Privacy PolicyPolítica de privacidad

Using Check

Uso del verificador

Summary: The checker works without an account. Message text is processed but its body is not saved to the check database; some minimal records can be kept.Resumen: El verificador funciona sin cuenta. El texto se procesa, pero su contenido no se guarda en la base de datos de verificaciones; se pueden conservar algunos registros mínimos.

Check works without signing in. A random anonymous account ID supports authorization and usage limits; it does not itself contain a name or email. Submitted content is sent to Viper’s server. Core scam assessment uses Viper-operated server logic and governed threat intelligence. For message text, a small open-weight language model (gte-small) also runs inside Viper’s own backend process and gives one additional signal; it cannot turn a result into “Scam” on its own. Check content is not sent to an external model provider. We do not sell submissions, use them for advertising, or train our own models on them.

Raw message text is processed without saving the body to the check database. This does not mean every check leaves no record. Signed-in checks can save a minimal history entry: an identifier such as a domain or phone number, a display summary, assessment, reasons and time. Canonical analysis can retain a content hash, normalized hostname, risk evidence and pseudonymous actor reference. Explicit non-navigation URL analysis can retain the submitted URL; Browser Guard navigation checks do not retain the full URL in that analysis record.

Caller lookup reads existing number information. Reporting a number is a separate action that stores the reported number and an abuse-prevention reporter reference for review. Reports do not automatically become verified threat evidence. Safe Preview and sender verification can save signed-in summaries and normalized identifiers. File triage processes uploaded bytes without saving the file; it returns structural findings and a file hash. Watches, recovery cases and intentionally shared checks retain the information needed for those features until removed or account deletion, subject to the exceptions below. There is no blanket automatic expiry for all these records.

Back to contentsVolver al índice

Photos and screenshots you submit

Fotos y capturas de pantalla

Summary: Images you choose are checked for Content Credentials and are not saved by the image checker.Resumen: Las imágenes que usted elige se revisan en busca de Credenciales de contenido y el verificador de imágenes no las guarda.

Images you explicitly choose for analysis are sent to our server for supported Content Credentials checks. Pixel-based model analysis and OCR are currently unavailable; missing credentials do not establish that an image is authentic. Viper’s image-check handler does not save the uploaded image after processing. This is separate from a bug report you deliberately send with a screenshot, which is retained with that report. Our infrastructure providers process requests as described below. Avoid submitting account numbers, medical records or other unnecessary sensitive content.

Back to contentsVolver al índice

Your account

Su cuenta

Summary: Use Viper with an anonymous ID, or sign in with Apple or Google. There is no email-and-password sign-in.Resumen: Use Viper con un identificador anónimo, o inicie sesión con Apple o Google. No hay inicio de sesión con correo y contraseña.

Account features use a shared Viper identity. The iPhone app is not yet publicly available; its supported candidate features are described here for beta users. By default that account is the same kind of anonymous ID — no name or email needed. You may optionally sign in with Apple or Google to use the same identity across supported Viper surfaces. Your provider may share your name and email. Email/password sign-in is not offered, and your email is not used for marketing.

Back to contentsVolver al índice

Signing in with Apple or Google

Inicio de sesión con Apple o Google

Summary: Signing in with Apple or Google identifies you; it gives Viper no access to your email, calendar or other account data. Gmail and Google Calendar connections are not offered.Resumen: Iniciar sesión con Apple o Google le identifica; no le da a Viper acceso a su correo, calendario ni otros datos de su cuenta. No se ofrecen conexiones con Gmail ni Google Calendar.

You can use Viper with an anonymous ID, or sign in with Apple or Google. When you sign in, your provider tells Viper who you are and may share your name and email address; Viper keeps them with your account so the same identity works across supported Viper surfaces. Signing in does not give Viper access to your email, calendar, contacts or other data in your Apple or Google account.

Gmail and Google Calendar connections are not offered. An earlier connection to them has been retired: Viper does not start it, exchange its authorization codes, or send email or change calendar events through it. Previously granted Google permissions are not revoked automatically; you can revoke them in your Google Account connections. Deleting your Viper account removes its associated connection records from the active account database.

Back to contentsVolver al índice

What our server keeps

Lo que guarda nuestro servidor

Summary: The server keeps usage counts, plan status, optional items you turn on, and account and family records.Resumen: El servidor guarda conteos de uso, el estado de su plan, las opciones que usted activa y los registros de su cuenta y su familia.

