⚠️

DRAFT — Pending Legal Review

This document is a draft currently under attorney review. Content and effective date are subject to change before final publication.

Privacy Policy

Effective Date:[Insert Date] · Company: SecureFi, Inc.

Overview

SecureFi.AI respects user privacy and is designed to provide confidence-based risk guidance, source verification support, threat awareness, AI-assisted advisory support, and recovery documentation while limiting unnecessary data collection.

This Privacy Policy explains what information SecureFi.AI collects, how we use it, how we protect it, when we share it, how long we retain it, and how users can request access, correction, or deletion.

SecureFi.AI is designed around data minimization. Users should submit only the information needed to evaluate a concern.

Information We Collect

2.1 Account Information

Name
Email address
Phone number, if provided
Login information and authentication information
Plan or subscription status
Billing status
Communication preferences
Organization or household association, if applicable
Account settings and onboarding status

2.2 Check-In Content

Text, descriptions, messages, emails, voicemail transcripts, AI answers, social media content, app store links, website links, phone numbers, source details, financial request descriptions, family concerns, or other information submitted by the user for analysis.

2.3 Context Information

Whether the check-in is for the user or someone they help
Whether the item involves money, identity, credentials, urgency, family, AI output, financial requests, minor safety, app installation, data breach, source verification, privacy concern, or other risk categories
User-provided notes or clarifying answers
Situation type selections and risk category selections
User profile signals such as state, general household profile, privacy tags, family plan status, or optional interest categories

2.4 AI Advisor Information

AI Advisor messages and conversation history
Current session context
Prior check-in summaries used for Advisor context
Threat alerts or sources included in Advisor context
AI Advisor usage counts
Token usage and cost logs
Plan-based Advisor access or entitlement status

2.5 Evidence Pack Information

Incident summaries and incident dates
Amounts lost or at risk, if provided
Payment methods, if provided
Phone numbers, emails, URLs, app store links, app names, developer names, wallet addresses, callback numbers, or other contact information related to an incident
Report target selections, bank call scripts, and report summary language

2.6 Usage and Technical Information

Device type, operating system, browser type
IP address
Session identifiers
Pages visited, features used, time of access
Error logs
Interaction patterns relevant to product improvement or safety monitoring

2.7 Payment Information

Billing and payment information is handled by a third-party payment processor. SecureFi.AI may store subscription status, plan tier, billing period, and related subscription metadata but does not store full credit card numbers, bank account numbers, or payment instrument details.

2.8 Subscription and Founder Status

Plan tier and billing period
Founding member or promotional status
Subscription events
Trial status and trial end date

How We Use Information

To provide, operate, and improve SecureFi.AI
To process and analyze check-in submissions
To deliver AI Advisor responses
To manage accounts, subscriptions, and billing
To provide Evidence Pack and recovery documentation features
To display relevant threat alerts and source information
To personalize the user experience where permitted and appropriate
To monitor for abuse, fraud, security incidents, and safety risks
To comply with legal obligations
To communicate about accounts, service changes, and security matters
To evaluate and improve product accuracy, safety, and performance
To support user requests, including access, correction, and deletion requests

How We Share Information

SecureFi.AI does not sell user-submitted personal check-in content as part of its core business model.

SecureFi.AI may share information in the following circumstances:

With service providers who assist with hosting, databases, AI processing, analytics, payments, email, security, abuse prevention, communication, storage, transcription, or other services, under appropriate data processing terms.

With law enforcement, government agencies, or courts when required by law, court order, valid legal process, or to protect the safety of users, third parties, or the public.

With successors in connection with a merger, acquisition, asset sale, or similar business transaction, subject to appropriate notice.

In aggregate or de-identified form that does not identify individual users.

With organizational sponsors, to the extent described in the Terms of Use and any applicable organizational agreement — limited to seat status, subscription status, aggregate usage, and account administration information, and not extending to individual check-in content, AI Advisor conversations, or Evidence Packs without user authorization.

Data Minimization

SecureFi.AI is designed around data minimization. Users should submit only the information needed to describe the concern they want evaluated. Users should not submit passwords, MFA codes, full Social Security numbers, full account numbers, intimate images, explicit content, child sexual abuse material, or unnecessary sensitive information.

SecureFi.AI may provide guidance or reminders about minimizing sensitive content in submissions.

Data Retention

SecureFi.AI retains account information while accounts are active and for a reasonable period after account closure as required for legal compliance, fraud prevention, security, billing records, backup recovery, and operational continuity.

Check-in content, AI Advisor conversations, and Evidence Pack content may be retained for a period appropriate to the product's safety, improvement, and legal compliance purposes.

Users may request deletion of personal information as described in User Rights below.

User Rights

Depending on applicable law, users may have the right to:

Access personal information SecureFi.AI holds about them. Correct inaccurate personal information. Request deletion of personal information. Opt out of certain uses of personal information. Withdraw consent where processing is consent-based. Lodge a complaint with a data protection authority.

To submit a request, contact: [Insert Contact Email]

SecureFi.AI will respond as required by applicable law. Some requests may be limited by legal obligations, security requirements, fraud prevention, operational necessity, or the rights of others.

Cookies and Tracking

SecureFi.AI may use cookies, local storage, session tokens, and similar technologies to operate the service, maintain sessions, support authentication, monitor performance, and improve the product.

SecureFi.AI does not currently use third-party advertising trackers or sell user data to advertising platforms. SecureFi.AI may use analytics providers subject to appropriate data processing agreements.

Children's Privacy

SecureFi.AI is not directed to children under 13. SecureFi.AI does not knowingly collect personal information from children under 13 without parental consent. If SecureFi.AI becomes aware that a child under 13 has provided personal information without appropriate consent, SecureFi.AI will take steps to delete such information.

SecureFi.AI may include Minor & Teen safety content and guidance intended for parents, caregivers, or adults assisting minors, not for direct use by children under 13.

Security

SecureFi.AI uses reasonable technical and organizational measures to protect information. No system is perfectly secure. Users are responsible for maintaining the confidentiality of their account credentials.

If SecureFi.AI becomes aware of a security incident affecting personal information, SecureFi.AI will respond as required by applicable law and notify affected users as appropriate.

Third-Party Services

SecureFi.AI may link to or integrate with third-party tools, official sources, government agency resources, or other services. SecureFi.AI is not responsible for the privacy practices of third-party services. Users should review applicable privacy policies before sharing information with any third party.

Changes to This Policy

SecureFi.AI may update this Privacy Policy. We will provide notice of material changes as appropriate. Continued use after changes become effective means you accept the updated Policy.

SecureFi.AI will not materially expand use of previously collected personal information without appropriate notice or consent where required.

Contact

For privacy questions, access requests, correction requests, deletion requests, or complaints:

[Insert Contact Email] SecureFi, Inc. [Insert Mailing Address]