This page explains what personal information Viva Peak LLC collects, why we use it, who we share it with, and how long we keep it. The business address is 30 N Gould St Ste N Sheridan, WY 82801. Contact us at privacy@getscamcheck.com.
Viva Peak LLC is the controller for the personal information we collect about people who use Get Scam Check. This means we decide why and how to use that information. Paddle is a separate controller for the buyer and payment information it collects when it sells a paid Get Scam Check service.
What we collect
What we collect depends on how you use the service:
- Website and report information. This includes the public link you submit, the website name, information visible on the page, where the link sends us, the check result, a report number we use inside our system, and any sharing setting you choose. Before we check or save the link, we remove everything after a question mark (?) or number sign (#).
- Account and sign-in information. This includes your email address, an account number we use inside our system, information that keeps you signed in, and the dates and times linked to your account.
- Purchase and delivery information.This includes Paddle's customer and order numbers, what you bought, whether a payment or plan is active, how many detailed reports you used, and any review by a person. Paddle, our payment company, receives your full card details. We do not.
- Store watches and alerts. If you watch a store, we save only the start of its web address, such as https://example.com. We do not save the page path, search details, or anything after a question mark (?) or number sign (#). We also save when checks run, whether they finish, important changes, and the alert choices you make.
- Family plan information.This includes your family group, your role, invitation status, and shared check totals. If you send an invitation, we use the invited person's email to send it. We do not show a family owner another member's private stores, watches, or reports unless that member chooses to share a report.
- Referrals and how people find us. We may save a random number, the first and last page used on our site, and short source or campaign names. We also save referral status and rewards. We do not put email addresses, full web links, private report keys, or referral cookies in analytics records.
- How the service is used. We save a few details about how people use the site. These can include when something happened, the page used, how someone reached us, the result shown, and whether an action worked. When we can, we hide your exact device and internet address behind a scrambled code. If you are signed in, a record may be linked to your account. A report record may also name the store.
- How fast the website works. Vercel Speed Insights tells us how quickly pages load and respond. It can receive the page path, time, country, browser, device type, and speed scores. We remove anything after a question mark (?) or number sign (#), hide report numbers, and send nothing from private report-sharing links. Vercel says this information is not tied to a visitor or internet address. We use it only to make the website faster.
- Messages you send us. This includes information in support, privacy, accessibility, report-correction, or other requests.
Do not submit password-reset links, payment links, private account links, or links with medical, money, or other private information. Do not submit another person's private information. Use only a public store page that anyone can open.
Where it comes from and why
We get information from:
- you;
- a person who invites you to a family plan;
- your browser or device;
- the public website you ask us to check;
- the companies that help us run the service; and
- records we make while running the service.
We use this information to:
- sign you in and apply check limits;
- open public pages and make and save reports;
- watch stores, find important changes, and send alerts;
- run family plans, invitations, and shared check limits;
- finish purchases and deliver reviews by a person when offered;
- let you share a report, give earned referral rewards, and answer your requests;
- stop misuse, find problems, and protect the service; and
- learn whether the main parts of the service work.
The checker opens the public page you submit. If the link moves to another page, it may follow it a few times. The checker does not sign in, add anything to a cart, or buy anything. It does not try to collect card details from the store.
When we check whether a link is on a known danger list, we send the cleaned public link to a safety service such as Google Web Risk. The service tells us whether the link appears on a known danger list. We remove everything after a question mark (?) or number sign (#) first.
When that check is off, we do not send the link to a safety service. The report says we could not finish that check.
Explanations written with AI
If we use AI to help write an explanation, we may send a short list of check results to OpenAI or another AI company. We do not send the full store page, account passwords, sign-in codes, or card details.
Fixed rules—not AI—choose the warning-sign points and result.
Why the law lets us use information
Some privacy laws ask us to name a legal reason for using personal information. The reason depends on the information and what we are doing with it:
- Providing the service or following our contract. We use information to sign you in, run a check you ask for, save and show your reports, complete a purchase, and provide paid features.