• Usage counts against your ID, to enforce free and paid limits.
• Subscription and purchase status if you buy a paid plan or Premium Credits — the plan, its status and renewal date, and your credit balance. Stripe processes web payments and Apple processes App Store purchases; Viper does not receive full card details. Managing web billing opens Stripe’s hosted portal.
• Memory — only if you turn it on: short facts you choose to share that Viper may reuse later. Off by default; nothing is kept while off; erased when you delete your account.
• Profile and family data: your optional display name, household membership, invitations and supported protection policies are shared account records used by web and iPhone. A browser-only safe word stays in the current tab’s memory and is not persisted. A household safe word is encrypted in our managed database Vault and revealed only to current members after a recent provider sign-in. This is not end-to-end encryption: authorized backend and database operators remain within the trust boundary. The iPhone’s separate local safe word uses device-only Keychain storage; older app builds may use legacy local storage until updated.
• Account activity: registered devices, saved check summaries, watches and recovery cases support your account experience. Trusted Circle relationships and checks you intentionally share are separate from household management; neither becomes threat evidence.
• Optional items you enable — an email, a push token for alerts, a Google connection, address preference — each kept only while the feature is on.

Back to contentsVolver al índice

Threat records and intentional reports

Registros de amenazas y reportes

Summary: Security findings and reports you make can be kept. They are not treated as independent evidence.Resumen: Se pueden conservar hallazgos de seguridad y los reportes que usted hace. No se tratan como evidencia independiente.

Security analysis may retain a hostname, findings and a pseudonymous attribution reference. An explicit report can retain the reported identifier and reporter reference for abuse prevention and review. Consumer history, feedback, household state and Trusted Circle sharing are not independent corroboration and do not automatically authorize shared blocking.

Back to contentsVolver al índice

Chrome Browser Guard

Browser Guard para Chrome

Summary: Browser Guard sends the full address of pages you open for checking, never page content. Hostname-level records can be kept.Resumen: Browser Guard envía la dirección completa de las páginas que abre para revisarlas, nunca su contenido. Se pueden conservar registros a nivel de dominio.

For a supported top-level navigation, Browser Guard sends the navigation URL to Viper’s analysis endpoint. The extension does not strip the path, query string or fragment before sending it. URLs can contain sensitive information; do not assume this is a hostname-only request. The extension does not read page-body text, extract the tab title, or send a page referrer as part of that check. It has no page-content script.

The server derives the hostname and checks known threat records, lookalike patterns and available domain-registration data. A recently registered domain alone is not proof of a scam. Blocking follows the server’s governed enforcement decision; not every warning blocks navigation. Optional AI-site blocking uses the extension’s supported domain list.

Allowed and blocked navigation assessments can retain hostname-level security records, timestamps, findings and pseudonymous actor references. The navigation analysis record does not save the submitted full URL or page content. These security records have no verified blanket automatic expiry. Operational request/error logs may also be retained by hosting providers under their policies; we do not promise zero diagnostic retention.

On your device, a hostname decision cache lasts up to about an hour. Recent blocked-host entries expire after about a day and are bounded in number. Allowlist choices and installed blocking rules remain until removed, replaced or the extension’s data is cleared. Clearing extension data does not erase server records.

The Chrome Web Store’s Web history category covers navigation URLs processed for protection. The listing also shows a Website content category. Despite that category, the extension does not read, extract or send page content; it sends only the navigation URL described above.

Back to contentsVolver al índice

Blocking scam and AI sites

Bloqueo de sitios de estafa y de IA

Summary: The downloadable profile uses Quad9 directly. The iPhone app’s DNS Shield (limited beta) uses Viper’s resolver and may keep blocked domains only. A household organizer’s AI-app block works only through DNS Shield; Browser Guard has its own optional AI-site setting for the browser it is installed in. Viper does not currently provide universal detection or blocking of AI-generated content. Some checks can inspect supported provenance signals, such as Content Credentials. Broader detection and filtering of AI-generated content is still being developed.Resumen: El perfil descargable usa Quad9 directamente. El DNS Shield de la app para iPhone (beta limitada) usa el servidor DNS de Viper y solo puede guardar los dominios bloqueados. El bloqueo de apps de IA que fija el organizador del hogar solo funciona con DNS Shield; Browser Guard tiene su propio ajuste opcional para bloquear sitios de IA en el navegador donde está instalado. Viper no ofrece por ahora detección ni bloqueo universal de contenido generado con IA. Algunas verificaciones pueden revisar señales de procedencia compatibles, como Content Credentials. La detección y el filtrado más amplios de contenido generado con IA siguen en desarrollo.

