1. Information We Collect

• ✓Account information: name, email address, and password when you register
• ✓Payment information: billing details processed securely through Stripe. Warnvo does not store your credit card number or payment credentials.
• ✓Documents and files: bills, receipts, contracts, screenshots, and other documents you upload for analysis
• ✓Text input: messages, scam text samples, or other content you paste or type into the Service
• ✓Communications: messages you send to our support team
• ✓Usage data: pages visited, features used, scan types run, timestamps
• ✓Device information: browser type, operating system, IP address
• ✓Cookies and similar tracking technologies to maintain your session and improve the Service

2. How We Use Your Information

• ✓Provide, operate, and improve the Service
• ✓Analyze documents, bills, receipts, and messages using our ShieldEngine™ agents
• ✓Generate dispute filings and consumer protection reports on your behalf
• ✓Process payments through Stripe
• ✓Send transactional emails (account confirmation, password reset, scan results)
• ✓Respond to your support requests
• ✓Monitor for fraud, abuse, and security threats
• ✓Comply with applicable laws and regulations

3. Document and File Processing

When you upload a document or file for analysis, it is transmitted securely to our servers and processed by ShieldEngine™. Documents may be temporarily retained to complete your analysis and generate results. We do not sell, license, or share your uploaded documents with third parties for their own purposes. You may request deletion of your scan history and associated files at any time through your account settings.

4. Gmail Autopilot — Email Monitoring

• ✓If you choose to connect your Gmail account to the Autopilot feature, Warnvo requests read-only access to your Gmail inbox using Google OAuth 2.0. We do not request permission to send, delete, or modify emails.
• ✓Data accessed: Warnvo reads email headers (sender, subject, date) and email body text solely to determine whether an email appears to be a bill, invoice, or financial document. Only emails that match our bill-detection criteria are processed further.
• ✓Data processed: Emails identified as potential bills are transmitted to our ShieldEngine™ analysis system. The email subject, sender, and a text excerpt (up to 2,000 characters) are used for analysis. Attachments (PDF or image files) may be uploaded to our secure cloud storage for scanning.
• ✓Data not accessed: Warnvo does not read, store, or process personal emails, social messages, promotional emails, or any email that does not match bill-detection criteria.
• ✓Storage: Processed email content is stored only as part of your scan history, which you can delete at any time from your account settings. Raw email data is not stored beyond what is needed to complete the scan.
• ✓Token security: Your Gmail OAuth tokens are encrypted using AES-256-CBC before storage. Tokens are never shared with third parties.
• ✓Revocation: You may disconnect Gmail at any time from your Account page. Disconnecting immediately revokes Warnvo's access and deletes your stored OAuth tokens.
• ✓Google API compliance: Warnvo's use of Gmail data is limited to the purposes described above and complies with Google API Services User Data Policy, including the Limited Use requirements.

5. How We Share Your Information

• ✓We do not sell your personal information.
• ✓Service providers: third-party vendors who help us operate the Service (hosting, email delivery, payment processing, cloud storage). These providers are contractually required to protect your information.
• ✓Stripe: for payment processing. Stripe's privacy policy governs their handling of your payment data.
• ✓Law enforcement or legal process: when required by law, court order, or to protect the rights and safety of Warnvo or others
• ✓Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections

6. Data Retention

We retain your account information for as long as your account is active. Scan history and results are retained to provide the Service and may be deleted by you at any time. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

• ✓Access the personal information we hold about you
• ✓Correct inaccurate information
• ✓Delete your account and associated data
• ✓Opt out of marketing communications
• ✓Data portability (export your scan history)
• ✓To exercise these rights, contact us at [email protected] or through your account settings.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. Warnvo does not sell personal information. To submit a request, contact [email protected].

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately at [email protected].

10. Security

We use industry-standard security measures including 256-bit encryption in transit and at rest, secure cloud infrastructure, and access controls to protect your information. No system is 100% secure. In the event of a data breach affecting your information, we will notify you as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: Warnvo LLC · [email protected] · warnvo.com