Privacy Policy

On-device image reading and photo warnings

Image text reading and manual photo-risk choices run in your browser. Pictures are not sent to OpenAI or another paid image-analysis service, and scanning a picture does not create AI usage charges. Reading software may download language files, but the selected picture is processed on your device. This feature does not automatically detect people or nudity: you choose the relevant warning options yourself. Extracted text and warning results may enter your browser's saved review history; image bytes are not included. A photo, someone's gender, or nudity alone is not proof of wrongdoing. Do not share intimate images of anyone who may be under 18. The app cannot verify identity or authenticity or prove a romance scam.

Official email correspondence and support

Official automated account, billing, and subscription notices are sent from notifications@stopscamnow.com. Customer support, questions, concerns, billing inquiries, privacy requests, and technical-support requests go to support@stopscamnow.com. Replies to our automated notices are directed to support@stopscamnow.com. Sign-in verification messages may be sent separately by our authentication provider. Our website is https://stopscamnow.com. Sending an email request does not guarantee an immediate response or recovery of scam losses. We will never ask you to send your password, sign-in verification code, bank PIN, or gift cards by email. Sender addresses can be spoofed; verify unexpected requests by visiting our website independently and contacting support@stopscamnow.com.

Who we are

Effective October 17, 2026. Hodge Innovations LLC in Flower Mound, Texas, United States operates StopScamNow. Contact support@stopscamnow.com for privacy questions, access, correction, export, or deletion requests. This policy explains the current website, account, billing, and protection features.

Website support requests

When you submit the support form, we collect your email address, optional name, request category, and message to respond to your request. Unlike local scam checks, information you type into this form is sent to our server and queued for email to our support team through Resend. Do not include scam screenshots, passwords, payment details, verification codes, or other sensitive information. A reference number confirms that your request was saved and queued, not that an email was delivered or a response is guaranteed. Application queue copies are removed after seven days following provider acceptance, or after thirty days if not sent. Copies received in our support inbox and email-provider records follow their own retention policies and may be kept as needed to resolve your request or meet legal obligations. Contact support@stopscamnow.com for a deletion request. Temporary hashed network and email identifiers help limit form abuse.

Reviews stored in your browser

Ordinary scam checks run locally using rules. Screenshot OCR runs in your browser. Review text, screenshots used during a check, and history are not uploaded to our application database for these local checks. Up to 30 saved reviews, recent activity, and settings are held in browser storage, scoped to the signed-in account. Browser storage is not a secure vault: anyone with access to your browser profile or device may be able to read it. Clearing browser data removes this history, and it is not automatically synced or backed up across devices. Existing reviews from before accounts were introduced remain stored on that browser until you choose to import or clear them; they are not automatically assigned to a new account.

No cloud AI or translation

The application does not send review text or screenshots to OpenAI or another paid AI provider. Translation is not offered. Scam warning-sign rules and screenshot OCR run on your device, with limited coverage of common non-English phrases. Microphone transcription is separate: your browser or operating system may use its own online speech service, so microphone use is not necessarily offline. You can type text instead. Do not submit passwords, payment information, verification codes, or sensitive private information.

Microphone and screenshot permissions

Live-call support uses your browser's speech-recognition feature on sound your device microphone can hear; it does not intercept a phone or VoIP call. Your browser or operating-system speech provider may send audio to its own servers and apply its own retention policy. Read your browser's privacy information before using speech recognition. You can instead type text. Screen capture requires your browser's permission, captures one image for local OCR, and does not give us remote control of your device. Close sensitive windows before selecting a screen.

Account, billing, and operational information

We store your authentication-provider identifier, verified email address, first and last name, account creation and trial-expiry times, and references to Stripe billing records. When you complete onboarding, we store the accepted terms version and consent timestamp. Our authentication provider manages login credentials and verification. Stripe manages card and payment details; our app does not store full card numbers or security codes. To enforce one original 24-hour trial per normalized email even after account deletion, we retain a keyed email fingerprint for trial-abuse prevention. It is not the raw deleted email, is not described as anonymous, and is not used for other purposes. Rejoining may use only any remaining time from the original window, never a new 24 hours. Transactional emails contain account and subscription notices. After trial expiry, an account that has not enrolled receives one invitation to subscribe for $25 USD per month, plus applicable taxes and fees, cancel anytime. The invitation does not enroll or charge you; subscribing requires your express choice in Stripe checkout. The service owner receives detailed signup, deletion, and billing-event notifications containing your email address, account reference, relevant timestamps and billing status, but not your scam-review content or payment-card details. Hosting and infrastructure providers may process IP addresses, device/browser information, security and access logs to deliver and protect the service. Application request logs omit request bodies and query-string values.