Viper offers two kinds of DNS protection, described separately below. Every resolver, including the one your phone uses today, necessarily sees the names it is asked to resolve; what matters is what is done with them.

Downloadable profile and Android setup (live): Quad9

The standalone download profile on viperai.co/protect uses Quad9 directly rather than the account-linked Viper resolver. The Android Private DNS setup on the same page also uses Quad9 (dns.quad9.net). Viper does not receive those lookups. Apps using other domains, their own DNS, or a VPN may bypass these restrictions.

Quad9 states that it does not store individual user IP addresses or construct per-user browsing histories; its policy describes aggregate security telemetry, including truncated network information. See Quad9’s privacy policy.

DNS Shield in the iPhone app (beta): Viper’s resolver

If you switch on Viper’s protection (the “DNS Shield”) in the iPhone app, the phone you set it up on sends its address lookups — the step that turns a name like example.com into a number — to Viper’s own resolver rather than your carrier’s. That is how Viper refuses a known scam site, and, on a Family plan, the AI apps and sites a parent chooses to block: the lookup is turned away, so connections using those restricted domains can be blocked. Apps using other domains, their own DNS, or a VPN may bypass these restrictions.

A household organizer’s choice to block AI apps and sites works only on household phones using DNS Shield in the iPhone app, which is in limited beta and not publicly available. The downloadable profile and the Android setup do not block AI apps or sites. Browser Guard has a separate, optional setting, off by default, that blocks a built-in list of AI chatbot sites in the Chrome browser it is installed in; it is switched on in that browser, not by the household organizer, and it does not block apps. Viper does not currently provide universal detection or blocking of AI-generated content. Some checks can inspect supported provenance signals, such as Content Credentials. Broader detection and filtering of AI-generated content is still being developed.

For the Viper DNS resolver specifically, allowed lookups are not written to its account activity table. Resolver and infrastructure processing is distinct from the Browser Guard assessment records described above. When you are signed in and a blocked scam or AI domain is turned away, Viper may keep that domain and a daily count against your account — or, on a Family plan, against the family, so the organizer’s “what was blocked” view can show it. That is the blocked domain only: never the sites you were allowed to visit, not sold or used for advertising.

If Viper’s resolver ever cannot answer — an outage, or a network fighting it — the lookup falls through to Quad9, the same privacy-respecting non-profit resolver Viper’s own resolver builds on, so your internet keeps working. This adds no new company and exposes nothing a resolver does not already see; it is intended to preserve connectivity, but no fallback can guarantee availability.

Back to contentsVolver al índice

How our website is measured

Cómo medimos nuestro sitio web

Summary: First-party analytics with a random, resettable ID. No third-party trackers, no fingerprinting, no content.Resumen: Analítica propia con un identificador aleatorio que se puede restablecer. Sin rastreadores de terceros, sin huellas digitales y sin contenido.

To understand how many people reach viperai.co and whether the site is working — how many visit, which pages they read, whether the free checker completes — we use our own first-party, privacy-preserving analytics. There is no Google Analytics, no advertising SDK, and no third-party tracker; the only network call our measurement makes is to Viper’s own first-party ingestion endpoint, which runs on Cloudflare.

What it records: a random, resettable ID stored by your browser (it is not a fingerprint, carries no name or email, and is not derived from your device), a session ID that resets after 30 minutes of inactivity, the coarse type of page you’re on (for example “home” or “pricing” — never the full address or its contents), a broad device class (mobile, tablet, or desktop), your country (from your network, nothing finer), the bare domain of the site that referred you, acquisition-source and bounded campaign tags, and which product actions occurred (such as starting a check or viewing pricing). When you are signed in, the server can associate these first-party events with your verified account ID; anonymous tokens are not used for that account attribution. IP-derived, salted rate-limit identifiers protect the ingestion endpoint.

What it never records: the contents of anything you check or type, the specific URLs you visit, your name, email, or phone, any device or browser fingerprint, any advertising identifier, and it never follows you across other websites. Clearing your browser’s site data resets the local IDs; it does not erase previously recorded events. Account deletion unlinks the account ID from retained analytics rows. Event records have no verified blanket automatic expiry.

