Privacy Policy
This policy explains what Sawtooth Technologies LLC, doing business as ScamPrep (“ScamPrep,” “we”), collects on getscamprep.com and in the ScamPrep service, and what we do with it. The short version, which the rest of this policy keeps:
- We never sell your information. Not to advertisers, not to data brokers, not to anyone.
- We never access bank accounts or money. ScamPrep has no connection to any participant’s financial accounts, and drills never collect real financial information.
- Participants control their own data. Anyone enrolled can ask to see or delete their information, or stop practice, regardless of who pays. We retain consent records for five years after a participant leaves, as explained below.
What we collect
If you join our Stay in touch list: your name, email, which plan you were looking at, how you found us (for example, a link from Facebook), and anything you choose to tell us, such as who you hope to enroll or what worries you. Free-text answers are read by a person and used only to understand what families need.
If you book a call: the scheduling details and answers you provide through our booking page (Cal.com).
If you subscribe: billing name, email, and plan, through our payment processor Stripe. We never see or store full card numbers.
If you enroll someone: the details you give us about each person, which are their name, email, cell phone number (optional), and relationship to you, plus anything you choose to share to tailor their practice, such as which scams worry you. Please don’t include bank names, account details, or health information.
If you are an enrolled participant: your name, the contact channels you consented to (such as an email address and cell phone number), a record of your consent (which channels and when), your responses to practice drills (for example, whether a drill was spotted, ignored, clicked, replied to, or answered), coaching interactions, and the progress summaries that make up your Resilience Report.
On the website: we use Cloudflare Web Analytics, a privacy-respecting, cookieless service that counts visits without identifying or tracking you. We do not use advertising trackers.
How we use drill data
Drill responses are educational progress data: they record how training is going, the way a language app records completed lessons. We use them to adjust drill difficulty, coach, and produce Resilience Reports.
We do not use drill data to diagnose, screen for, or infer any medical or cognitive condition; we do not build health, credit, insurance, or employment profiles; and we never share drill data with advertisers, data brokers, insurers, or financial institutions.
Who sees a participant’s information
- The participant always has access.
- Family members the participant approves receive the Resilience Report. Sharing is a participant choice, revocable at any time.
- The person who enrolled a participant is told when the participant says yes, and if they stop practice, so billing can be adjusted.
- Partner organizations, such as an advisory practice or community that sponsors enrollment, receive aggregate, anonymized statistics only. They do not receive individual drill responses.
- Service providers who process data on our instructions: Stripe (payments), Formspree (forms), Google Workspace (email and records), Cloudflare (website hosting and analytics), Cal.com (scheduling), and our phone service provider and mobile carriers (practice texts and calls). Each receives only what its job requires.
- Legal requirements: we disclose information if the law compels it, and we will tell you when we are permitted to.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
How long we keep it
Stay in touch list entries: until you ask to be removed. Subscriber and participant data: for the life of the subscription and up to 12 months after, then deleted or anonymized, sooner on request. Consent records (who agreed, to which channels, when, the wording, and any withdrawal) are kept for 5 years after a participant leaves, because we may need them to show that practice was consented to. Aggregate statistics that identify no one may be retained.
Your choices and rights
Any participant, subscriber, or list member can email hello@getscamprep.com to: see what we hold about them, correct it, delete it, or withdraw from drills or emails. Participants can also stop drills by replying to any ScamPrep email or with the link in their ScamPrep emails. We honor these requests regardless of which state you live in, and we respond within 30 days. We will never treat you differently for exercising them.
Security
Data lives in access-controlled systems (Google Workspace, Stripe, Formspree, Cloudflare) protected by strong authentication, and we follow the principle of least access. No system is perfectly secure; if a breach affects your data, we will notify you promptly as the law requires.
Children
The Site and Service are not directed at anyone under 18, and we do not knowingly collect children’s data.
Changes
If we materially change this policy, we will email subscribers and post the change here at least 30 days before it takes effect. We will never retroactively weaken the three promises at the top without your consent.
Contact
Sawtooth Technologies LLC (d/b/a ScamPrep)
c/o Northwest Registered Agent LLC
418 Broadway, Ste N
Albany, NY 12207
hello@getscamprep.com
Effective date: October 28, 2026.