The emails you check are sensitive business correspondence. This page says plainly what we store, for how long, and what we will never do with it.
What we collect
- Content you submit for analysis: pasted text, uploaded .eml files, and mail sent to the check addresses. Attachment contents are never stored, only their names, types, and sizes.
- Account data: your email address, handle, plan, and channel profile numbers you enter.
- Check results: the verdict, evidence signals, and scores for your history.
- Operational data: rate-limit counters, aggregate usage metrics, and security logs.
Retention
- Raw email content is kept for 90 days, then reduced to the evidence signals and a redacted summary. The full text is deleted.
- Your check history (verdicts and evidence) stays until you delete it or your account.
- Deleting your account wipes your content, history, and profile.
What we never do
- We do not sell your data. To anyone, in any form.
- We do not use your emails to train AI models.
- We do not publish your submissions. Scam database entries are written editorially from patterns, never from your private content.
- Share pages you create are redacted by default: names, emails, and amounts are stripped before anything gets a link, and share pages are excluded from search engines.
Processors we rely on
Supabase hosts the database (EU region, Frankfurt). Vercel serves the site. Resend delivers and receives email. Anthropic processes email text to write explanations, under terms that do not permit training on it. Lemon Squeezy processes payments; we never see card numbers. Each processor receives only what its job requires.
Analysis lookups
To assess an email we look up public records about the sending domain (registration data, mail records) and resolve shortened links through our own guarded fetcher. These lookups contain domains from the email, never your identity.
Your rights
You can export or delete your data from your account, or by writing to privacy@legitsponsor.com. If you are in the EU or UK, that covers your access, rectification, erasure, and portability rights; complaints can also go to your local supervisory authority.
Contact
privacy@legitsponsor.com