Back to contentsVolver al índice

What we never do

Lo que nunca hacemos

Summary: No selling data, no advertising, no cross-site tracking, no background access to your photos or contacts.Resumen: No vendemos datos, no hay publicidad ni rastreo entre sitios, y no accedemos en segundo plano a sus fotos ni contactos.

• No selling of data, no advertising, no advertising or fingerprinting IDs, no cross-site tracking, no third-party analytics SDKs. (We do measure our own website with first-party, privacy-preserving analytics — described just above.)
• No background access to your photo library or address book. Photos and screenshots are processed when you select and submit them. The iPhone scam-area feature can request location permission when you choose to use it; it uses reduced-accuracy location and Apple geocoding to show local context. You can decline or revoke that permission.
• Viper does not train its own models on your conversations or checks. Infrastructure-provider processing and retention are described below.

Back to contentsVolver al índice

Not for protected health information

No es para información de salud

Summary: Viper is not HIPAA-certified. Don’t paste medical records.Resumen: Viper no cuenta con certificación HIPAA. No pegue historiales médicos.

Viper is a consumer tool and is not HIPAA-certified. Please don’t paste medical records or other protected health information into it.

Back to contentsVolver al índice

Viper Watch (Pro and Family)

Viper Watch

Summary: Watch stores what you choose to watch, re-checks it about once an hour and shows changes in the app.Resumen: Watch guarda lo que usted elige vigilar, lo vuelve a revisar aproximadamente cada hora y muestra los cambios en la app.

When you choose to watch something, Viper stores what you asked it to watch with your account: a website (its address only, never the full link you pasted), a sender’s email address or a phone number. About once an hour it re-checks that item against the same sources a check uses: its list of known scam and phishing sites, impersonation checks and confirmed Viper intelligence. Viper does not visit the website and never reads or watches your messages. It keeps the latest assessment, when it last checked, and a notification when something meaningfully changes. Stopping a watch is in Watching; deleting your account removes all of it.

Alert emails are not available yet; Watch alerts appear in the app. If email alerts are switched on later, they go to the address your sign-in provider shared with Viper, only while email alerts are on. They name the item you chose to watch and what changed, never the content of a message, and contain a one-tap link to turn them off. Resend delivers these emails and processes your address and the alert to do so. At most five alert emails are sent per day.

To measure how well checks work, Viper counts check outcomes per day by verdict and category (for example “caution, toll or fine”). These counts contain no content, account, identifier or link.

Back to contentsVolver al índice

Deleting your data

Eliminación de sus datos

Summary: Delete account removes your account data through a server process. Some records can remain.Resumen: Eliminar la cuenta borra los datos de su cuenta mediante un proceso del servidor. Algunos registros pueden conservarse.

If you have an active web subscription, deleting your account first stops it renewing. You then choose: keep access until the end of the period you have already paid for (or your trial), after which your account and data are deleted automatically; or delete now, which ends the plan immediately without a refund for the rest of the period and deletes your account and data right away. While a deletion is scheduled you can keep your account instead. Stripe keeps the billing records it is legally required to keep.

Delete account uses Viper’s server deletion process to remove your authentication account and associated active profile, usage, personal device/pairing records, history, watches, recovery cases, notifications and submitted bug reports, including their attached screenshots. Completion is confirmed only after the server operation succeeds. Signing out, uninstalling or clearing browser data is not a request to delete server data.

Deletion is not an immediate purge of every copy everywhere. Shared household records needed by remaining members, separately governed security/report records, legally required billing records, provider logs and backup copies may remain under their applicable purposes and retention schedules. Copies already shared with another person may remain with that person. We cannot promise immediate permanent erasure from backups or third-party systems. Contact privacy@viperai.co for a deletion request or questions about retained records.

Back to contentsVolver al índice

Service providers and model processing

Proveedores de servicios

Summary: Named infrastructure providers process requests. No external AI provider handles your checks.Resumen: Los proveedores de infraestructura indicados procesan las solicitudes. Ningún proveedor de IA externo maneja sus verificaciones.

Vercel hosts the website and Safe Preview connection service, processing visitor requests and related network data. An explicit Safe Preview request sends the submitted destination URL (including its query string) and your Viper session credential to that service for authorization. Target websites receive fixed technical request headers, not your Viper credential or browser cookies. The connection service does not consume page bodies or write submitted URLs or credentials to application logs; hosting-provider operational retention still applies. Supabase hosts authentication, databases, functions and stored account/report data. Cloudflare runs Viper’s DNS infrastructure and the first-party endpoint that receives this website’s analytics, where it also assigns the country described above; Quad9 provides upstream or standalone DNS resolution as described above. Apple provides supported sign-in, native services such as geocoding, and existing in-app billing. Google provides optional sign-in. Legacy calendar/email grants may remain in your Google Account until revoked, as explained above. Stripe supports existing web billing infrastructure; new public web purchases are not currently offered.