- Our legitimate interests. This is a legal term. It means we have a fair business reason to use information, and we must also think about your rights. We use this reason to keep the service secure, stop fraud and misuse, fix problems, answer support requests, and learn whether the main parts of the service work.
- Following the law. We may need information for taxes, accounting, payment disagreements, privacy requests, safety, or a lawful request from a government body.
- Your permission. We use consent only when we ask for it and the law requires it. You may take that permission back. We do not currently use marketing cookies or personal information for targeted ads.
More than one reason may apply. Contact us if you want to ask which reason applies to a particular use of your information.
Cookies and browser storage
Cookies and browser storage are small pieces of information a website saves in your browser.
- Necessary. A secure visitor cookie may stay for up to one year. It helps us apply the free guest limit and reopen a guest report in the same browser. Supabase also uses cookies to keep you signed in. Blocking these cookies may sign you out or stop a guest report from reopening.
- Measurement. Your browser may hold a random number used to count visits. Vercel Speed Insights receives the limited speed information described above. We use this information to learn whether the service works and to make the website faster, not to follow you across unrelated websites.
- Referrals. If you open a referral link, a signed cookie may stay for 30 days so we remember the first referral. It does not contain an email address, a full web link, or a private report key.
- Marketing. We do not use marketing cookies or ad trackers.
- Payment. Paddle may use its own cookies when you open payment or payment help. Paddle controls those cookies. Its privacy notice explains how it uses them.
You can block or clear cookies and browser storage in your browser settings. Clearing them may sign you out, remove a temporary or guest report, or make the service forget that you used a free guest check. If we add an optional cookie that needs your permission, we will ask before using it and give you a way to change your choice.
Who we share it with
We share information only when we need to:
- run the service;
- complete a purchase you ask for;
- protect users and the service;
- follow the law; or
- move information if another company buys or takes over all or part of the business.
The companies and people may include:
- Paddle, our merchant of record. Paddle sells the paid service, takes the payment, handles payment fraud checks, works out and pays transaction taxes, provides receipts or invoices, handles refunds, and manages paid plans when we offer them. We send Paddle the information needed for these jobs and receive customer, order, payment, refund, and plan status from Paddle. Paddle receives full payment-card details directly; we do not;
- Supabase and Resend, which help store data, sign you in, and send email;
- Vercel, which keeps the website online, records service errors, and measures how quickly pages load;
- Google Web Risk or another safety service, which checks known danger lists when that check is on;
- OpenAI or another AI company when we use AI to help write an explanation; and
- lawyers, accountants, government bodies, or people involved in a business sale when needed or required by law.
In the last 12 months, the information shared for these reasons may have included:
- account numbers and contact details;
- purchase and delivery details;
- submitted websites and service use;
- messages; and
- security information.
We do not publish private reports. A person who opened a paid detailed report may create a share link made just for that report and cancel the link later. Anyone with a working link can read the shared report.
People on a Family plan share seats and check limits. Each person still owns their own stores, watches, bought credits, and reports. The family owner can see who is in the group and shared totals, but cannot open another member's private store or report. A member must choose to share a report with the family.
Paddle decides how to use the buyer and payment information it collects for its own merchant-of-record duties. Read Paddle's privacy notice for those uses and for ways to contact Paddle about that information.
No sale or targeted ads
We do not sell personal information. We do not share it so ads can follow you across unrelated websites. We do not use it to choose ads made for you. Privacy laws may give “sell,” “share,” and “targeted ads” special meanings. Our promises cover those meanings too.
We do not place ad trackers on the site. We do not watch what you do on other websites to build a profile about you. The companies that help us run Get Scam Check do not use it to collect your information for ads that follow you around the web.
Your browser may send “Do Not Track” or “Global Privacy Control.” Those settings do not change this service because we already do not sell data or use it for targeted ads.
Before we make a major change to advertising, we will update this page and add any choices the law requires.
