Privacy Policy

This Policy describes how Red Flag Scanner (“we”, “us”) handles information when you use our website and services. It is provided in plain language and does not replace advice from legal counsel where your situation requires it.

Who we are

Red Flag Scanner offers AI-assisted commentary on relationship-related text for entertainment and self-reflection. For privacy requests, contact the contact address published for this site.

Information we collect

• Text you paste. Conversation excerpts you submit are sent to our servers (and to AI providers as described below) to generate scan results.
• Email address. If you purchase a full report or otherwise provide an email, we collect it to deliver receipts, service-related messages, and — only if you separately opt in — occasional marketing emails about Red Flag Scanner.
• Consent records. When you proceed to checkout, we store a record (including email, whether you opted into marketing emails, which policies you accepted, and a snapshot of the consent language) in our Supabase database for compliance and dispute resolution.
• Technical data. We may derive a salted hash of your IP address (not the raw IP) and store your browser user-agent string with consent logs to protect against abuse and support security investigations.
• Browser storage. We may keep recent scan context in your browser (local storage) so you can move between pages without an account.

Marketing email & unsubscribe

Promotional emails require an unchecked-by-default marketing checkbox before you enter your email on the checkout step. If you do not opt in, we will not send marketing messages; we may still send transactional emails related to your order or account where applicable.

Every marketing email includes instructions to unsubscribe. You may also opt out by contacting the contact address published for this site. We honor unsubscribe requests within a reasonable time.

AI processing

Text you submit may be processed by third-party AI providers (for example OpenAI) to generate outputs. Those providers operate under their own terms and privacy policies and may process data in various regions. Do not paste highly sensitive information you are uncomfortable sharing with such providers.

Payments (Stripe)

Paid purchases are processed by Stripe. Card details are collected and stored by Stripe according to its policies; we do not receive your full card number on our servers. Stripe may provide us with identifiers and metadata related to your transaction (such as payment status and customer email used at checkout).

Retention

We retain consent and checkout acknowledgment records in Supabase for as long as needed for legal, tax, and fraud-prevention purposes, and to demonstrate what you agreed to. Analytics-style chat content may be retained only as needed to operate the service — minimize what you paste if you are concerned about retention.

Deletion & access requests

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. To request deletion of consent records tied to your email or to exercise other rights, write to the contact address published for this site. We will respond within a reasonable period and may need to verify your identity. Some data must be kept where law requires (for example accounting or payment records).

Security

We use industry-standard practices appropriate to the nature of the service. No online service is perfectly secure — use judgment about what you submit.

Children

The service is not directed at children under 13 (or the age required in your region). Do not use it if you are below that age.

Changes

We may update this Policy from time to time. Material changes will be reflected by updating this page and, where appropriate, by bumping the privacy policy version recorded with new consent logs.

Contact

Questions about privacy or data rights: reach us at the contact address published for this site.