Privacy Policy — ScamMukt

Last Updated: November 2025

ScamMukt is committed to protecting your privacy. This Privacy Policy explains how our website, web-based tools, any future mobile apps (including iOS), browser extensions, and related services collect, use, disclose, and protect your information.

ScamMukt is a platform designed to help users identify, report, and recover from scams, and to stay safer online using scam-reporting workflows and phishing-detection tools.

Your use of ScamMukt constitutes acceptance of this Privacy Policy.


1. Overview

ScamMukt currently operates primarily as a web-based platform and may in the future be available as:

  • Web Application (primary experience at our website)
  • Phishing-Detection Tools (URL and document scanners)
  • Browser Extensions (e.g., for link checking)
  • Mobile Apps (including a potential iOS app and extensions)

Depending on which part of ScamMukt you use, we may process a limited amount of information strictly necessary to:

  • Let you submit scam reports
  • Let you use phishing-detection tools
  • Respond to your queries and feedback
  • Operate, secure, and improve our services

We do not sell your data, and we do not use your information for third‑party advertising or behavioral tracking.


2. Information We Collect

2.1. Information You Provide Directly

Scam Reports

When you submit a scam report on ScamMukt, we may collect:

  • Country or Region (if provided)
  • What Happened: Description of the scam incident
  • What You Did: Actions you took in response to the scam
  • Optional Contact Details (e.g., email) if you choose to share them so we can follow up

Tool Usage (Phishing URL Detector & Document Phishing Detector)

When you use our detection tools, we may process:

  • URL: The suspicious URL you submit for analysis (for phishing URL checks)
  • Document Files: Documents you upload for analysis (PDF, DOCX, DOC, TXT, or similar formats)
  • Optional Contact Details (e.g., name, email) if you choose to receive follow‑ups or results by email

URLs and documents are used only for the purpose of detection and improving the accuracy and safety of the tools (for example, model improvement, abuse investigation, or aggregate statistics), in accordance with this Policy and applicable law.

Contact & Support

If you contact us (e.g., via a contact form, email, or feedback form), we may collect:

  • Your name (if provided)
  • Email address
  • Message content and context
  • Any other information you choose to share with us

We use this data only to respond to your query and improve our services.

2.2. Automatically Collected Information (Web, Apps, and Extensions)

When you use our website, and where applicable our apps or browser extensions, we may automatically collect limited technical information, such as:

  • IP Address (short‑term, for security and rate‑limiting)
  • Browser Information (browser type and version)
  • Device Information (device type, operating system)
  • Usage Data (pages visited, clicks, general interaction patterns)
  • Referrer Information (website that referred you to ScamMukt, where applicable)

We may use privacy‑respecting analytics (or server‑side logs) to understand aggregate usage of our tools and to combat abuse, but we do not use invasive third‑party trackers for advertising.

2.3. Browsing & URL Data (Apps and Extensions)

For the ScamMukt mobile app and browser extensions (including any iOS or Safari-style extensions), we design our systems to minimize data collection and keep analysis as close to the device as possible.

Specifically, for these apps and extensions, we do not collect or store:

  • Full browsing history
  • Full page content
  • Tabs and full tab history
  • Your form entries, passwords, or session cookies
  • Link click history and detailed browsing habits
  • HTTP/HTTPS request logs containing your full traffic

Where the platform technically allows it, our extensions or apps only read the active URL or link context needed at the time of analysis, process it locally (on-device or within the extension environment), and then discard it.
We do not use this information for profiling, cross‑site tracking, or targeted advertising.

2.4. Cookies and Similar Technologies (Web)

On the ScamMukt website, we may use cookies and similar technologies to:

  • Maintain your session
  • Remember your preferences
  • Improve performance and security
  • Understand high-level usage patterns

You can control cookies through your browser settings. Disabling some cookies may affect how certain features work.


