Aegis Privacy Policy

Aegis provides AI-assisted scam analysis, URL checks, password-breach checks, and identity-protection features. This Privacy Policy describes how we handle information when you use the features currently available in Aegis.

Information we collect

Clerk handles account sign-in and profile information. Aegis stores the Clerk user identifier with account-linked records, such as saved reports, subscription state, identity records, exposure findings, alert preferences, and security activity. Email identities added for Identity Protection are encrypted and represented by a derived lookup value so Aegis can find existing records; a display form is also retained. Support messages you send to us include the information in your message and the contact details you provide. Aegis does not collect browser form entries, VPN traffic, or financial-account activity.

The website loads Google Analytics only after you choose Accept analytics. If you have not chosen or you reject, the Google Analytics script is not loaded and Aegis does not send Analytics page views or named events. The choice is stored in this browser until you change it; use Cookie settings in the website footer or Account → Privacy & Data to change it. Changing your choice stops future Aegis Analytics activity but cannot recall information already sent. After acceptance, Aegis sends page views for an approved, high-level page path and named events for pricing-page views, upgrade and checkout actions, scan completion or quota events, and Individual or monitoring feature use. Aegis does not send account identifiers, email addresses, payment details, scan text, screenshot content, full URLs, query strings, fragments, or record identifiers in these events. Google may still receive standard browser, device, and approximate-location signals and may use identifiers or cookies according to the Analytics property settings. Aegis has not verified the current property’s user- and event-data retention setting. Google documents 2- or 14-month options for these data in GA4 properties; that setting does not describe Aegis account, scan, or identity-record retention. See Google’s Analytics data-retention details and how GA4 page views are measured.

For scam checks, text you submit and an optional image are sent to OpenAI through its API to generate an assessment. Aegis requests that Responses API results not be stored as application state; that setting is not a promise that the provider retains no data. OpenAI says API content may appear in abuse-monitoring logs for up to 30 days by default, subject to exceptions and account-specific controls. See OpenAI API data controls.

Offer Reality Check is a separate manual flow. It sends only the text or screenshot you select, after per-check consent; recognized email addresses, phone numbers, payment-card numbers, passwords, and access codes are redacted from text before analysis. Screenshot content is not automatically redacted, so crop or blur private details before upload. Offer checks use the same Aegis analysis limits, are not saved in Protection Activity, and are not independently verified against outside sources. No page content or background browsing is collected for this feature.

Signed-in checks submitted through the web Scan form, including message and screenshot checks, are saved with their report in Protection Activity. Signed-in Android link, message, and screenshot checks are also saved automatically; guest checks are not added to account history. Some web URL-check flows offer a separate save choice. A saved report can include submitted text or a checked URL and the resulting assessment; production screenshot checks save the report, not the uploaded image. Ordinary saved reports do not have an automatic expiry in the current application. You can delete a saved report from web Activity. The Android app currently has no per-report delete control, but reports saved by Android are available in the same account history on the web. Browser Protection has separate settings: connected threats and warnings are saved by default; saving other analyzed sites is optional, and saved low-risk browser activity expires after 30 days. These browser reports may include the sanitized URL and assessment. You can also request account deletion as described below.

If a supported Android app version includes optional Notification Protection, you may separately opt in and grant Android Notification Access; only after both steps does Aegis screen bounded text from new notifications on your device for a small set of possible scam patterns. Notification content can include messages, one-time codes, or banking and other private information, so the app explains this before opening Android Settings. Aegis does not transmit or store raw notification text, app names, sender information, one-time codes, or private content. A temporary in-memory summary contains only broad signal categories, counts, and times; it expires within 24 hours and is cleared when you turn screening off, sign out, or Android stops the app process. Screening is limited, may miss scams, and does not mean a notification is safe. You can turn it off in Aegis at any time; revoking Android Notification Access is a separate system setting. iOS does not include this feature.

