Privacy Policy

Our Commitment to Your Privacy

Welcome to sussy.ai. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our mobile/web/API application (the "Service"). By using our Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide to Us

• •
  Submitted Content: We collect the screenshots you voluntarily submit to the Service for analysis. This includes the image itself and the text content we extract from it ("Submitted Content").
• •
  A Note on Personal Information: Our Service is designed to work without collecting direct personal identifiers like your name, email, or phone number. However, Submitted Content may inadvertently contain personal information about you or third parties. By submitting a screenshot, you acknowledge this possibility. We strongly advise you to review screenshots and, where possible, obscure any sensitive personal information not relevant to the potential scam.

Information We Collect Automatically

• •
  Usage Data: We collect a unique, user identifier to distinguish user accounts. We may also collect technical data about your device and app usage (e.g., device type, operating system, crash logs) to help us improve the Service.

How We Use Your Information

We use the information we collect for the following purposes:

• •
  To Provide and Operate the Service: To receive and analyze your Submitted Content to identify potential phishing, scams, and other malicious activity.
• •
  To Improve Our Service: To train our machine learning models, improve our detection algorithms, and enhance the quality and accuracy of our Service.
• •
  For Research and Threat Intelligence: To analyze trends and generate aggregated, anonymized statistics about threats. As part of our mission to combat scams globally, we may use anonymized or minimized Submitted Content to contribute to broader threat intelligence databases, as further described in the "Sharing and Disclosure of Information" section.
• •
  To Create Commercial Products: To create, market, and sell aggregated and anonymized threat intelligence feeds to enterprise customers, security companies, and other organizations. This allows our partners to help disrupt and defend against similar threats on a global scale. This commercial activity is a core part of our business model and allows us to provide the basic Service to you.

Sharing and Disclosure of Information

We do not sell your personal information. We may share or sell data in the following circumstances:

• •
  Service Providers: We share Submitted Content with third-party AI service providers (such as Google Cloud Vision or OpenAI) for the sole purpose of extracting text from the images you submit. These providers are contractually obligated to protect your data and are prohibited from using it for any other purpose.
• •
  Commercial Threat Intelligence: We sell threat intelligence products derived from Submitted Content to our business customers. This intelligence includes data points such as malicious URLs, scammer phone numbers or wallet addresses, and common text patterns of scams. This data is aggregated and we take steps to remove personal identifiers not directly related to the threat itself, but cannot guarantee the removal of all personal information embedded in the core message content. This commercial activity is essential to our ability to operate and offer the Service.
• •
  Non-Commercial Threat Intelligence Partners: To contribute to the global fight against online fraud, we may share elements of Submitted Content (such as malicious URLs, scammer phone numbers, or text patterns) with trusted security researchers and threat intelligence partners. We take steps to remove obvious personal identifiers before sharing, but cannot guarantee the removal of all personal information embedded in the core message content. This sharing is fundamental to identifying and helping to take down malicious campaigns.
• •
  Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Data Retention

We retain your Submitted Content and other data only for as long as necessary to provide the Service, improve our systems, and fulfill our legitimate business and legal obligations. You may request the deletion of your data as described in "Your Rights."

Data Security

We implement industry-standard security measures to protect your data:

• •
  Encrypted transmission of all data
• •
  Secure storage with access controls
• •
  Regular security audits and updates
• •
  Minimal data retention policies

Your Rights

You have the right to request deletion of your data.

Children's Privacy

Our Service is not intended for use by anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

Contact Us

If you have questions about this Privacy Policy or our data practices, please reach out through the app.