Terms & Agreement

1. What Data We Collect

When you upload a .eml file, we process the raw email content including headers, body text, URLs, attachments, and embedded images solely for threat analysis. We collect your account email address, login timestamps, and usage logs.

2. Why We Collect It

Email content is processed exclusively for phishing and threat detection. Usage logs are maintained for legal compliance under BSA 2023 and to improve detection accuracy using anonymized aggregated data. You may opt out of model improvement use by contacting us.

3. PII Handling — DPDP Act 2023

All personally identifiable information detected in your email — Aadhaar numbers, PAN numbers, phone numbers, email addresses, dates of birth, bank account numbers, IFSC codes, and card numbers — is automatically redacted before storage. This complies with the DPDP Act 2023, Article 4 (Data Minimisation). The original unredacted content is never stored on our servers.

4. Blockchain Anchoring

The SHA-256 hash of your forensic report is anchored permanently on the Ethereum Sepolia public blockchain. Blockchain records cannot be deleted once anchored. This satisfies BSA 2023 — Section 63 and Indian Evidence Act 1872 — Section 65B requirements for electronic records admissibility.

5. Data Retention

Analysis reports are retained for 90 days then automatically deleted. Audit logs are retained for 1 year as required by law. Blockchain hash anchors are permanent. You may request early deletion by contacting us — the blockchain hash anchor remains even after report deletion.

6. Access Tiers & Data Visibility

• Individual: Only you can see your reports.
• Organization: All org members can view all analyses under the org account.
• Cyber Professional: Extended forensic data access. All queries permanently logged without exception.

7. Prohibited Use

You must not use EmailGuard AI to test phishing infrastructure you operate, to analyze emails of individuals without their consent, or to attempt to extract information about other users' analyses. Violations result in immediate account suspension and may be reported to law enforcement.

8. Disclaimer

EmailGuard AI is a threat detection tool and does not guarantee detection of all phishing attempts. Results are advisory. We are not liable for damages resulting from reliance on analysis results. The system achieves 93% accuracy on our test dataset; real-world performance may vary.

9. Contact

For data deletion, access inquiries, or Cyber Professional applications: founder@emailguardai.me. Response within 7 business days.