Effective Date: March 17, 2026

1. Who we are

Scamwise is a product built by Savi Security (“Savi”, “we”, “our”, “us”) a Delaware C-Corporation. “Scamwise” refers to our scam-checking services designed to help people spot and avoid fraud. We act as the data controller for all personal data processed in connection with our Website and Services.

‍2. What this policy covers

‍This policy explains how we collect, use, and protect personal data when you use: our Website (www.scamwise.com), including cookies and analytics; and Scamwise scam-checking services delivered via our website or emails send to submit@scamwise.com for the purpose of utilizing our Services.

3. What is Scamwise

‍“Scamwise” means our AI-powered tool that analyses content (such as messages, emails, phone numbers or websites) to assess potential scam risks. This includes all versions of the Scamwise made available by us, whether accessed through the website, emails sent to submit@scamwise.com or via third-party partners on their platforms. Scamwise is intended to support users’ own research and judgement.

‍4. Data we may collect

‍When you use Scamwise, we collect personal data in two ways:

• Data you submit directly: ‍When you upload or submit information, we collect the content you provide and any personal data contained within it. This may include:

  • Screenshots, images or message content
  • Website links or company details
  • Device identifiers or technical metadata included in uploads (e.g. message headers, IP addresses within email content)
  • Any other personal or sensitive identifiers visible in the material you upload to Scamwise

• Data provided automatically through your use of the service

  • ‍When you contact us via our website or email, we may automatically receive certain identifiers such as your email address.
  • We may also collect technical data such as IP address, browser type, device information, and interaction logs to ensure our service is available and performing for all users.
  • Any other data you choose to upload will only be processed as necessary to provide the Scamwise scam-checking services you requested.

‍5. How we use your data

‍We use the data you provide to:

• Analyse potential scams and provide scam-checking results
• Improve and train our systems to better detect scams for users
• Ensure security and monitor for abuse of our services that would impair usage for other legitimate user requests
• Support fraud prevention research and reporting (only in an anonymized way) on trends and patterns

‍6. Cookies and similar technologies (Website)

‍We use cookies and similar technologies on our Website only to operate the site, understand and improve user experience and performance.

‍7. Legal basis for processing ‍We process personal data on the following bases:

• ‍Consent: When you choose to submit information to the Scamwise
• Legitimate interests: Fraud prevention, operating and improving our services, training our systems, service security, and user education—balanced against your rights and freedoms.
• Legal obligations: Where we must retain or disclose information to comply with law or regulatory requirements.

8. Data sharing and transfers

‍We may share data with:

• Fraud prevention partners but only in anonymized, aggregated form, never data about users unless we ask and you explicitly give consent. These partners may include:
  • The US Federal Bureau of Investigations
  • The US Federal Trade Commission
• A small number of US-based, well-known trusted technology service providers to support the delivery of the Scamwise scam-checking services. We only share the least possible data required to deliver on the services and we have assessed these service providers based on their own data privacy policies that support the Savi mission of user privacy and never selling or sharing any user data. These providers include, but may be subject to change to as new technologies and trusted providers emerge:
  • ‍Google (Gemini) – AI model processing.
  • Amazon Web Services – Cloud hosting provider
  • Langsmith - Model tracing to improve performance
  • Grafana - App monitoring to improve performance
  • OpenRouter - AI infrastructure provider
  • Cloudflare - Web security and bot prevention
  • PostHog - Feature flagging and metrics tracking
  • Twilio - Fraud phone number lookups
  • WHOIS - Fraud domain lookups
  • IPQS - Fraud IP lookups

‍9. Data retention

‍We do not require account creation to engage with the services and therefore do not have specific user profile data to retain. We retain uploaded content and only for as long as necessary for the purposes set out in this policy, including improving and training our services.

‍10. Security

‍We collect and store minimal user-specific information and invest in technical and organisational measures to protect your data, including encryption, access controls, and regular testing. While we implement appropriate safeguards, no system is fully secure. In the event that we do become aware of a data breach that is likely to result in negative impact to your privacy, we will notify affected individuals without undue delay.

11. Your rights

Remember, we do not require user-specific information to engage Scamwise services. Therefore we do not have a database that tracks submitted reports by user. However, if you have questions about your data or submissions or wish to have previous submissions deleted, please send an email to help@savisecurity.com and please include evidence of the report you submitted.

‍12. Contact us

‍If you have any questions about this policy or how we handle data, please contact us help@savisecurity.com

13. Changes to this policy
‍We may update this policy from time to time. When we do, we will revise the “Effective date” at the top.