Service providers

Clerk handles authentication and email verification (clerk.com/legal/privacy). Replit provides hosting, database infrastructure, and integration routing (replit.com/privacy-policy). Stripe processes subscriptions, payments, billing records, and the customer portal (stripe.com/privacy). Resend sends customer and owner transactional email and records delivery events (resend.com/legal/privacy-policy). No cloud AI or translation provider is used by this application. Your browser/OS speech-recognition provider may process audio separately under its policy. Google Fonts receives ordinary network-request information when fonts load (policies.google.com/privacy). These providers may process data in the United States or other countries; their policies and applicable contractual safeguards govern their processing.

Why we use information

We use account and billing information to provide the service, enforce the trial and subscriptions, send requested transactional notices, respond to support requests, prevent abuse, comply with law, and maintain security. Where applicable, the legal bases are performance of the service contract, compliance with legal obligations, and legitimate interests in operating and securing the service. We do not sell review content or use it to train our own model. No advertising pixels, marketing-email subscription, or session-replay feature has been intentionally added to this app. We do not sell personal information or share it for cross-context behavioral advertising.

Cookies and local storage

Authentication providers use essential cookies or similar storage to keep you signed in and prevent fraud. We use browser storage for your account-specific history, activity, and reading settings. These are not advertising cookies. Your browser controls cookies, site data, and microphone or capture permissions; blocking essential cookies may prevent sign-in. No advertising cookies are intentionally added by this application.

Website usage analytics

When enabled for the published website, Replit-hosted analytics measures page visits and selected public interactions: Protection and Support navigation, support topic choices, requests to open an email app, and whether copying the support address succeeded or failed. Our custom events contain only fixed categories such as destination, action kind, and placement. They do not include names, email addresses, account identifiers, support messages, scam reviews, screenshots, or transcripts. Selecting a support topic does not mean a request was saved. An email-link click does not confirm that an email app opened, an email was sent, or a support ticket was created. Copying an address does not send a message.

Retention and deletion

Browser reviews remain until you clear them, delete the account from that browser, or clear site data; other devices keep their local copies until separately cleared. Account records are removed after successful account deletion, but a keyed email fingerprint is retained solely to enforce the one-time trial rule. This ledger does not retain the raw deleted email and is not described as anonymous. Pending transactional emails retry for up to 30 days, and successfully sent queue records are removed after 7 days. Copies in recipient inboxes, provider delivery logs, infrastructure backups, fraud/security records, and Stripe invoices may remain under their respective retention schedules and applicable legal requirements. Billing records are retained where required for accounting, disputes, and law. We do not promise that all records are erased or immediate erasure from backups or third-party systems that must lawfully retain records.

Your choices and rights

Use Account & billing to manage subscriptions or delete your account. Clear or export your browser history using available app controls or browser site-data settings. Contact support@stopscamnow.com to request access, correction, a portable copy of server-held data, deletion, or to exercise applicable privacy rights; we may need to verify your identity. Depending on your location, you may have rights to restrict processing, object, withdraw consent prospectively, appeal a refused request, or complain to a privacy regulator. We do not discriminate for exercising applicable rights. We honor rights and response deadlines required by applicable law.

Security, children, and policy changes

We use authenticated access, account-level authorization, HTTPS when deployed, and provider-managed safeguards, but no system is perfectly secure. Keep your device and login protected and do not submit highly sensitive content. The service is intended for adults 18 and older; we do not knowingly provide accounts to children. Contact us if a child has supplied personal information so we can investigate and take appropriate action. We will post updates here and provide at least 30 days' advance notice of material changes where practical, except urgent security or legal changes. Nonwaivable rights under applicable privacy laws, including applicable Texas and other local laws, remain unaffected.