Privacy Policy

What we collect

• Account information — your email address and, if you add them, a display name and profile details.
• Alert content — the alert text you paste and any screenshots, PDFs or files you upload for analysis.
• Usage analytics — pages visited, features used and basic device/browser information, used to run and improve the service.
• Payment status — payments are processed by Stripe. We receive your plan and subscription status; we never see or store your full card number.
• Phone number and SMS records — only if you opt in to SMS alerts or the SMS assistant: your verified number, which features you chose, a record of your consent (date, consent wording, IP address and browser), and a log of messages with a redacted preview. Messages you text to the assistant are analyzed like any other alert.

How alert text is protected before AI processing

Before alert text is sent to an AI model, CyberPocket automatically redacts common secrets and personal data such as passwords, API keys, tokens, email addresses and similar identifiers. Redaction reduces, but cannot guarantee removal of, every sensitive value, so please avoid pasting data you are not permitted to share.

Who processes your data

• The alert analyzer and related AI features are processed by Anthropic (Claude).
• Some other features are processed through the Lovable AI gateway.
• Hosting, database and authentication are provided by our cloud infrastructure providers; payments by Stripe; email delivery by our email provider; text messages and phone verification by Twilio.

We do not sell your personal information, and we do not use your alerts to train AI models.

Mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

See the SMS program terms for details of the messaging program.

Retention and deletion

We keep account data while your account is active. Saved analyses, cases and uploads stay until you delete them or close your account. You can delete individual items in the app or ask us to delete your account and associated data by emailing privacy@cyberpocket.org. Some records (for example billing records) may be kept longer where the law requires.

Security

Data is encrypted in transit and at rest, access is restricted by account and workspace, and uploads are kept in private storage. No system is perfectly secure; if you believe you have found a vulnerability, please use our responsible disclosure process.

Children

CyberPocket is not directed to children under 13, and we do not knowingly collect personal information from them.

Contact

Questions or requests: privacy@cyberpocket.org. See also our Terms of Service.