Privacy Notice

This Privacy Notice explains how SC Digital Solutions ("we") collects, uses, shares and protects personal information when you use the website scdigitalsolutions.net and the related products and services (the "Services"). It applies worldwide and includes specific sections for the European Economic Area, United Kingdom, Switzerland, the United States, and other regions.

1. Who is the controller

SC Digital Solutions is the data controller of personal information processed through the Services. Contact: privacy@scdigitalsolutions.net.

2. Information we collect

• Account data — name, email, password hash, language, country.
• Order & billing data — order ID, products purchased, billing address, last four digits of the card, transaction status. Full card details are processed by Shopify and the card networks; we never see them.
• User-submitted content — text, emails, links, phone numbers and screenshots that you submit to the scam analyzer; family-member contacts you choose to invite.
• Usage data — pages viewed, features used, approximate location derived from IP, device type, browser, timestamps, referring URL, error logs.
• Cookies and similar technologies — see our Cookie Policy.
• Communications — emails you send us and the contents of support tickets.

We do not knowingly collect "sensitive" personal information (e.g., government IDs, health, biometric or precise geolocation) and we ask you not to submit it. If you do, you grant us permission to process it solely to provide the Service.

3. How we use information (purposes)

• Provide the Services — create your account, deliver downloads, run AI analyses, manage subscriptions, send transactional emails.
• Payments and fraud prevention — process orders via Shopify, prevent chargebacks and abuse.
• Security — detect and prevent unauthorized access, attacks, and policy violations.
• Improve the Services — aggregated and de-identified analytics; debugging.
• Communicate with you — respond to support requests; send service notices; with your consent or where permitted, send product updates.
• Comply with the law — respond to legal requests, enforce our terms, exercise legal rights.

4. Legal bases (EEA / UK / Switzerland)

• Contract (Art. 6(1)(b) GDPR) — to provide the Services you purchased.
• Legitimate interests (Art. 6(1)(f)) — to secure and improve the Services, prevent fraud, and run minimal analytics. You can object at any time.
• Consent (Art. 6(1)(a)) — for non-essential cookies and direct marketing emails. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — accounting, tax, consumer-protection and information-security laws.

5. Sharing of personal information

We share personal information with the following categories of recipients, only as needed and under appropriate contractual safeguards:

• Payment & commerce: Shopify Inc. (checkout, order processing).
• Hosting & database: Supabase / its underlying cloud providers.
• AI inference providers: third-party large-language-model providers used to generate analyses; we do not allow them to train on your prompts.
• Email delivery: transactional email providers.
• Analytics & security: privacy-respecting analytics and error-monitoring tools.
• Professional advisors: lawyers, accountants, auditors, when necessary.
• Authorities: where required by law, court order or to protect rights, property and safety.
• Successors: in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

We do not sell personal information for monetary consideration. See "U.S. state privacy rights" below for how "sale" and "sharing" are defined under U.S. law and how to opt out.

6. International data transfers

We are based in the European Union and our customers are worldwide; personal information may therefore be transferred to and processed in countries other than your own, including the United States. Where we transfer data out of the EEA, UK or Switzerland, we rely on adequacy decisions where available, on the EU Standard Contractual Clauses (and the UK IDTA / UK Addendum), and on supplementary measures such as encryption in transit and at rest.

7. Retention

• Account data: while your account is active, then deleted or anonymized within 12 months of closure (longer where law requires).
• Order and tax records: 10 years (Italian/EU tax law).
• Scam-analysis history: while your account is active, or until you delete it.
• Support communications: up to 3 years.
• Cookies and analytics: see Cookie Policy.

8. Security

We use industry-standard measures including TLS encryption in transit, encryption at rest for the database, role-based access controls, row-level security, secret rotation, audit logs, and least-privilege server-side functions. No system is 100% secure; we cannot guarantee absolute security.

9. Your rights — EEA / UK / Switzerland

Subject to conditions in applicable law, you have the right to: access your personal information; correct it; delete it; restrict or object to processing; portability; withdraw consent; and lodge a complaint with your local supervisory authority (in Italy: Garante per la protezione dei dati personali; in the UK: ICO). To exercise these rights, email privacy@scdigitalsolutions.net.

10. U.S. state privacy rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or any other U.S. state with a comprehensive privacy law, you may have the following rights:

• Right to know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it.
• Right to delete personal information we collected from you.
• Right to correct inaccurate personal information.
• Right to portability of your personal information.
• Right to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information for money. We do not engage in cross-context behavioural advertising. We honour Global Privacy Control (GPC) signals where applicable.
• Right to limit use of sensitive personal information (CCPA/CPRA). We do not use sensitive personal information for purposes that require this right.
• Right to non-discrimination for exercising your rights.
• Right to appeal a denial of your request (Virginia, Colorado, Connecticut, Texas and others). Email privacy@scdigitalsolutions.net with the subject line "Privacy Appeal".

To submit a request, email privacy@scdigitalsolutions.net. We will verify your identity using information already in your account and respond within the timeframe required by your state law (typically 45 days). You may use an authorized agent; we may require proof of authorization.

"Shine the Light" (California Civil Code §1798.83): California residents may request information about disclosure of personal information to third parties for their direct-marketing purposes. We do not disclose personal information for third-party direct marketing.

11. Children

The Services are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us and we will delete it. We comply with the U.S. Children's Online Privacy Protection Act (COPPA).

12. Automated decision-making

The scam analyzer produces an AI-generated risk score. This is decision-support, not an automated decision producing legal or similarly significant effects on you within the meaning of Art. 22 GDPR. You can always disregard the output and reach out to us for human review at support@scdigitalsolutions.net.

13. Do Not Track

We do not respond to browser "Do Not Track" signals because no consistent industry standard exists. We do honour Global Privacy Control (GPC) where required by law.

14. Changes to this Notice

We may update this Notice from time to time. Material changes will be notified by email or by a prominent notice on the website. The "Last updated" date at the top reflects the latest revision.

15. Contact

SC Digital Solutions — Privacy: privacy@scdigitalsolutions.net — General: support@scdigitalsolutions.net.