

8. Security

All data transmission is encrypted via HTTPS/TLS. We do not store passwords or payment information. OTP verification ensures only the phone owner can initiate a scan.

9. Contact

For privacy queries or data deletion requests:
Email: support@scamsafe.in
Website: https://scamsafe.in

10. Grievance Officer