How long we keep it
We keep information only as long as we need it for the reasons above. We may need to keep it longer to follow the law, keep tax records, settle payment problems, stop scams, protect the service, or restore a backup:
- We keep submitted links and reports while needed for your report history, sharing, paid access, and account. We may also keep them until we finish a deletion request.
- We keep your store watches, check history, alert choices, and alerts while they are needed for your account and the features you use. You can pause or delete a watch at any time.
- We keep family membership, invitation, and report-sharing records while needed to run the family plan, protect each person's private information, and settle account questions.
- We keep account and sign-in records while your account is open. We may keep some longer to close the account or stop misuse.
- We keep payment, order, detailed-report use, and review-delivery records as needed for delivery, refunds, disagreements, taxes, accounting, and the law.
- We keep raw use and acquisition records for up to 180 days. After that, we delete them or remove details that point to a person.
- We keep deidentified daily group totals for up to 36 months. These totals help us understand groups of customers over time. They do not include account numbers, email addresses, full links, or referral cookies.
- We keep referral and reward records while needed to give or reverse a reward, stop misuse, handle a refund or payment dispute, and follow the law.
- We keep other security records while they help us stop scams and look into problems. We then delete them, combine them, or remove details that point to a person.
- Browser cookies and storage follow the times listed in the Cookies and browser storage section.
A deletion request may not remove extra safety copies, called backups, right away. Those copies are removed during the normal backup schedule. We use them only to recover from a serious service failure.
Your privacy rights
Your rights depend on where you live and which laws apply. You may be able to:
- ask whether we use your personal information;
- see it, fix it, delete it, or download a copy;
- say no when your information is sold, used for ads, or used by a computer to predict things about you or help make important decisions about you;
- limit how some private information is used; and
- ask us to look again if we say no.
We will not treat you unfairly for using a privacy right. We do not sell data or use it for targeted ads. We also do not let a computer alone decide whether you qualify for important things such as work, housing, or credit.
If UK or EEA privacy law applies to you
You may also have the right to ask us to limit how we use your information, move a copy to you or another service, object to some uses, or stop using information that relies on your consent. You may complain to the privacy regulator where you live. We usually answer a valid request within one month. The law may let us take longer or limit a right in some cases; if it does, we will explain when required.
If you are signed in, open account and privacy settings. There, you can download a file with your account records. You can also ask us to delete information that the law lets us delete, or cancel that request during the waiting period.
Asking for deletion does not delete data right away or cancel a payment or paid plan. After the waiting period, a person reviews the request. “Closed” means the review is finished, but we may still keep some records for the reasons in this policy.
Visit our privacy request page to fix information, ask about records outside your account, let a trusted helper with legal permission ask for you, or ask us to review a denied request. We answer within the time the law requires. We may keep a small record of the request.
Security
We use people, rules, and technology to protect the information we handle. We use encrypted HTTPS connections while information travels between your browser and the website. We use access controls designed to limit private account, report, payment, and admin records to the people and services that need them for their work. We also limit what we send to service providers to what they need for their job.
No online service can be completely safe from every attack. We do not promise perfect security.
If the law says we must report a data or security problem, we will tell the people and government bodies the law requires.
Children
Get Scam Check is not made for children under 13. We do not knowingly collect personal information from a child under 13.
If you are a parent or guardian and think a child gave us information, contact privacy@getscamcheck.com. We will look into it and delete the information where required.
Where information is handled
We run the service from the United States. The companies that help us may handle information in other countries. We require these companies to protect the information. The law may require this too.
If UK or EEA transfer rules apply and information is sent outside that area, a lawful transfer safeguard must be used. Depending on the company and country, this may be a government adequacy decision, approved contract terms such as standard contractual clauses, or another method the law allows. You may contact us to ask which safeguard applies to a particular transfer.
Changes to this policy
We will post changes here and change the date at the top. If a major change affects information we already collected, we may also tell you on the website or by email. We will ask for permission when the law requires it.
You can also read our Terms and important limits, Refund policy, and Accessibility statement.