Privacy

IGNIS by Saphira Privacy Policy

Last updated: [DATE]

Canonical URL: https://askignis.com/privacy

This IGNIS by Saphira privacy policy explains what information we collect, why, and the choices you have. We wrote it in plain language. If something is unclear, email [PLACEHOLDER: support email].

1. Who we are

IGNIS by Saphira ("IGNIS") is operated by Saphira Digital LLC, a California limited liability company, [PLACEHOLDER: mailing address] ("we," "us"). The product lives at https://askignis.com/. We help families check suspicious texts, emails, and links for scams.

2. Who uses the service

• Account Holder – usually an adult child who signs up and pays.
• Protected Member – usually an older parent who sends us suspicious messages.
• Both must be 18 or older.

3. What we collect

Messages may contain other people's information. A forwarded email or screenshot may show names, phone numbers, emails, account numbers, or other details about someone else (for example, the scammer, a friend, or a bank). We use that only to check for scams and keep it under the retention rules in our Data Retention Policy. Please black out or crop passwords, full card or bank numbers, Social Security numbers, and medical details before sending. We never need them.

We do not link to bank accounts and do not ask for your passwords.

4. How we use information

• Check messages and give a verdict.
• Send alerts and the weekly scam briefing to the Account Holder.
• Bill and manage subscriptions.
• Keep the service safe and prevent abuse.
• Improve our scam detection using de-identified patterns (for example, "fake toll texts are rising"). [BUSINESS DECISION: whether to use raw message content to improve the service; if yes, require clear opt-in.]
• Follow the law.

5. AI vendors and other service providers

We use outside companies to run parts of the service, under contracts that limit how they use your data: - AI providers ([AI VENDOR(S)]) analyze message content to help produce verdicts. We configure them so they do not use your content to train their models and, where offered, use zero-data-retention or short retention settings. See our AI Use Disclosure. - SMS/email providers ([e.g., TWILIO / EMAIL PROVIDER]), cloud hosting, payment processing, customer support tools, and analytics.

6. We do not sell your data

We do not sell personal information and do not "share" it for cross-context behavioral advertising (as those terms are used in California law). We do not sell or share mobile numbers or SMS opt-in data with third parties for their marketing.

We may disclose information: (a) to service providers as above; (b) if required by law or valid legal process; (c) to protect someone's safety or prevent fraud; (d) in a merger or sale of the business, under this policy's protections; (e) with your permission. [BUSINESS DECISION: whether to report scam indicators (e.g., scam phone numbers/URLs, not your identity) to the FTC, carriers, or anti-phishing groups.]

7. Family access and the older adult's consent

• The Account Holder can see alerts, verdicts, and summaries for the Protected Member. [BUSINESS DECISION: whether Account Holder sees full message content or only summaries.]
• The Protected Member must agree to join and to this sharing. We confirm by text to their own phone (see SMS Consent policy).
• The Protected Member can ask us at any time to stop sharing with the Account Holder or to leave the service.
• If an Account Holder has legal authority (such as power of attorney or guardianship), we may ask for proof. [LAWYER] Confirm handling of members with diminished capacity.

8. Children

The service is not for children. We do not knowingly collect information from children under 13 (per the Children's Online Privacy Protection Act, COPPA) or allow anyone under 18 to have an account. If you believe a child gave us information, contact [PLACEHOLDER: support email] and we will delete it.

9. Security

We use encryption in transit and at rest, access controls, and limited staff access. No system is perfectly secure. If a data breach affects you, we will notify you as state breach-notification laws require.

10. How long we keep data

See our Data Retention Policy. In short: message contents are kept for [90] days by default, then deleted.

11. Your privacy rights

Depending on where you live, you may have the right to: - Know/access what we have about you. - Correct it. - Delete it. - Get a copy (portability). - Opt out of sale, sharing, targeted ads, and certain profiling (we don't do these). - Limit use of sensitive personal information (we use it only to provide the service). - Not be treated differently for using these rights.

These rights come from laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and state laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon, and others. [LAWYER] Confirm which state laws apply given company size/revenue thresholds; many apply only above certain thresholds.

How to ask: email [PLACEHOLDER: support email] with subject "Privacy Request," or [WEB FORM / TOLL-FREE NUMBER — LAWYER: CCPA generally requires two methods, often including a toll-free number]. We will verify your identity before acting. You may use an authorized agent. If we deny your request, you can appeal by replying to our decision; if still denied, you may contact your state Attorney General.

California notice at collection: categories collected are listed in Section 3; purposes in Section 4; retention in Section 10. We have not sold or shared personal information in the past 12 months.

12. Changes

We'll post updates here and email Account Holders about important changes before they take effect.

13. Contact

Saphira Digital LLC, [PLACEHOLDER: mailing address] · [PLACEHOLDER: support email]

Related: Data retention · How we use AI · Text message consent

Before launch this must be reviewed by a qualified professional. [PLACEHOLDER: legal review]