Privacy Policy

Last updated: 2026-06-09 · Operated by KurashSoftware LLC (Reno, Nevada, USA).

🛡️ The short version. We don't store the content of anything you scan. Not your emails, texts, DMs, screenshots, transcripts, or model outputs. We process, give you an answer, and the content is gone. We keep your account email and a verdict tag per scan so your dashboard and our billing work.

1. Who we are

BS Protector (“the Service”) is operated by KurashSoftware LLC, a Nevada limited liability company. Contact: support@kurashsoftware.com.

2. What we collect

Account info: your email address, an encrypted password (via AWS Cognito), and a server-issued account ID.
Subscription info: if you upgrade, Stripe stores your payment method. We receive a customer ID and subscription status from Stripe, not your card number.
Usage metadata: per scan we store the feature used (scan_text, scan_image, transcript, verify_person), the verdict (safe/suspicious/scam/unclear), a risk score (0-100), token counts (for billing), the AI model name, and a timestamp. We do not store the content of what you scanned or the model's detailed output.
Server logs: standard request logs (IP, user agent, status code) retained for 30 days for security and debugging.

3. What we do NOT collect or store

The text of any email, message, DM, or transcript you paste into a scanner.
The image bytes of any screenshot you upload.
The full model output / red-flag explanations after the response leaves your browser.
Live call audio. The live-coach feature transcribes locally in your browser via the Web Speech API; only the text transcript is sent to our server per coaching update, and we discard it after the update.
Third-party tracking pixels, ad networks, or analytics that share data with brokers.

4. Who processes data on our behalf

Amazon Web Services (AWS) — hosting (Amplify), database (RDS Postgres), authentication (Cognito), email delivery (SES), DNS (Route 53). United States.
Anthropic — the AI inference layer. We send the text/image you submit to Anthropic's Claude API to generate a verdict. Per Anthropic's commercial API terms, inputs and outputs are not used to train their models. United States.
Stripe — subscription billing and payments. We never see or store your card. United States.

We do not sell or share your data with anyone else.

5. Cookies

We use one HTTP-only session cookie (bsp_session) to keep you signed in. It contains a signed JWT with your account ID and email. We do not use tracking cookies, ad cookies, or third-party analytics cookies.

6. How long we keep data

Account record: until you delete the account.
Subscription record: until you cancel + 90 days (for refund / tax records).
Per-scan verdict + risk score: kept for your dashboard history; you may delete it via account deletion.
Server logs: 30 days.

7. Your rights

Wherever you live, you can:

Access a copy of the data we hold about you.
Correct incorrect data (email yourself a change at any time).
Delete your account and all associated data within 7 days of request.
Export your account data in JSON.
Object / opt-out at any time by deleting the account.

Email support@kurashsoftware.com from the email on your account to exercise any of these rights.

8. Children

BS Protector is not intended for users under 13. If we learn we've collected data on a child under 13, we'll delete it.

9. Changes to this policy

If we make material changes, we'll email account holders at least 14 days before the change takes effect.

10. Contact

support@kurashsoftware.com · KurashSoftware LLC, Reno, Nevada, USA.

See also: Terms of Service · Help & FAQ