Welcome to Fishy ("we", "our", "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").
Information We Collect
When you use Fishy, we may collect the following types of information:
- Message Content: The text of suspicious messages you submit for analysis. We process this content to provide our risk assessment service. This content is handled ephemerally for analysis and not stored long-term in association with identifiable users unless you opt into features like message history (if available).
- Optional Information: Sender details, message source, and date/time received, if you choose to provide them to improve analysis accuracy.
- Anonymized Submission Data: To improve our service, we automatically collect an anonymized version of every submission. This includes the scrubbed message content and the AI analysis results. All personally identifiable information (PII) like names, email addresses, and phone numbers are removed before storage.
- Usage Data: We may automatically collect information about your device and how you interact with our Service, such as IP address, browser type, pages visited, time spent on pages, and other diagnostic data. This is collected through standard web server logs and analytics tools.
- Cookies: We may use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
How We Use Your Information
We use the information we collect for various purposes, including:
- To provide and maintain our Service, including the AI-powered risk assessment.
- To improve our Service, including the accuracy of our detection models (using anonymized and aggregated data).
- To conduct research on scam trends and for threat intelligence purposes.
- To monitor the usage of our Service and detect/prevent technical issues or abuse.
- To communicate with you, if necessary (e.g., for service updates or support, if you contact us).
Data Sharing and Disclosure
We do not sell your personal information.
We may share information under the following circumstances:
- Service Providers: We may employ third-party companies and individuals to facilitate our Service (e.g., hosting, AI model providers, analytics). These third parties have access to your information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
- Anonymized Data for Commercial Use: We may share or sell aggregated, anonymized data, which cannot reasonably be used to identify you, with third-party partners for security research, threat intelligence, and commercial purposes.
Data Security
We use administrative, technical, and physical security measures to help protect your information. While we have taken reasonable steps to secure the information you provide to us, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
Message content submitted for analysis is processed securely. We aim to minimize data retention of sensitive message content, and only store fully anonymized versions of submissions for research purposes.
Data Retention
We will retain usage data and anonymized analysis data for as long as necessary for the purposes set out in this Privacy Policy. Message content you submit is processed for analysis and is not stored long-term in an identifiable manner unless specific features (like user accounts and history, if implemented) require it, with your consent.
Your Data Protection Rights
Depending on your location, you may have certain data protection rights. These may include the right to access, correct, update, or request deletion of your personal information. If you wish to exercise any of these rights, please contact us.
Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: privacy@fishy.example.com (replace with a real contact method if applicable).