3. How We Use Your Information

We use the information we collect for the following purposes:

3.1. Provide and Operate Our Services

  • Enable scam reporting workflows
  • Analyze URLs and documents for phishing / scam detection
  • Deliver tool results and recommendations
  • Provide and maintain the website, tools, and any apps or extensions
  • Respond to your questions, feedback, or support requests

3.2. Improve Safety, Accuracy, and Performance

  • Monitor and prevent abuse, fraud, or security incidents
  • Improve our phishing-detection models and safety heuristics
  • Analyze anonymized or aggregated usage patterns to improve the tools
  • Develop new features and scam‑prevention capabilities

3.3. Communication

  • Respond to your inquiries and support requests
  • Provide updates related to your scam report (if you share contact details)
  • Send important service‑related notifications (e.g., changes to this Policy or security notices)

3.4. Legal and Compliance

  • Comply with applicable laws and regulations
  • Respond to lawful requests from authorities, where applicable
  • Protect our rights, users, and the public (e.g., investigating misuse or threats)

4. On-Device and On-Server Processing (Web, Apps, Extensions)

ScamMukt includes (or may in the future include) phishing-detection capabilities that work in different environments:

  • Web-based Tools: URLs and documents you submit via our website may be processed on our secure servers to generate phishing or scam risk assessments.
  • Mobile Apps (including iOS) & Extensions: Where supported by the platform, parts of the analysis may run locally on your device, and only minimal necessary information may be sent to our servers to complete the detection.

In all cases, we:

  • Process only what is necessary to perform detection and safety checks
  • Do not use your data for third‑party advertising or behavioral tracking
  • Implement safeguards and retention limits as described in this Policy

4.1. URL Scanning & Phishing Detection (On-Device Processing for Apps and Extensions)

For ScamMukt’s mobile app and supported browser/iOS-style extensions, we aim to keep phishing detection on-device as much as possible.

When you click or preview a link inside supported app or extension contexts:

  1. The extension or app reads the URL string or relevant link context required for analysis.
  2. The URL is processed locally (on your device or within the extension environment) by our detection logic or models.
  3. A classification or risk indication (for example, safe / suspicious / unsafe) is generated.
  4. The URL or link string is discarded after analysis, subject only to limited logging where strictly necessary for security, abuse prevention, or legal compliance.

Unless explicitly stated otherwise (for example, in an in‑app notice for an optional cloud feature you opt into), no URL, partial URL, or classification result from the ScamMukt app or extensions is:

  • Stored long‑term for advertising or profiling
  • Sold or shared with advertisers
  • Used for cross‑app tracking

Any optional cloud‑powered features that might rely on remote analysis will be clearly explained in‑product and will require your opt‑in.


5. Subscription, Billing & App Stores (If Applicable)

If ScamMukt offers premium features or subscriptions through app stores (such as Apple’s App Store or Google Play) or through the web:

  • App Stores (e.g., Apple, Google):

    • App stores manage payments under their own terms and privacy policies.
    • We do not receive your full payment card number or full billing details from app stores.
    • We may receive limited information (e.g., subscription status, region, anonymized analytics) necessary to manage your access to premium features.
  • Web Payments (if offered):

    • If we use a payment processor (e.g., Stripe, Razorpay, etc.), your payment details are handled directly by that processor.
    • We never store your full payment card details on our servers.

You may cancel or manage subscriptions using the relevant app store or web account settings, as applicable.

If ScamMukt offers auto-renewable subscriptions via an app store:

  • Renewal, cancellation, and refund requests are handled according to that store’s policies.
  • You can turn off auto‑renewal at any time in your device’s subscription or account settings.
  • We do not control or store your Apple ID / Google account password or your full billing profile.

6. Browser and App Permissions (Including iOS)

If you use a ScamMukt browser extension or mobile app (including iOS), the app or extension may request permissions such as:

  • Access to the current tab’s URL (to check links for phishing/scam risk)
  • Display notifications, warnings, or banners
  • Network access (to contact ScamMukt’s servers for analysis where needed)

We limit these permissions strictly to what is necessary to provide phishing detection and scam‑prevention features:

  • We do not access your saved passwords, cookies, or full browsing history beyond what the platform technically exposes for the active tab or permitted context.
  • We do not read your personal messages, emails, or SMS contents.
  • On iOS and other platforms, we comply with the respective store’s privacy and review guidelines.

Where platforms (like iOS or Safari) show permission prompts, you can choose whether to grant or revoke these permissions at any time via system settings.

For extensions that integrate with browsers (including Safari‑style extensions where supported):

  • We do not access the full webpage content unless strictly necessary for a visible feature you are using.
  • We do not intercept form submissions, payment fields, or password fields.
  • We do not monitor your browsing sessions beyond the specific URLs or events required to provide scam and phishing warnings.

