Privacy Policy
This policy explains what Sawtooth Technologies LLC, doing business as ScamPrep (“ScamPrep,” “we”), collects on getscamprep.com and in the ScamPrep service, and what we do with it. The short version, which the rest of this policy keeps:
- We never sell your information. Not to advertisers, not to data brokers, not to anyone.
- We never access bank accounts or money. ScamPrep has no connection to any participant’s financial accounts, and drills never collect real financial information.
- Participants control their own data. Anyone enrolled can see, pause, or delete what we hold about them — regardless of who pays.
What we collect
If you join the early-access list: your name, email, which plan you were looking at, how you found us (for example, a link from Facebook), and anything you choose to tell us — such as who you hope to enroll or what worries you. Free-text answers are read by a person and used only to understand what families need.
If you book a call: the scheduling details and answers you provide through our booking page (Cal.com).
If you subscribe: billing name, email, and plan, through our payment processor Stripe. We never see or store full card numbers.
If you are an enrolled participant: your name, the contact channel you consented to (such as an email address), your responses to practice drills (for example, whether a drill was reported, ignored, or clicked), coaching interactions, and the progress summaries that make up your Resilience Report.
On the website: we use Cloudflare Web Analytics, a privacy-respecting, cookieless service that counts visits without identifying or tracking you. We do not use advertising trackers.
What drill data is — and what it is never used for
Drill responses are educational progress data: they record how training is going, the way a language app records completed lessons. We use them to adjust drill difficulty, coach, and produce Resilience Reports.
We do not use drill data to diagnose, screen for, or infer any medical or cognitive condition; we do not build health, credit, insurance, or employment profiles; and we never share drill data with advertisers, data brokers, insurers, or financial institutions.
Who sees a participant’s information
- The participant — always.
- Family members the participant approves receive the Resilience Report. Sharing is a participant choice, revocable at any time.
- Partner organizations (such as an advisory practice or community that sponsors enrollment) receive aggregate, anonymized statistics only — never an individual’s drill responses — unless the participant has expressly approved individual sharing.
- Service providers who process data on our instructions: Stripe (payments), Formspree (forms), Google Workspace (email), Cloudflare (website hosting and analytics), Cal.com (scheduling). Each receives only what its job requires.
- Legal requirements: we disclose information if the law compels it, and we will tell you when we are permitted to.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
How long we keep it
Early-access list entries: until launch or until you ask to be removed. Subscriber and participant data: for the life of the subscription and up to 12 months after, then deleted or anonymized — sooner on request. Aggregate statistics that identify no one may be retained.
Your choices and rights
Anyone — participant, subscriber, or list member — can email hello@getscamprep.com to: see what we hold about them, correct it, delete it, or withdraw from drills or emails. Participants can also stop drills directly from any drill message. We honor these requests regardless of which state you live in, and we respond within 30 days. We will never treat you differently for exercising them.
Security
Data lives in access-controlled systems (Google Workspace, Stripe, Formspree, Cloudflare) protected by strong authentication, and we follow the principle of least access. No system is perfectly secure; if a breach affects your data, we will notify you promptly as the law requires.
Children
The Site and Service are not directed at anyone under 18, and we do not knowingly collect children’s data.
Changes
If we materially change this policy, we will email subscribers and post the change here at least 30 days before it takes effect. We will never retroactively weaken the three promises at the top without your consent.
Contact
Sawtooth Technologies LLC (d/b/a ScamPrep)
c/o Northwest Registered Agent LLC
418 Broadway, Ste N
Albany, NY 12207
hello@getscamprep.com
Effective date: August 9, 2026.