Effective
Privacy notice
This notice explains what information Scam Case Builder handles, why it is used, and how to ask for help. Scam Case Builder is operated by Tech Tools Direct, LLC, Texas, USA. For privacy questions, contact support@techtoolsdirect.com.
Information you provide
When you create an account, our authentication service handles your email address, password, sign-in, and recovery requests. Optional email security also uses your verified email and security-challenge records. Never send your password or security codes to support.
Optional profile information can include your name, address, city, state or province, postal code, country or region, and phone number. You may leave these fields blank, and can clear a saved field in My Account.
We handle the values you check, such as domains, website addresses, email addresses, phone numbers, and wallet addresses, along with check times, results, source details, and operational records. Checks can create server-side records even if you do not sign in or choose to save them.
If you use saved features, we handle your inquiries, groups, private notes, case details, reviewed spreadsheet rows, uploaded files and file metadata. We also handle the messages and account requests you send us.
Enter only information you are allowed to use. Do not put passwords, wallet recovery words, payment-card details, sign-in links, or secret tokens into Check, notes, or uploads. A website address can itself contain private information.
How information is used
We use information to provide checks and explanations, save and organize your records, manage account access, process files, respond to support and data requests, investigate errors or misuse, and operate and recover the service.
Saved domain checks from active member accounts may contribute to a community activity count for the past 90 days. Each account counts once for a domain; the signed-in viewer is excluded. A count is shown only when at least three qualifying accounts remain. Names, account IDs, individual check dates, private notes and inquiry contents are not displayed in that count. The count is not proof of unique people, fraud, or safety.
Private saved records are not a public community posting. Authorized operators and service providers may need access to information to operate the service, process files, handle your request, or investigate an incident. Access controls reduce exposure; they do not mean nobody can ever access your records.
Outside providers and disclosures
Service providers support hosting, authentication, data storage, email delivery, monitoring and recovery. The implemented service uses Vercel, Supabase, Amazon Web Services, and Resend; protected operator recovery copies also use Microsoft OneDrive. The provider and information involved depend on the feature you use.
When a lookup is enabled and needed, the value being checked may be sent to an outside information provider. Implemented integrations include Google Web Risk for domains or website addresses, Twilio for phone information, domain-registration services for domain details, Blockstream for Bitcoin addresses, and PublicNode for Ethereum addresses. Sources may be disabled, unavailable, or served from stored results. This list does not promise every source is active for each check.
When available, contributions take place through Stripe-hosted checkout. Stripe handles payment information under its own notice. Authorized operators can view Stripe payment details, including payer email when Stripe provides it, date, amount, currency, refund status, and a payment reference. Deleting a Scam Case Builder account does not by itself erase Stripe records.
If we are required to disclose information by applicable law or a valid legal process, or need to address misuse or a security incident, the information disclosed will depend on the request and circumstances. This notice does not promise confidentiality from lawful legal process.
Following a link to another site takes you to that service, which has its own information practices. Operating and information providers may process data in countries other than where you live. Information is not necessarily stored or processed only in your country.
Encryption and its limits
Scam Case Builder uses HTTPS to protect information as it travels between your browser and the service. Supabase, our database and uploaded-file storage provider, documents encryption at rest and in transit for customer data. At rest means while information is stored; in transit means while it travels over a network.
Verified database recovery archives are also encrypted. This statement is about those protected service archives, not every file on your computer or every record held by an outside provider.
This is not end-to-end encryption in which only you hold the key. Scam Case Builder and authorized providers or operators can process information as needed to deliver features, check files, handle support requests, and operate or recover the service. Encryption does not verify the truth of a document or remove all risk of unauthorized access.
Scam Case Builder-generated PDF and CSV reports and private account ZIP downloads are not automatically password-encrypted. Protect downloaded copies on your device and review them before sharing. Clearing browser storage does not erase server records, and ordinary support email is not a secure upload channel for private evidence.
Retention and account deletion
Saved active-account information is kept to provide the service; the current release does not automatically erase saved accounts merely because they are inactive. Retention also depends on the record type, operational need, recovery arrangements, and applicable obligations.
You can request account deletion in My Account. Support reviews the request and coordinates fresh identity confirmation before processing. You can cancel before processing begins. Some processing steps cannot be reversed.
Once processed, ordinary-account deletion removes saved inquiries, checks, groups, private group notes and the sign-in account from the active service. File, case, reviewer-history and other affected records require their applicable ownership and support checks; do not assume a pending request has already removed them.
Restricted processing or recovery records, reviewed shared evidence, existing backups, copies you downloaded, and records held by outside providers may remain subject to their separate handling. Accounts with evidence-review history require separate support review.
This notice does not promise an automatic purge deadline or immediate erasure from every backup or outside provider. If you need details about a particular record or request, contact support.
Your choices and requests
You can edit or clear optional profile fields, download available saved reports, and use the private account download in My Account. Ordinary PDF and CSV reports exclude private group notes; the private account download is a separate feature and is not a promise to include every record held by every provider.
For help accessing, correcting, deleting, or otherwise exercising rights that apply to your information, use Account and Data Requests or contact support@techtoolsdirect.com. We may need to verify your identity before responding. Rights and exceptions depend on applicable law; this notice does not replace them.
Please do not email passwords, security codes, recovery words, or identity documents. Ask support for an appropriate next step if a request needs sensitive evidence.
Audience and changes
Scam Case Builder is intended for adults aged 18 and over, initially primarily in the United States. It is not intended for children. If you believe a child has provided personal information through the service, contact support so we can review the situation. An age policy does not mean that every visitor has undergone age verification.
This notice is effective 29 October 2026. We will update this page when the described practices change. Check the effective date for the current version.