Your Data, Your Control

Privacy Policy

Last updated: January 1, 2026

Our Privacy Commitment

At SpamShield, we are committed to protecting your privacy and ensuring the security of your personal information. This privacy policy explains how we handle data when you use our SMS scam detection service.

Legal Basis for Processing (GDPR)

Legitimate Interest — To provide scam detection services

Performance of Contract — To deliver the Service you requested

Legal Obligation — To comply with applicable laws

Consent — For optional features and marketing

Information We Process

Messages You Submit

  • Text content of SMS messages you choose to analyze
  • Images of SMS messages you upload (text extraction only)
  • Basic metadata (timestamp, processing time)
  • Extracted elements: URLs, phone numbers, brand names (threat detection only)

Submitted message content is retained to run the analysis, cache repeated checks, improve detection, and prevent abuse. It is not linked to your identity, and you can request deletion (see below).

Technical Information

  • Browser type, version, and user agent
  • Device type and operating system
  • IP address (for rate limiting and abuse prevention)
  • General location (country/region level only)

Information We Do Not Collect

  • Your name, email address, or phone number
  • Personal account information or precise location data
  • Contact lists or address books

How We Use Information

Analysis & Protection

  • Detect spam and scam patterns
  • Provide safety recommendations
  • Improve detection accuracy

Service Improvement

  • Enhance user experience
  • Fix bugs and errors
  • Develop new features

Data Retention & Security

We retain the text of submitted messages to run the analysis, cache repeated checks, improve detection, and prevent abuse. Uploaded screenshots are read in your browser and are not uploaded in normal use. We do not link submitted content to your identity, and you can request deletion.

  • Data encrypted in transit using HTTPS/TLS
  • Server access restricted and monitored
  • Message content used to operate and improve detection, not sold
  • Analysis of message text uses OpenAI as a processor

Your Privacy Rights

GDPR (EU/EEA/UK)

  • Access, rectification, erasure
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent

CCPA/CPRA (California)

  • Know what data is collected
  • Delete personal information
  • Opt-out of sale/sharing
  • Limit sensitive data use
  • Non-discrimination

Contact privacy@spamshield.tech to exercise your rights. We respond within 30 days.

Third-Party Services

We do not sell or share your personal information for marketing.

Infrastructure

Vercel (hosting), Supabase (database), Cloudflare (CDN/security)

Analysis

OpenAI (message-text analysis), Tesseract.js (OCR, runs in your browser)

Analytics

Google Analytics and Vercel Analytics for usage measurement. Google Analytics sets cookies.

Children's Privacy

Not directed to children under 16. Contact privacy@spamshield.tech with concerns.

Contact Us

We typically respond within 2-3 business days.

SpamShield
Privacy PolicyTermsContact

© 2026 SpamShield. All rights reserved.