Privacy Policy

Effective August 16, 2026

What FraudClient processes

We process business account information, identifiers submitted for screening or reporting, report narratives, risk signals, watchlist matches, service activity, and limited security information such as the connecting IP address.

How identifier matching works

Identifiers are transmitted to FraudClient over HTTPS. The service normalizes them and creates deterministic SHA-256 values used to find matching reports and watchlist entries. Hashing is pseudonymization, not encryption, and guessable identifiers may be susceptible to comparison attacks. New watchlist entries retain the hash and identifier type rather than the plaintext identifier.

Who can access information

Query and report details are restricted to authenticated users and authorized integrations. A company can access its own query records; administrators may access information when needed for moderation, security, support, and legal compliance. Report information may be shared with authorized FraudClient participants as described in the Terms.

Security and retention

We use access controls, TLS, secure session cookies, rate limiting, audit controls, and other safeguards. We retain data as needed to provide fraud screening, resolve disputes, prevent abuse, and meet legal obligations. No online system can be guaranteed completely secure.

Your choices

You may request correction or deletion of eligible account information and may dispute reports through the available removal workflow. Some records may be retained for security, fraud prevention, legal, or contractual reasons.

Contact

Use the support page or community forum for privacy questions and requests.