Privacy Policy

Last updated: July 2025

1. Introduction

SAINT (“we,” “our,” or “us”) operates saintprotection.com (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, and what rights you have in relation to it. By using SAINT, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly to us, including:

  • Account information — your name and email address when you sign up or log in via OAuth (Google).
  • Scan profile data — personal information you submit for scanning, such as your full name, email address, home address, phone number, and any domains or usernames you provide.
  • Profile photos — selfie images you optionally upload to enable facial recognition scanning. These are stored locally in your browser and are never transmitted to our servers.
  • Payment information — billing is handled entirely by Stripe. We never store your card number, CVV, or bank details. We only retain a Stripe customer ID to manage your subscription.
  • Usage data — basic logs of how you interact with the Service (page visits, scan history) to operate and improve the platform.

3. How We Use Your Information

We use your information solely to provide and improve the Service:

  • To run privacy scans against third-party databases and AI training datasets on your behalf.
  • To send opt-out and data removal requests to third-party sites.
  • To manage your subscription and process payments via Stripe.
  • To send you scan reports, privacy alerts, and service-related communications.
  • To improve the accuracy and coverage of our scanning service.

4. We Do Not Sell Your Data

SAINT does not sell, rent, trade, or otherwise transfer your personal information to any third party for commercial purposes — ever. Your data is used exclusively to operate the privacy protection service you signed up for.

We do not share your personal information with advertisers, data brokers, marketing networks, or analytics companies. We do not use your scan profile data to train AI models or build advertising profiles. Our business model is based entirely on subscription fees — not on monetising your data.

5. How We Protect Your Data

All personal information you submit is encrypted at rest using AES-256-GCM encryption — the same standard used by financial institutions and government agencies. Data is transmitted exclusively over TLS 1.3 encrypted connections.

Our database infrastructure is hosted on isolated, access-controlled servers. Access to production data is strictly limited to authorised personnel and is logged. We conduct regular security reviews and follow OWASP security best practices.

While no system can guarantee absolute security, we take commercially reasonable measures to protect your information from unauthorised access, disclosure, alteration, or destruction.

6. Third-Party Services

We use a limited number of trusted third-party services to operate SAINT:

  • Stripe — payment processing. Stripe's privacy policy governs how they handle your billing information.
  • Neon / PostgreSQL — encrypted database hosting for your account and scan profile.
  • Vercel — serverless infrastructure for our application.
  • Google OAuth — optional sign-in. If you use Google sign-in, Google's privacy policy applies to their authentication service.

We do not share your scan profile data with any of these providers beyond what is necessary to run the Service.

7. Data Retention

We retain your account and scan profile data for as long as your account is active. If you cancel your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or billing compliance purposes. Aggregated, anonymised analytics data (with no personal identifiers) may be retained indefinitely.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to erasure — request deletion of your personal data (GDPR Article 17).
  • Right to rectification — request correction of inaccurate data.
  • Right to portability — request your data in a portable format.
  • Right to opt out of sale — we do not sell your data; this right is inherently satisfied.

To exercise any of these rights, contact us at spgadvertisingservices@gmail.com. We will respond within 30 days.

9. Cookies

SAINT uses strictly necessary session cookies for authentication and to maintain your login state. We do not use advertising cookies, tracking pixels, or cross-site analytics cookies. The TikTok pixel we use for marketing measurement is loaded only on public-facing marketing pages and does not have access to your scan profile or account data.

10. Children's Privacy

SAINT is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our website. Continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at spgadvertisingservices@gmail.com.