SpoofProof
SpoofProof
SpoofProof USA, Inc., a Delaware corporation ("SpoofProof," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding that information. We are committed to collecting only what we need and protecting everything we hold.
| Data | Purpose |
|---|---|
| Name, email address | Account creation, communication, billing |
| Password (stored as hash only) | Account authentication |
| Phone number | Identifying the line to protect |
| Payment information | Processed by PayPal, we do not store card numbers |
| Voice greeting / BackFire recording | Service delivery (played to callers) |
| 4-digit access code | Caller verification (final defense layer) |
| Contact form messages | Customer support |
| Data | Purpose |
|---|---|
| IP address | Security, rate limiting, fraud prevention |
| Browser type, device info | Ensuring compatibility and debugging |
| Pages visited, timestamps | Improving our website and service |
When our system processes an incoming call to your protected number, we log limited metadata including the caller's phone number (or spoofed number), timestamp, and the outcome of our filtering decision (blocked or passed). We do not record, store, or listen to the content of any phone call. The only audio we store is the greeting and BackFire clips that you record through your account.
We use your information to:
We believe this list is as important as what we do:
We share your information only in the following limited circumstances:
We protect your data with:
No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you by email within seventy-two (72) hours of becoming aware of the breach, and we will notify applicable regulatory authorities as required by law.
We retain your account information for as long as your account is active. After you cancel your subscription, we retain your account data (name, email) indefinitely so that you can reactivate your account in the future without creating a new one. If you request full deletion of your data, we will comply within thirty (30) days, subject to any legal retention obligations. Call metadata logs are retained for up to twelve (12) months for service quality and guarantee claim purposes, then permanently deleted.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at spoofproofcontact@gmail.com. We will respond within thirty (30) days.
If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion of your data, and to not be discriminated against for exercising your privacy rights. We do not sell personal information as defined under the California Consumer Privacy Act. To submit a request, email spoofproofcontact@gmail.com with the subject line "CCPA Request."
SpoofProof does not knowingly collect personal information from children under thirteen (13). Our accounts must be created by individuals who are at least eighteen (18) years old. If we learn that we have collected data from a child under thirteen without parental consent, we will delete it promptly. Contact us if you believe we have inadvertently collected such data.
Our website uses session cookies solely for authentication (keeping you logged in) and security (CSRF protection). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not track you across other websites.
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or your account dashboard at least thirty (30) days before they take effect. The effective date at the top of this page will be updated accordingly.
For privacy questions or data requests, contact us at spoofproofcontact@gmail.com.