Privacy Policy

Last updated: 2026-05-28

This Privacy Policy explains what personal data Wanaco Oy Ab (Y-tunnus 3457555-8) ("we") collects and how we use it when you use ScamCheck.

1. What we collect

The only personal data we collect is your email address. It is used to identify your account and to send you account-related messages (welcome email, billing receipts, important service notices).

2. What we never collect or store

• We do not store the content you submit for analysis. Pasted text, screenshots, and links are sent to our AI provider, analysed, and the input is discarded immediately after the verdict is returned.
• We do not store IP addresses, browser fingerprints, or device identifiers.
• We do not track your activity across other sites.

3. Anonymous pattern data

For each check that returns a WARNING or DANGER verdict, we record a small, anonymised fingerprint to help us improve detection: the month, the verdict, the type of input (url / phone / email / text / image), the TLD suffix only (e.g. .ru), the phone country code only (e.g. +66), any impersonated brand named in the AI's reasoning, and the AI's listed red flags. No raw input, no full URLs, no full phone numbers, no email content, no link back to your account.

4. Stripe (billing)

When you subscribe, your payment details are handled directly by Stripe. We never see card numbers. Stripe processes your data under its own privacy policy. We receive only your email address and a Stripe customer ID.

5. Data retention

• Account email and login record: kept while your subscription is active and for 12 months after cancellation, after which the account is deleted.
• Anonymous pattern data: kept for 12 months, then deleted.

6. Your GDPR rights

You have the right to:

• Access the personal data we hold about you (which is just your email address and account state).
• Correct or update your email.
• Delete your account and all associated data. Email us and the account will be deleted within 30 days.
• Export your data.
• Object to processing or restrict it.
• Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

7. Data location

Data is stored on servers in the EU. Our AI provider may process content briefly outside the EU under standard contractual clauses; this content is never persisted.

8. Contact

For any privacy question or to exercise a GDPR right: [email protected]