7. Data Storage, Retention, and Security

7.1. Data Storage and Retention

Depending on how you use ScamMukt:

  • Scam Reports may be stored in our secure databases so we can analyze patterns, improve scam‑prevention, and provide ongoing assistance.
  • URLs and Documents used for phishing detection may be temporarily stored or logged in a secure manner for:
    • Generating detection results
    • Improving detection quality and safety models
    • Investigating abuse, fraud, or security incidents
  • Contact and Support Data is retained as long as necessary to respond to you and for legal, security, and audit purposes.

We retain information only for as long as necessary for the purposes described in this Privacy Policy and as required by law. Where possible, we anonymize or aggregate data so it no longer identifies you.

7.2. Security Measures

We implement industry-standard technical and organizational safeguards to protect your data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Use of reputable cloud and infrastructure providers
  • Access controls, authentication, and logging
  • Periodic security reviews and improvements

For ScamMukt’s apps and extensions, phishing detection is performed within secure app or extension environments, and we avoid sending identifiable data to external servers except where clearly necessary for a feature you are using (and, where required, with your consent). We do not maintain cloud databases for the purpose of logging your personal browsing activity.

However, no method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security.


8. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in the limited cases below:

8.1. Service Providers

We may share information with trusted third-party service providers who help us operate ScamMukt, such as:

  • Cloud hosting and storage providers
  • Email delivery and communication tools
  • Payment processors (if applicable)
  • Security and anti‑abuse providers

These providers are required to protect your information and use it only to provide services to us.

8.2. Anonymized and Aggregated Data

We may use or share anonymized and/or aggregated data (that does not identify you personally) for:

  • Research and analysis
  • Security, safety, and abuse-prevention insights
  • Public awareness campaigns about scams and digital safety

8.3. Legal Requirements and Protection

We may disclose information if we believe in good faith that it is reasonably necessary to:

  • Comply with applicable laws, regulations, legal processes, or enforceable governmental requests
  • Enforce our terms and policies
  • Detect, prevent, or address fraud, security, or technical issues
  • Protect the rights, property, or safety of ScamMukt, our users, or the public

8.4. Business Transfers

If ScamMukt is involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy or an equivalent or stronger privacy framework.


9. Third-Party Links and Content

ScamMukt may contain links to third‑party websites, tools, or resources. We are not responsible for the privacy practices or content of these third‑party services.

We encourage you to review the privacy policies of any third‑party websites or services you visit or use.


10. Children’s Privacy

ScamMukt is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you believe that a child under 13 has provided us with personal information, please contact us using the details below. We will take steps to delete such information as required by applicable law.


11. International Data Transfers

ScamMukt is operated from India, but our infrastructure or service providers may be located in other countries.

By using ScamMukt, you understand that your information may be transferred to, stored, and processed in India and other countries that may have different data‑protection laws than your country.

Where required, we take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy and applicable regulations (such as GDPR or similar frameworks).


12. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, including:

  • Access: The right to request a copy of the personal data we hold about you.
  • Correction: The right to request correction of inaccurate or incomplete information.
  • Deletion: The right to request deletion of your personal data, subject to legal and operational requirements.
  • Restriction / Objection: The right to object to or request restriction of certain processing.
  • Data Portability: The right to request a copy of your data in a structured, commonly used, machine‑readable format.

To exercise any of these rights, please contact us using the information in the Contact Us section below. We may need to verify your identity before fulfilling your request.

You may also:

  • Disable cookies in your browser (web)
  • Control app and extension permissions via your device or browser settings
  • Uninstall our extensions or apps at any time

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we do so, we will:

  • Post the updated policy on our website (and within apps or extensions, where applicable)
  • Update the "Last Updated" date at the top of this page
  • Where required by law, seek your consent or provide additional notice

Your continued use of ScamMukt after such changes become effective constitutes your acceptance of the updated Privacy Policy.


14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ScamMukt — Privacy Team
Email: scammukt@gmail.com
Website: https://scammukt.com

We will respond to your inquiry within a reasonable timeframe and in accordance with applicable law.


15. Governing Law

This Privacy Policy is governed by the laws of India. If you are located outside India, please note that your information may be transferred to, stored, and processed in India and other jurisdictions as explained above.


Thank you for trusting ScamMukt. We are committed to protecting your privacy and helping build a safer digital experience for everyone.