Automatic website protection in the optional Aegis Browser Protection extension is on by default. For supported pages, it sends the current website URL to Aegis for a check; the URL can include its path and query components. Before a check is sent, the extension removes URL credentials and fragments and redacts recognized sensitive values in paths or query parameters. It cannot identify every possible sensitive value, so other URL data may still be transmitted. Turn off Automatic website protection in extension Settings to pause automatic checks; manual checks remain available. If you choose Report website, the extension submits that URL and its report category to Aegis. The extension does not read browser cookies or form values, or collect full page HTML or unrelated browsing history. Its bounded scan cache and temporary exceptions are stored locally in the browser and can be cleared by the user. If you connect the extension to your Aegis account, threats and warnings are saved privately to that account by default. You may choose to save all analyzed sites; low-risk browser activity saved through that option expires after 30 days. The connection uses a one-time code and a separate revocable browser credential, not your browser cookies or Aegis sign-in session. Disconnecting the browser revokes that credential; if the browser is offline, Aegis disables local authenticated use immediately and retries server-side revocation.

How we use information

We use information to provide saved scam analyses and identity monitoring, respond to support requests, maintain service security, and improve the reliability of Aegis. Browser Protection check URLs are not sent to Google Analytics. We do not sell personal information.

How we share information

Information is sent to a provider when needed for the feature: Google Analytics receives the limited data described above only after consent; OpenAI receives submitted scam text or an optional screenshot for analysis; Google Web Risk (when configured) receives URLs for reputation checks; HIBP receives the verified email address used for a breach search; Clerk handles sign-in; Razorpay handles subscription checkout; and Resend sends verification and opted-in security-alert emails. Aegis no longer sends domains to VirusTotal. Existing saved reports created before that change may retain historical domain-reputation results; removing the integration does not alter saved history. Extracted URLs may be sent to Google Web Risk when configured; the full submitted message is not sent to that reputation lookup. The optional password exposure check runs in your browser and sends a partial password hash to HIBP, never the password itself. Aegis does not control all provider-side logs or retention settings, and we have not verified account-specific retention controls for these integrations; consult the linked provider privacy and retention information before relying on a provider-specific deletion period. Google Analytics documents its GA4 retention choices above; Resend states that its email and log data is retained for 30 days on Free, Pro, and Scale plans in its security and retention documentation. Razorpay processes Aegis Individual subscription payments through checkout. Aegis stores operational subscription identifiers and status needed to provide entitlements; Aegis does not receive or store raw card numbers. We do not sell personal information.

Identity monitoring and breach information

If you verify an email identity, have an eligible Aegis Individual account, and turn on Continuous Identity Monitoring, Aegis checks that email with Have I Been Pwned (HIBP) in a scheduled daily run when the identity is due; a successful check is not repeated until at least 24 hours later. The full verified email address is sent in the HIBP breach-search request. Aegis stores returned breach names, dates and exposed data categories, along with check times, alert records, and related timeline entries, in your account until you remove that identity or request account deletion. Removing an identity in Aegis also removes its associated exposure, alert, delivery, and timeline records. HIBP says search results are not explicitly stored, and its privacy policy separately describes operational server logs that may be retained for up to 31 days. HIBP’s handling is governed by its own Privacy Policy and API documentation. Breach databases are incomplete; no match does not establish that an email was never exposed.

Your choices

You can delete individual saved reports from web Activity. The Android app does not currently provide a per-report delete control. From either web or Android, you can remove a monitored identity; Aegis then deletes that identity’s associated exposure findings, alerts, alert-delivery records, and timeline events. To request deletion of your Aegis account and associated application data, email support from the address associated with your account and complete the ownership check described on our Account Deletion page. This is a verified support request, not an in-app automatic deletion. After verification, we aim to complete it within 30 days. The request covers account-linked Aegis data, including saved reports and identity records, subject to applicable retention requirements. Some billing, transaction, security, or request records may be retained where needed for legal, accounting, dispute-resolution, security, or fraud-prevention purposes; data in provider systems and routine backups may follow separate provider retention periods. We do not promise immediate deletion from backups or third-party systems. You can manage marketing preferences through the links included in our emails.

Contact us