Viper performs core scam assessment using Viper-operated server logic and governed threat intelligence. Message wording signal: when you check message text, an open-weight embedding model (gte-small) runs inside Viper’s backend function, on our Supabase-hosted runtime, and a small scoring layer Viper trained on Viper-written examples turns it into one signal. The text is processed in memory for that request only; the model step does not store or log it, and it is not sent to any outside AI service. That signal can raise a quiet result to “Be careful” and say so; it can never produce a “Scam” verdict by itself or lower other evidence. No external model provider processes current Check, image, conversation or recovery requests. OCR and pixel-based analysis are unavailable. No provider fallback is enabled. Cloud speech is also unavailable; supported native clients can use the device voice.

Viper-operated does not mean on-device or that Viper owns the hosting hardware. Supabase hosts backend processing and account data, and Vercel serves this website and the Safe Preview connection service. The storage and operational-log qualifications in this policy still apply. We do not use submissions to train models. If optional model processing is introduced, its scope and retention will be disclosed before activation.

Infrastructure provider policies: Vercel and Supabase. Previously submitted content may remain subject to the policies and retention obligations that applied when it was processed; removing an integration does not retroactively erase a provider’s records.

Back to contentsVolver al índice

iPhone app (beta)

App para iPhone (beta)

Summary: The beta app has Protection, Check, Family and Learn. Bug reports you send are kept until you delete your account.Resumen: La app beta tiene Protección, Verificar, Familia y Aprender. Los reportes de errores que envía se guardan hasta que elimine su cuenta.

The iPhone app is not yet publicly available. This section collects what applies to the beta app.

What the beta app does

• Protection. If you turn on DNS Shield, the app sets up an on-device connection that sends the phone’s address lookups to Viper’s resolver, as described in Blocking scam and AI sites. Call blocking and text filtering use iOS settings that you turn on yourself.
• Check. Messages, links, files and photos you choose are checked as described in Using Check and Photos and screenshots you submit. Photos come only from the picker, when you choose one.
• Family. Household membership, invitations and the household safe word work as described in What our server keeps. The app’s separate local safe word is stored in the device Keychain.
• Learn. Scam guidance. The optional local scam-area feature asks for location permission only when you choose to use it, uses reduced-accuracy location and Apple geocoding to show local context, and you can decline or revoke that permission.
• Notifications. If you allow them, the app registers a push token so Viper can send you alerts; it is kept only while notifications are on.

Reports you send from the app

• Bug reports you send from inside the iPhone app — including a picture of the app screen. If you take a screenshot while using the app, Viper offers a “Report a problem” sheet. It draws its own picture of the Viper screen you were on — not your photo library, and never anything outside the app — and attaches it so we can see what went wrong. The sheet shows you that picture before you send, and nothing is sent unless you tap Send report. On updated iPhone builds, Family-screen reports omit the picture. Older builds may attach it; review the sheet and never include a safe word. When attached, the picture is part of the report: if you would rather not send it, tap Cancel. We store the picture and your note in our Supabase-hosted backend, and both are deleted when you delete your account. We keep them until then so we can reproduce the bug.

Earlier test versions (historical)

• Earlier test versions included a chat assistant, which is no longer part of the app. If you used its optional cross-device sync, synced conversations were stored only as encrypted ciphertext, alongside your account ID, a conversation ID and an update time; Viper does not hold the passphrase needed to decrypt them. They remain until you delete your account, which deletes them.
• Replies from that assistant that tripped our safeguards, or that you reported, may have been logged for review.

Back to contentsVolver al índice

Children

Menores de edad

Summary: Viper is for ages 13 and up.Resumen: Viper es para mayores de 13 años.

Viper is rated for users 13 and up and is not directed at children.

Back to contentsVolver al índice

Changes & contact

Cambios y contacto

Summary: The app tells you before a material change applies. Questions go to privacy@viperai.co.Resumen: La app le avisa antes de que se aplique un cambio importante. Las preguntas van a privacy@viperai.co.

If this policy changes materially, the app will say so before the change applies. Questions: privacy@viperai.co.

Back to contentsVolver al índice